Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0aa73a0-f143-35ce-b01a-624c8d0da393.roa
File:                     c0aa73a0-f143-35ce-b01a-624c8d0da393.roa (raw, json)
Hash identifier:          S8tixpsgCZJagMwQgEXyc0vh2A+PTEk8JRhFN9tAvf4=
Subject key identifier:   86:5C:36:8A:D0:56:2F:5F:0B:50:61:70:07:EA:FD:4F:57:04:DF:33
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4CEFD7B69836FDE97FDC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0aa73a0-f143-35ce-b01a-624c8d0da393.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.144.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:ce:fd:7b:69:83:6f:de:97:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=588355af-0b3e-4fb0-b0b9-fdeddcc2ea65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:f8:d1:25:db:66:cd:22:6d:ea:36:9b:2c:
                    34:03:4d:96:83:ab:aa:45:63:ed:f4:97:a5:f7:fa:
                    9e:64:f7:76:88:f6:c7:19:85:96:56:4d:0a:fc:3e:
                    3a:e5:ad:db:82:ea:24:24:ae:e2:81:ee:f6:51:45:
                    d3:eb:62:1b:97:98:94:02:9d:6d:29:3e:f2:5c:e8:
                    f5:b9:b3:d1:f8:17:ac:35:50:ea:b0:72:c8:f2:33:
                    a5:8c:ba:9f:f0:71:15:20:fe:55:be:89:ff:9b:3e:
                    9d:23:ff:24:07:b5:ec:90:07:de:65:ad:fd:a5:a7:
                    77:97:79:d3:b5:70:7a:8f:6a:07:16:47:7a:52:a8:
                    83:14:7e:31:0e:2b:2c:e8:b8:4d:67:8f:c3:a9:90:
                    0a:96:cb:5e:7f:5a:16:ca:9f:06:fe:34:f4:90:18:
                    15:e3:90:23:17:e9:05:bd:e3:9c:a7:1a:1c:e3:1e:
                    33:70:9b:09:c6:e8:27:02:bf:e2:8f:57:63:ec:a1:
                    9f:c5:28:f0:20:e9:4f:a4:6f:30:07:7a:48:cb:98:
                    8e:ca:87:05:e3:14:b9:96:7d:60:6b:cb:e1:12:db:
                    ec:49:51:90:45:e3:48:7c:cc:ad:f1:60:84:80:3e:
                    fd:3c:ad:f0:39:a8:f0:e5:2a:f8:4e:01:21:77:79:
                    fa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5C:36:8A:D0:56:2F:5F:0B:50:61:70:07:EA:FD:4F:57:04:DF:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0aa73a0-f143-35ce-b01a-624c8d0da393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.144.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:9f:14:95:47:bb:ec:50:37:e3:bf:08:93:47:67:e8:d3:9f:
         07:38:9c:38:f8:ad:57:95:5b:d7:15:50:07:fa:cd:9c:ab:38:
         5c:9e:9f:f8:ab:7f:27:1b:c9:d2:3f:cf:2d:3d:40:2c:bf:82:
         29:a3:5c:49:ca:ab:4e:e2:a6:0b:04:44:de:4a:f7:73:7d:af:
         ae:33:a0:ea:fb:42:e3:be:89:73:c5:31:ee:97:5b:71:15:2e:
         f8:49:ec:6d:96:5f:b4:5d:ce:ef:50:fc:33:1e:40:f2:a9:ab:
         b2:97:2e:fc:13:2d:aa:e2:38:0d:f5:4b:c4:10:45:f7:40:5a:
         83:28:ba:66:6e:11:c7:14:21:63:fc:cb:f7:ce:bc:53:ff:3f:
         8a:07:40:aa:2a:ea:c4:b3:c6:63:4e:1f:6e:be:f6:99:c6:70:
         ce:56:55:df:39:65:8b:70:00:70:bc:b2:41:ce:7b:3f:a3:05:
         d2:c7:2a:7a:17:e0:cd:bb:5c:17:a7:a1:39:67:86:62:ca:b9:
         42:9c:db:15:6c:30:dc:c6:cc:62:3d:de:8c:7a:4c:48:78:c1:
         d8:9b:8f:fb:f9:08:ff:45:34:e4:5a:b0:d9:e3:6e:00:e0:f2:
         65:2b:50:ce:ae:54:67:d2:9f:13:14:5f:f4:09:19:bf:63:07:
         90:38:24:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9M79e2mDb96X/cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NTg4MzU1YWYtMGIzZS00ZmIwLWIwYjktZmRlZGRjYzJlYTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwH40SXbZs0ibeo2myw0A02Wg6uqRWPt9Jel
9/qeZPd2iPbHGYWWVk0K/D465a3bguokJK7ige72UUXT62Ibl5iUAp1tKT7yXOj1
ubPR+BesNVDqsHLI8jOljLqf8HEVIP5Vvon/mz6dI/8kB7XskAfeZa39pad3l3nT
tXB6j2oHFkd6UqiDFH4xDiss6LhNZ4/DqZAKlstef1oWyp8G/jT0kBgV45AjF+kF
veOcpxoc4x4zcJsJxugnAr/ij1dj7KGfxSjwIOlPpG8wB3pIy5iOyocF4xS5ln1g
a8vhEtvsSVGQReNIfMyt8WCEgD79PK3wOajw5Sr4TgEhd3n6IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZcNorQVi9fC1BhcAfq/U9XBN8zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzBhYTczYTAtZjE0My0z
NWNlLWIwMWEtNjI0YzhkMGRhMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpBQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGfFJVHu+xQN+O/CJNHZ+jTnwc4nDj4rVeVW9cVUAf6zZyrOFyen/ir
fycbydI/zy09QCy/gimjXEnKq07ipgsERN5K93N9r64zoOr7QuO+iXPFMe6XW3EV
LvhJ7G2WX7Rdzu9Q/DMeQPKpq7KXLvwTLariOA31S8QQRfdAWoMoumZuEccUIWP8
y/fOvFP/P4oHQKoq6sSzxmNOH26+9pnGcM5WVd85ZYtwAHC8skHOez+jBdLHKnoX
4M27XBenoTlnhmLKuUKc2xVsMNzGzGI93ox6TEh4wdibj/v5CP9FNORasNnjbgDg
8mUrUM6uVGfSnxMUX/QJGb9jB5A4JOQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:54 2024 by rpki-client on console-fra.rpki-client.org