Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ebab07f3-1eec-332c-8cbc-0ff2d68361fb.roa
File:                     ebab07f3-1eec-332c-8cbc-0ff2d68361fb.roa (raw, json)
Hash identifier:          EfA6MWyL7SqowgzNAfOdZSh5m0sCY6RAvX0gWA/G/P4=
Subject key identifier:   8B:7E:F2:E8:50:A1:9C:06:B7:C0:B3:38:CB:3D:26:B8:E2:3B:D0:65
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F53BCCD19EBD7FF0E44D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ebab07f3-1eec-332c-8cbc-0ff2d68361fb.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.137.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:3b:cc:d1:9e:bd:7f:f0:e4:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=065cb39e-73ed-4889-a0b5-1c6812600e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:c4:10:cd:3e:22:1e:28:f9:b5:95:f9:b5:
                    5f:f9:e7:18:2e:6b:5d:7d:aa:8d:9a:c2:1e:cb:f4:
                    71:3e:bf:46:e3:65:59:c6:41:c3:79:c3:4c:49:b4:
                    87:83:c1:df:a6:c7:8b:af:63:44:46:e3:41:fa:a9:
                    15:4e:61:4f:30:a9:7b:52:27:29:e8:df:6f:37:9a:
                    84:e4:3d:b9:f6:06:bb:fa:0b:6a:95:06:5e:1c:c9:
                    87:7b:78:0c:1d:25:e0:01:41:12:02:ee:af:81:bd:
                    df:5f:3b:a8:cb:0c:6b:a0:74:d6:e2:6b:c1:b6:84:
                    ba:89:5c:ab:0a:56:70:52:f9:63:5e:3b:39:88:1c:
                    c7:7d:6a:9b:75:16:9f:3a:f9:77:3e:23:05:94:c6:
                    8a:1b:d2:a7:a7:69:7e:e0:9b:0c:45:5d:ee:13:e0:
                    a9:4f:a5:50:80:eb:75:0d:53:a3:f8:ed:22:80:5e:
                    11:3b:4e:89:c9:0f:c6:33:63:99:f4:97:eb:5c:bb:
                    4f:06:73:88:30:b0:df:ab:7c:0f:65:5a:41:72:f8:
                    c3:26:b7:41:a9:77:f0:aa:d8:5f:8b:79:86:75:40:
                    38:d8:ab:cd:ec:73:30:61:66:f0:8e:42:04:4a:62:
                    f8:ef:a4:41:24:9a:2c:75:93:5b:28:a8:8d:28:77:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7E:F2:E8:50:A1:9C:06:B7:C0:B3:38:CB:3D:26:B8:E2:3B:D0:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ebab07f3-1eec-332c-8cbc-0ff2d68361fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.137.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f6:bc:67:a1:67:91:8b:ff:94:fb:92:c1:1e:cc:cc:f6:3f:
         41:a9:88:15:8c:e1:d3:37:ec:65:db:d7:c2:15:35:49:22:b9:
         83:1b:a1:21:cd:b3:0f:f2:f1:ad:49:40:6f:f0:48:b9:4c:68:
         02:05:30:78:8c:0f:25:7a:5c:0a:c6:d5:ab:cd:58:6c:cd:96:
         19:93:ab:1d:af:b4:17:d0:f1:eb:12:3f:32:24:74:f9:57:3f:
         42:4c:47:b4:51:cf:80:ad:b7:b5:ed:22:02:da:a0:22:0a:28:
         7d:ab:53:2c:0b:64:dd:67:29:e3:21:9d:1b:10:df:e6:2b:8b:
         55:f5:e3:0f:af:81:f0:4c:d6:e7:20:d6:2f:7c:57:ac:a6:9d:
         bc:3a:9b:10:b4:01:89:dc:5d:e5:00:1d:c3:8e:85:6d:d1:86:
         70:3c:a3:9b:08:2c:8b:2d:2c:c1:f9:50:21:c7:6b:9e:f8:b0:
         ee:a5:a3:44:59:af:1a:ce:e3:9c:ab:4d:1d:47:27:ac:79:30:
         27:af:c9:9a:ba:f1:72:e8:ff:47:60:e2:33:96:7f:af:dc:16:
         46:8e:d5:19:b3:13:5e:54:0e:8d:80:17:f8:19:bd:17:c5:12:
         b2:b3:67:22:7f:f0:35:0c:59:ad:2d:bf:76:dc:14:e8:77:33:
         37:4d:20:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9TvM0Z69f/DkTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
MDY1Y2IzOWUtNzNlZC00ODg5LWEwYjUtMWM2ODEyNjAwZTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1XEEM0+Ih4o+bWV+bVf+ecYLmtdfaqNmsIe
y/RxPr9G42VZxkHDecNMSbSHg8HfpseLr2NERuNB+qkVTmFPMKl7Uicp6N9vN5qE
5D259ga7+gtqlQZeHMmHe3gMHSXgAUESAu6vgb3fXzuoywxroHTW4mvBtoS6iVyr
ClZwUvljXjs5iBzHfWqbdRafOvl3PiMFlMaKG9Knp2l+4JsMRV3uE+CpT6VQgOt1
DVOj+O0igF4RO06JyQ/GM2OZ9JfrXLtPBnOIMLDfq3wPZVpBcvjDJrdBqXfwqthf
i3mGdUA42KvN7HMwYWbwjkIESmL476RBJJosdZNbKKiNKHeReQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIt+8uhQoZwGt8CzOMs9JrjiO9BlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWJhYjA3ZjMtMWVlYy0z
MzJjLThjYmMtMGZmMmQ2ODM2MWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIokAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABr2vGehZ5GL/5T7ksEezMz2P0GpiBWM4dM37GXb18IVNUkiuYMboSHN
sw/y8a1JQG/wSLlMaAIFMHiMDyV6XArG1avNWGzNlhmTqx2vtBfQ8esSPzIkdPlX
P0JMR7RRz4Ctt7XtIgLaoCIKKH2rUywLZN1nKeMhnRsQ3+Yri1X14w+vgfBM1ucg
1i98V6ymnbw6mxC0AYncXeUAHcOOhW3RhnA8o5sILIstLMH5UCHHa574sO6lo0RZ
rxrO45yrTR1HJ6x5MCevyZq68XLo/0dg4jOWf6/cFkaO1RmzE15UDo2AF/gZvRfF
ErKzZyJ/8DUMWa0tv3bcFOh3MzdNIMM=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:19:39 2024 by rpki-client on console-ams.rpki-client.org