Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fff97a92-f728-3096-aace-80e53e101e6a.roa
File:                     fff97a92-f728-3096-aace-80e53e101e6a.roa (raw, json)
Hash identifier:          jpm6LIJnQ4/jffOEBBk51Hs+t0ek8Pi/X6mZY1KbmF0=
Subject key identifier:   61:0E:51:5A:0C:12:56:6D:29:1F:9A:C6:14:10:33:D2:E0:58:28:7D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E62B608D4182D9876095CE40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fff97a92-f728-3096-aace-80e53e101e6a.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     139070
IP address blocks:        34.116.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:60:8d:41:82:d9:87:60:95:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=643e074c-8425-41f7-8c97-914f38c85792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0c:33:a8:31:e5:92:b3:23:c8:b7:5b:e7:2a:
                    ac:75:e2:9b:d2:f4:2d:f5:9c:b6:28:c9:24:b7:38:
                    d6:31:4f:df:3e:e8:0c:c8:e0:51:ad:45:7f:03:b6:
                    56:a0:84:ad:01:c2:22:47:30:f8:97:59:80:c3:5c:
                    37:39:55:95:b3:3d:df:e9:63:d5:c6:eb:6b:a4:11:
                    f7:26:82:1a:aa:d6:85:5d:43:69:00:a5:8b:dc:20:
                    b1:b2:f7:08:08:9e:11:0b:1c:fc:e5:d7:e1:25:2b:
                    62:9d:84:cd:46:66:1a:ec:3d:d8:5e:af:c9:c1:26:
                    7b:08:89:18:ea:25:ea:0e:10:c3:89:48:28:bc:23:
                    98:08:4c:9f:45:4b:ec:d5:b1:c1:0c:51:b5:4d:7d:
                    97:82:89:27:53:07:b5:10:9a:b5:f5:ff:07:ea:0b:
                    c8:b6:00:59:c2:d5:30:05:8d:06:56:c2:28:9f:d8:
                    64:db:b5:c2:15:72:2a:5b:5d:c4:f8:fa:a6:45:b8:
                    84:b8:67:1b:f4:cd:d4:59:3a:05:84:42:be:82:c3:
                    2b:f7:ce:ae:92:30:a4:01:06:0f:9a:1e:61:72:c9:
                    d6:8e:ef:9a:f0:ed:64:dd:c7:ea:b3:03:d1:d9:9e:
                    fc:0b:73:e7:86:8c:7a:bb:6c:78:2e:b6:61:5e:b1:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0E:51:5A:0C:12:56:6D:29:1F:9A:C6:14:10:33:D2:E0:58:28:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fff97a92-f728-3096-aace-80e53e101e6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.116.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e0:9e:fe:f7:02:ae:fc:99:25:54:b1:82:af:59:c5:27:f2:
         78:2f:e7:5f:73:9d:b5:97:96:83:1c:de:ba:80:ab:92:a5:fc:
         71:03:83:41:51:95:21:d4:5b:31:90:d7:04:b5:7b:f3:1a:8a:
         18:77:44:42:ba:d1:ed:a6:93:fd:98:cf:6a:82:80:56:2e:1a:
         78:de:ef:a4:ac:85:f3:6c:7c:cc:7d:9d:74:8f:82:cd:1f:93:
         02:18:66:29:02:03:19:7a:ba:a4:c6:3e:ef:d0:d8:37:9a:eb:
         d8:d1:f9:ee:7c:aa:5e:9e:0d:3f:63:e6:ac:cf:31:95:3b:25:
         44:47:53:06:55:29:a3:1c:5d:5f:e4:9f:f5:fa:e7:b4:7f:cd:
         93:46:55:5b:a2:35:44:45:43:51:a0:9d:81:d3:30:07:29:93:
         60:61:4d:fc:06:2c:94:c7:13:4c:e8:05:25:12:80:8b:0c:01:
         93:66:e0:cf:4e:4a:21:26:31:7b:1a:da:66:61:0e:41:f2:87:
         5b:7d:36:b7:00:7b:e9:31:a5:0e:d1:83:6a:8c:83:ce:c2:1a:
         92:89:ce:d7:17:8a:eb:c1:64:f1:6e:97:db:4c:ac:f2:62:50:
         67:6a:b2:fc:d0:1f:cc:16:38:db:30:37:2f:27:c4:93:cd:91:
         a1:a6:bf:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK2CNQYLZh2CVzkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NjQzZTA3NGMtODQyNS00MWY3LThjOTctOTE0ZjM4Yzg1NzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwwzqDHlkrMjyLdb5yqsdeKb0vQt9Zy2KMkk
tzjWMU/fPugMyOBRrUV/A7ZWoIStAcIiRzD4l1mAw1w3OVWVsz3f6WPVxutrpBH3
JoIaqtaFXUNpAKWL3CCxsvcICJ4RCxz85dfhJStinYTNRmYa7D3YXq/JwSZ7CIkY
6iXqDhDDiUgovCOYCEyfRUvs1bHBDFG1TX2XgoknUwe1EJq19f8H6gvItgBZwtUw
BY0GVsIon9hk27XCFXIqW13E+PqmRbiEuGcb9M3UWToFhEK+gsMr986ukjCkAQYP
mh5hcsnWju+a8O1k3cfqswPR2Z78C3Pnhox6u2x4LrZhXrHwnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEOUVoMElZtKR+axhQQM9LgWCh9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmZmOTdhOTItZjcyOC0z
MDk2LWFhY2UtODBlNTNlMTAxZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJbgnv73Aq78mSVUsYKvWcUn8ngv519znbWXloMc3rqAq5Kl/HEDg0FR
lSHUWzGQ1wS1e/Maihh3REK60e2mk/2Yz2qCgFYuGnje76SshfNsfMx9nXSPgs0f
kwIYZikCAxl6uqTGPu/Q2Dea69jR+e58ql6eDT9j5qzPMZU7JURHUwZVKaMcXV/k
n/X657R/zZNGVVuiNURFQ1GgnYHTMAcpk2BhTfwGLJTHE0zoBSUSgIsMAZNm4M9O
SiEmMXsa2mZhDkHyh1t9NrcAe+kxpQ7Rg2qMg87CGpKJztcXiuvBZPFul9tMrPJi
UGdqsvzQH8wWONswNy8nxJPNkaGmv6w=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:15:46 2024 by rpki-client on console-fra.rpki-client.org