Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e2977b1f-8e1b-324b-b095-4513ab9d7709.roa
File:                     e2977b1f-8e1b-324b-b095-4513ab9d7709.roa (raw, json)
Hash identifier:          PuAFpRX0KVNpMvmpE5hkoSmMwyKIrNOa3jT/evGrR+s=
Subject key identifier:   40:9D:C9:CA:C0:4F:DF:D2:E3:74:BE:42:87:B8:E4:27:61:89:0D:40
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BFE7EA25324E739DF25C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e2977b1f-8e1b-324b-b095-4513ab9d7709.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.135.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:fe:7e:a2:53:24:e7:39:df:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=561416f8-ae59-416d-b32d-a0b723f15737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:e0:79:60:08:cb:19:88:81:d9:e1:ed:f1:
                    d4:9f:35:e2:d5:7c:c5:6e:61:af:d6:fa:c4:0e:26:
                    9d:5b:77:dd:31:3e:96:5f:ec:e2:5a:58:c6:b9:23:
                    2e:c8:3d:a5:cd:a7:9e:6b:7d:2a:0f:d6:86:f3:ab:
                    90:05:68:93:3a:ff:1d:1a:8f:90:88:31:85:9c:01:
                    50:d4:8d:5f:9f:6e:32:4c:66:95:32:8d:7e:86:fe:
                    9d:8d:a8:6b:d9:cf:7c:38:3d:d1:43:72:f6:4e:9d:
                    89:c4:a8:00:b8:00:8b:18:a3:bb:72:12:ec:9e:01:
                    81:4c:60:fe:e7:47:2b:3b:ec:e0:24:27:9e:60:02:
                    79:34:a6:7f:c4:f6:91:1b:93:c8:af:85:a9:ed:1b:
                    96:1c:5b:c7:27:6a:4a:54:bf:ad:4a:04:48:7f:31:
                    a9:8a:5a:f1:1c:ff:3c:00:ba:c1:64:ca:09:63:3f:
                    39:13:7b:85:35:24:ae:6a:6b:7c:15:1e:ef:23:4f:
                    69:6e:bb:5f:53:06:25:55:02:f8:8c:16:59:1b:04:
                    a4:cb:56:2f:b8:e4:88:7d:2d:81:27:f0:f1:b1:2d:
                    17:42:a8:9a:94:09:75:14:f6:1f:e8:00:33:11:6c:
                    9b:9a:c4:1c:e6:b7:33:14:d5:51:ae:07:f6:b0:1e:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9D:C9:CA:C0:4F:DF:D2:E3:74:BE:42:87:B8:E4:27:61:89:0D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e2977b1f-8e1b-324b-b095-4513ab9d7709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.135.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ba:e7:d0:eb:7a:80:c4:10:28:38:51:1e:98:02:d8:b5:47:
         47:9a:25:8e:19:b9:62:ed:0a:f1:1b:12:08:fd:ec:9b:3e:59:
         ce:ea:a8:e4:47:b4:9f:a2:6f:e3:df:cc:81:78:1d:74:e9:bc:
         d1:4d:57:c7:6c:7e:e2:5d:d2:a0:46:e4:ba:0c:bf:9b:36:7c:
         f9:41:cb:1f:aa:29:4c:6f:11:f1:f3:98:cf:56:cf:db:5c:eb:
         c3:51:a7:8b:9e:ee:1f:f2:8b:b9:52:eb:10:24:42:b9:df:2f:
         91:76:90:cc:cb:77:3c:bf:a1:74:07:16:8c:5f:65:79:c1:9e:
         f6:89:dd:37:10:06:7d:14:48:ad:4a:f7:97:94:16:9e:8c:78:
         d3:23:63:76:8c:8a:15:f2:71:c6:44:b0:d8:d2:6b:fd:41:bc:
         fc:54:d8:66:ec:1a:c7:76:fc:9f:25:73:21:ce:56:f0:6e:f6:
         5c:da:c0:4d:49:aa:e8:3a:aa:d4:a3:0e:01:a3:d9:b6:60:63:
         42:cc:06:33:5f:76:a5:e6:a6:8a:78:cc:83:b9:9a:bf:59:c5:
         98:8e:ae:e5:35:01:df:1c:d8:6d:30:d5:ec:41:ca:76:d2:3f:
         f2:fa:66:c5:4e:82:5d:e7:fd:3e:2b:d7:c1:ca:61:a3:8d:fc:
         b7:70:31:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/5+olMk5znfJcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
NTYxNDE2ZjgtYWU1OS00MTZkLWIzMmQtYTBiNzIzZjE1NzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgrgeWAIyxmIgdnh7fHUnzXi1XzFbmGv1vrE
DiadW3fdMT6WX+ziWljGuSMuyD2lzaeea30qD9aG86uQBWiTOv8dGo+QiDGFnAFQ
1I1fn24yTGaVMo1+hv6djahr2c98OD3RQ3L2Tp2JxKgAuACLGKO7chLsngGBTGD+
50crO+zgJCeeYAJ5NKZ/xPaRG5PIr4Wp7RuWHFvHJ2pKVL+tSgRIfzGpilrxHP88
ALrBZMoJYz85E3uFNSSuamt8FR7vI09pbrtfUwYlVQL4jBZZGwSky1YvuOSIfS2B
J/DxsS0XQqialAl1FPYf6AAzEWybmsQc5rczFNVRrgf2sB6ygQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECdycrAT9/S43S+Qoe45CdhiQ1AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTI5NzdiMWYtOGUxYi0z
MjRiLWIwOTUtNDUxM2FiOWQ3NzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIocgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGW659DreoDEECg4UR6YAti1R0eaJY4ZuWLtCvEbEgj97Js+Wc7qqORH
tJ+ib+PfzIF4HXTpvNFNV8dsfuJd0qBG5LoMv5s2fPlByx+qKUxvEfHzmM9Wz9tc
68NRp4ue7h/yi7lS6xAkQrnfL5F2kMzLdzy/oXQHFoxfZXnBnvaJ3TcQBn0USK1K
95eUFp6MeNMjY3aMihXyccZEsNjSa/1BvPxU2GbsGsd2/J8lcyHOVvBu9lzawE1J
qug6qtSjDgGj2bZgY0LMBjNfdqXmpop4zIO5mr9ZxZiOruU1Ad8c2G0w1exBynbS
P/L6ZsVOgl3n/T4r18HKYaON/LdwMdE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:11 2025 by rpki-client