Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a39c4916-d280-3db9-8d45-5b63bb04856b.roa
File:                     a39c4916-d280-3db9-8d45-5b63bb04856b.roa (raw, json)
Hash identifier:          xF/0ym7fxpBQ8mXqOc+hiZQaOQAV6vvXJzgU+s/i2SI=
Subject key identifier:   85:57:6E:36:22:0D:AC:9D:B8:D0:B9:78:7E:E7:2E:79:6A:2C:CE:0D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BAE9B5DD56AF18A3A5380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a39c4916-d280-3db9-8d45-5b63bb04856b.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.89.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:ae:9b:5d:d5:6a:f1:8a:3a:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=4fc0fad5-091d-456c-9fba-1cec78b7ae07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4c:3d:7d:25:c3:6c:96:40:24:d3:71:2e:32:
                    a2:af:7d:cc:83:c4:e1:28:47:35:f6:da:4c:e7:97:
                    2b:44:78:8d:29:cb:31:49:78:44:a9:d8:c3:41:6e:
                    28:e8:a2:20:60:39:0b:43:6c:6c:5c:c5:fb:35:dd:
                    a8:59:39:de:2d:63:04:1f:95:31:1b:24:a6:df:d8:
                    cc:5b:0b:fa:5e:3c:55:20:53:b9:c4:ca:5f:cb:85:
                    29:ff:62:5a:4f:15:19:16:2c:5e:5b:c7:8f:65:34:
                    9d:63:ec:d9:fe:e6:4c:fa:5d:8f:94:80:c7:de:a9:
                    c7:8c:93:f6:46:e0:00:b1:86:38:ac:9d:12:a1:a4:
                    25:a4:ea:a5:a9:75:f3:43:2e:a8:79:6f:dd:01:07:
                    5a:66:c7:b8:b8:f4:89:b2:36:8d:30:32:c8:32:22:
                    4a:34:1d:21:33:06:dc:7a:5e:42:16:97:91:5f:f1:
                    5d:42:3c:c6:06:58:89:c4:57:27:50:a8:38:c8:20:
                    89:fa:fc:e3:b2:76:5b:fc:2d:ab:e3:b2:ee:87:33:
                    9e:fd:55:d7:e1:de:b6:75:93:b9:02:c1:a6:97:0a:
                    73:7e:e3:7e:3e:f0:39:da:19:1a:84:19:e1:10:31:
                    a2:3a:e9:16:8d:e3:ef:4d:a7:55:d1:28:68:68:04:
                    97:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:57:6E:36:22:0D:AC:9D:B8:D0:B9:78:7E:E7:2E:79:6A:2C:CE:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a39c4916-d280-3db9-8d45-5b63bb04856b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.89.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:68:99:d0:d6:ea:ab:1d:98:e2:ee:42:20:32:2f:8d:58:f2:
         12:6b:d4:70:d2:bc:e8:ea:f1:57:1b:d1:be:ff:46:11:b3:bb:
         8f:62:61:1f:d7:d1:fa:0e:3d:3e:a7:4b:b0:c6:2c:56:37:38:
         84:dd:a0:ff:4f:2c:0f:f8:38:dc:de:d7:75:46:7e:b5:4b:43:
         69:50:83:0b:5e:a1:2c:26:56:a3:6d:14:8a:f1:65:32:29:97:
         a0:d6:27:a8:cb:05:20:82:bb:34:d9:89:51:2e:b3:4b:7b:75:
         6e:cc:7a:47:5b:e9:1d:83:38:2c:69:61:ab:29:14:bc:82:bc:
         12:13:bf:d9:35:c1:6f:1d:81:1e:27:43:17:3e:f9:5e:34:38:
         fe:77:01:ad:5f:8a:5e:95:05:71:50:dc:1c:bc:77:06:d9:98:
         aa:22:59:06:af:ef:77:f9:88:4d:09:59:fa:e9:dc:3b:d5:3a:
         02:e5:af:7e:ac:2c:3c:17:34:af:e3:0d:f7:26:28:91:12:0c:
         de:1a:cc:1d:4b:75:f8:2e:5b:2a:35:c8:43:31:59:5a:50:78:
         b7:71:fb:db:cd:19:25:19:d5:5e:63:78:bf:ca:c0:7c:0f:04:
         56:29:7d:04:66:9f:16:88:0a:7a:39:93:b4:87:1a:32:4a:3b:
         29:f7:c8:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS66bXdVq8Yo6U4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
NGZjMGZhZDUtMDkxZC00NTZjLTlmYmEtMWNlYzc4YjdhZTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkw9fSXDbJZAJNNxLjKir33Mg8ThKEc19tpM
55crRHiNKcsxSXhEqdjDQW4o6KIgYDkLQ2xsXMX7Nd2oWTneLWMEH5UxGySm39jM
Wwv6XjxVIFO5xMpfy4Up/2JaTxUZFixeW8ePZTSdY+zZ/uZM+l2PlIDH3qnHjJP2
RuAAsYY4rJ0SoaQlpOqlqXXzQy6oeW/dAQdaZse4uPSJsjaNMDLIMiJKNB0hMwbc
el5CFpeRX/FdQjzGBliJxFcnUKg4yCCJ+vzjsnZb/C2r47LuhzOe/VXX4d62dZO5
AsGmlwpzfuN+PvA52hkahBnhEDGiOukWjePvTadV0ShoaASXeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVXbjYiDayduNC5eH7nLnlqLM4NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTM5YzQ5MTYtZDI4MC0z
ZGI5LThkNDUtNWI2M2JiMDQ4NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlmQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxomdDW6qsdmOLuQiAyL41Y8hJr1HDSvOjq8Vcb0b7/RhGzu49iYR/X
0foOPT6nS7DGLFY3OITdoP9PLA/4ONze13VGfrVLQ2lQgwteoSwmVqNtFIrxZTIp
l6DWJ6jLBSCCuzTZiVEus0t7dW7Mekdb6R2DOCxpYaspFLyCvBITv9k1wW8dgR4n
Qxc++V40OP53Aa1fil6VBXFQ3By8dwbZmKoiWQav73f5iE0JWfrp3DvVOgLlr36s
LDwXNK/jDfcmKJESDN4azB1LdfguWyo1yEMxWVpQeLdx+9vNGSUZ1V5jeL/KwHwP
BFYpfQRmnxaICno5k7SHGjJKOyn3yGI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:19:46 2025 by rpki-client