Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1d2e415-e941-372b-8804-457786d26e0f.roa
File:                     c1d2e415-e941-372b-8804-457786d26e0f.roa (raw, json)
Hash identifier:          zAAnY7R3GU57a8EI6FieiF2OG7gvlxvGrVHWWpgRsmI=
Subject key identifier:   75:9D:C8:C7:05:6F:B7:C4:56:4D:C9:EA:97:6C:2D:F9:79:47:51:D4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84C17EA971877218A128100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1d2e415-e941-372b-8804-457786d26e0f.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.88.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:17:ea:97:18:77:21:8a:12:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=ba657bfa-3c56-43ba-a726-0abe22023bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:77:da:48:24:a4:67:c0:b1:b7:51:1c:57:
                    56:80:7d:aa:30:40:2e:c8:fe:d8:36:ca:3f:09:1a:
                    3f:10:e3:88:69:0a:aa:63:f4:79:4d:2d:60:7d:9c:
                    49:3e:c5:13:e2:e1:9c:c5:a3:9b:1e:41:d8:b7:96:
                    70:86:38:47:83:09:af:af:b3:eb:03:09:01:37:71:
                    df:6b:e6:9b:50:b2:6f:81:4f:bb:b7:48:51:43:14:
                    dc:8c:15:54:fa:6e:53:ee:1d:dc:a5:a5:98:f2:10:
                    03:b7:c5:b9:41:81:a7:e2:e4:41:7a:cc:fb:5f:b5:
                    40:30:75:72:ed:47:1d:f1:61:07:dc:30:0b:a7:dd:
                    86:22:aa:9a:e7:b9:f2:c4:a6:f7:eb:84:98:76:ef:
                    00:77:2b:ec:6b:81:38:0a:b1:05:a1:01:28:fe:cb:
                    e5:38:f1:fa:c9:30:4a:61:9a:5b:20:2f:0d:d6:41:
                    e2:85:c1:17:ee:8c:b0:ee:9d:ea:bc:e1:be:d0:5a:
                    e4:9b:2d:0f:c2:e7:79:6b:3c:fe:0c:82:7e:d7:2e:
                    02:82:14:6e:2e:ea:a9:06:28:fb:fa:22:f6:f6:af:
                    ca:60:f7:9f:7e:ed:42:f4:6c:ad:db:c6:62:65:7a:
                    1f:c5:64:48:ce:8b:eb:99:23:86:84:6d:a4:32:ba:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9D:C8:C7:05:6F:B7:C4:56:4D:C9:EA:97:6C:2D:F9:79:47:51:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1d2e415-e941-372b-8804-457786d26e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.88.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ad:b5:cc:01:a2:ba:b3:70:2d:c7:39:a3:1c:e0:f4:95:17:
         6d:98:c8:61:ea:0b:83:73:8f:7f:2b:b5:ca:47:f7:5a:a4:9c:
         e3:24:bc:08:33:18:9f:13:c4:f0:32:d0:b0:de:17:07:75:65:
         74:ee:19:55:d6:31:5d:de:7c:15:86:68:aa:df:36:45:9b:6b:
         70:0d:d7:15:31:78:c5:9e:df:bd:95:e9:6e:b8:ef:7d:07:cd:
         ce:4d:86:92:b2:39:51:44:41:d4:d3:f4:ce:00:80:f7:f0:31:
         4f:c8:d4:58:87:84:95:aa:87:f5:9c:c1:b7:5b:c6:b9:d1:6a:
         c6:f4:d7:ed:27:33:d1:62:0b:1e:17:aa:34:73:c7:2e:b2:a7:
         24:bc:d6:2d:00:92:b1:c2:e3:98:a6:00:08:57:c1:65:3d:61:
         90:e7:42:88:a5:4e:7e:30:8d:b7:56:9a:21:6a:fe:f6:c1:00:
         f6:32:9c:66:ee:6f:d8:36:67:09:76:c5:90:b2:54:dd:60:0d:
         c4:4c:bc:24:4a:9d:dc:1f:aa:af:a9:df:3d:4d:11:ab:80:ea:
         39:26:34:2a:f1:38:b1:67:5b:1f:e3:0f:36:71:cf:19:da:28:
         89:79:62:bf:ac:1c:36:5a:10:53:93:fe:e6:16:e8:37:9d:87:
         ea:82:39:5c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjITBfqlxh3IYoSgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
YmE2NTdiZmEtM2M1Ni00M2JhLWE3MjYtMGFiZTIyMDIzYmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZR32kgkpGfAsbdRHFdWgH2qMEAuyP7YNso/
CRo/EOOIaQqqY/R5TS1gfZxJPsUT4uGcxaObHkHYt5ZwhjhHgwmvr7PrAwkBN3Hf
a+abULJvgU+7t0hRQxTcjBVU+m5T7h3cpaWY8hADt8W5QYGn4uRBesz7X7VAMHVy
7Ucd8WEH3DALp92GIqqa57nyxKb364SYdu8Adyvsa4E4CrEFoQEo/svlOPH6yTBK
YZpbIC8N1kHihcEX7oyw7p3qvOG+0Frkmy0Pwud5azz+DIJ+1y4CghRuLuqpBij7
+iL29q/KYPeffu1C9Gyt28ZiZXofxWRIzovrmSOGhG2kMro11wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHWdyMcFb7fEVk3J6pdsLfl5R1HUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzFkMmU0MTUtZTk0MS0z
NzJiLTg4MDQtNDU3Nzg2ZDI2ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCIlgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGq21zAGiurNwLcc5oxzg9JUXbZjIYeoLg3OPfyu1ykf3WqSc4yS8CDMY
nxPE8DLQsN4XB3VldO4ZVdYxXd58FYZoqt82RZtrcA3XFTF4xZ7fvZXpbrjvfQfN
zk2GkrI5UURB1NP0zgCA9/AxT8jUWIeElaqH9ZzBt1vGudFqxvTX7Scz0WILHheq
NHPHLrKnJLzWLQCSscLjmKYACFfBZT1hkOdCiKVOfjCNt1aaIWr+9sEA9jKcZu5v
2DZnCXbFkLJU3WANxEy8JEqd3B+qr6nfPU0Rq4DqOSY0KvE4sWdbH+MPNnHPGdoo
iXliv6wcNloQU5P+5hboN52H6oI5XA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:12 2025 by rpki-client