Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f581bbcf-de06-3900-afbd-049e22bb338b.roa
File:                     f581bbcf-de06-3900-afbd-049e22bb338b.roa (raw, json)
Hash identifier:          H4/JFDFASspRLMs4WXWvrgWautH+qzE3v0iNItspYIA=
Subject key identifier:   3B:E0:2A:A4:47:7C:63:13:06:B5:7D:88:69:D4:C9:76:45:F5:15:81
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C5821F6E3A0008C90655A800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f581bbcf-de06-3900-afbd-049e22bb338b.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        34.0.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:1f:6e:3a:00:08:c9:06:55:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=8a5035de-2a10-447f-838b-d58370677f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3f:2e:80:5b:47:86:57:fb:db:52:ea:9a:49:
                    1a:4c:3d:cd:63:cc:a0:91:b5:0f:47:4e:f8:c3:78:
                    43:b9:a1:92:b5:4a:3b:b4:83:9a:37:57:1e:58:74:
                    72:6a:95:a6:ae:89:00:3a:30:9c:ef:04:b6:53:7f:
                    69:c1:89:1b:c3:6c:2d:c3:dd:6e:7f:99:bd:1d:0e:
                    63:1f:8e:b3:e6:c9:1d:d2:1d:ec:fb:70:16:4d:cb:
                    ab:69:ba:57:a1:7c:b8:79:37:b4:2f:03:d0:aa:44:
                    3a:3a:ae:09:89:a5:a0:c7:fe:23:81:a3:a6:0e:9d:
                    b5:d5:46:35:25:2c:b3:b5:77:ff:dd:02:ec:9d:c4:
                    18:90:73:8e:65:19:2e:dc:c8:85:4c:92:5c:f7:ad:
                    ec:45:25:23:cf:87:4e:bb:26:6d:ad:4c:58:19:34:
                    fc:8f:bf:c4:eb:37:5c:f6:21:df:72:5e:96:e1:1e:
                    cc:ce:18:22:8c:ce:be:d8:3c:3d:22:fc:f9:61:db:
                    c4:df:3d:8d:3e:c9:af:c9:75:77:ae:a6:b0:ee:fb:
                    54:87:fb:cb:9c:73:e1:c1:06:09:19:35:7e:95:28:
                    9f:77:41:bc:22:dd:24:f0:63:11:9c:ea:e5:52:23:
                    f3:e5:68:00:95:be:57:be:46:ea:93:99:c3:01:c6:
                    e1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E0:2A:A4:47:7C:63:13:06:B5:7D:88:69:D4:C9:76:45:F5:15:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f581bbcf-de06-3900-afbd-049e22bb338b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:48:bb:16:27:ad:ee:53:07:8d:99:d3:75:2c:c6:a3:d5:2d:
         33:f4:83:bb:3c:12:f8:b0:b9:8b:31:19:74:04:b6:d5:99:bf:
         04:9c:ec:ec:b5:2c:52:11:96:86:1e:9e:90:48:a8:85:fc:87:
         21:dd:56:5b:ca:ca:1a:84:c7:ea:60:99:8c:27:15:a9:04:74:
         21:a0:d0:ac:05:e6:37:ad:b8:97:46:e6:01:fc:59:93:97:3c:
         ff:39:54:63:91:3c:5c:43:2b:77:80:f3:51:37:c3:48:0f:e2:
         59:e8:83:a0:e2:0c:89:5d:e9:ea:c2:b7:ff:12:e1:ef:fc:81:
         9a:f0:43:bb:d2:00:5e:e7:5e:ed:a1:62:d8:f2:a6:05:4c:e0:
         d7:a6:05:ca:da:6f:fe:7b:4c:cb:c4:a0:2a:74:ce:18:00:f8:
         e7:4a:86:68:25:ff:4f:47:38:96:83:59:e7:14:af:a0:c9:4a:
         cd:38:a9:aa:c2:66:41:b8:1c:14:b5:2f:ad:0e:ff:18:eb:b2:
         fc:0f:96:cb:2e:24:4a:07:a8:13:f5:25:aa:e6:ab:11:1d:a8:
         dc:cf:fb:a2:f2:1c:8c:42:f4:be:b4:e5:3b:cc:fb:97:2e:c2:
         89:46:18:d2:60:b2:3c:e8:52:19:39:f8:51:2b:27:e1:63:1b:
         60:68:23:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgh9uOgAIyQZVqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
OGE1MDM1ZGUtMmExMC00NDdmLTgzOGItZDU4MzcwNjc3ZjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j8ugFtHhlf721LqmkkaTD3NY8ygkbUPR074
w3hDuaGStUo7tIOaN1ceWHRyapWmrokAOjCc7wS2U39pwYkbw2wtw91uf5m9HQ5j
H46z5skd0h3s+3AWTcurabpXoXy4eTe0LwPQqkQ6Oq4JiaWgx/4jgaOmDp211UY1
JSyztXf/3QLsncQYkHOOZRku3MiFTJJc963sRSUjz4dOuyZtrUxYGTT8j7/E6zdc
9iHfcl6W4R7MzhgijM6+2Dw9Ivz5YdvE3z2NPsmvyXV3rqaw7vtUh/vLnHPhwQYJ
GTV+lSifd0G8It0k8GMRnOrlUiPz5WgAlb5Xvkbqk5nDAcbhBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDvgKqRHfGMTBrV9iGnUyXZF9RWBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjU4MWJiY2YtZGUwNi0z
OTAwLWFmYmQtMDQ5ZTIyYmIzMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxIuxYnre5TB42Z03UsxqPVLTP0g7s8EviwuYsxGXQEttWZvwSc7Oy1
LFIRloYenpBIqIX8hyHdVlvKyhqEx+pgmYwnFakEdCGg0KwF5jetuJdG5gH8WZOX
PP85VGORPFxDK3eA81E3w0gP4lnog6DiDIld6erCt/8S4e/8gZrwQ7vSAF7nXu2h
YtjypgVM4NemBcrab/57TMvEoCp0zhgA+OdKhmgl/09HOJaDWecUr6DJSs04qarC
ZkG4HBS1L60O/xjrsvwPlssuJEoHqBP1JarmqxEdqNzP+6LyHIxC9L605TvM+5cu
wolGGNJgsjzoUhk5+FErJ+FjG2BoIzY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:21:31 2025 by rpki-client