Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa
File:                     2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa (raw, json)
Hash identifier:          lU4UEWNBxiAI80/7G5aDItCiwlFxDWRZfmXJLnLtl/Y=
Subject key identifier:   AC:EC:5D:E4:86:A8:11:FA:AC:00:B1:FB:93:41:11:60:3D:F4:45:A8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FE8AE6DAB152717016A5A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa
Signing time:             Thu 21 Mar 2024 21:17:09 +0000
ROA not before:           Thu 21 Mar 2024 21:17:09 +0000
ROA not after:            Wed 19 Jun 2024 21:17:09 +0000
asID:                     396982
IP address blocks:        34.77.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fe:8a:e6:da:b1:52:71:70:16:a5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:17:09 2024 GMT
            Not After : Jun 19 21:17:09 2024 GMT
        Subject: CN=b5773678-a250-4966-aefb-70ecebb2c60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:46:db:43:77:6d:20:23:61:fd:50:97:0e:
                    08:ed:aa:05:1f:86:10:8b:c0:97:1d:af:ce:f5:45:
                    bf:c0:cc:61:24:16:d8:b7:7a:c8:c8:18:3c:db:8d:
                    88:35:dc:16:3b:02:80:7d:96:0c:e1:f7:58:d9:c0:
                    6e:64:f1:29:31:71:93:cc:42:7c:d3:26:48:96:9a:
                    ac:d4:bb:fc:eb:28:ac:8a:d2:85:9c:4e:31:51:e8:
                    49:36:03:98:95:06:95:d6:3e:ae:21:11:10:e4:85:
                    d3:ba:a6:a2:6c:0b:a2:ce:03:15:b2:07:d7:d1:cc:
                    6a:e2:c1:80:c4:c4:aa:9e:75:f1:4b:db:69:8c:51:
                    0f:15:f9:a0:d6:8d:5d:d5:3d:20:8e:4e:1f:19:fb:
                    85:55:8f:cf:61:c2:3e:68:46:be:cf:0c:ad:88:cc:
                    32:3b:54:5e:4c:c2:a8:f5:cd:ab:c5:c3:6f:a7:13:
                    79:b6:50:d4:85:b9:d9:9e:e4:d1:43:07:01:23:6a:
                    b2:51:e7:09:ce:3c:cf:ce:1a:c8:0a:eb:5d:e3:d4:
                    44:bc:8b:5b:1a:35:77:92:1d:05:20:84:bd:51:60:
                    26:3e:30:48:ce:f2:57:d7:4d:e7:fb:ca:d0:18:b8:
                    49:fa:51:4a:24:48:5d:7e:73:dc:24:49:9d:2a:78:
                    ac:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EC:5D:E4:86:A8:11:FA:AC:00:B1:FB:93:41:11:60:3D:F4:45:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.77.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:dc:da:ba:99:1c:bb:9a:f7:8a:97:71:65:74:50:ec:c2:51:
         d9:17:25:77:ad:84:a6:dd:7a:13:8b:e9:a0:c7:68:ae:8b:6d:
         15:2b:ad:39:cf:e8:0e:30:89:b4:c4:ac:c3:9b:05:ed:b6:f8:
         f2:71:7e:d8:6f:b2:a7:da:7c:90:ce:3a:fb:3e:e9:46:77:b3:
         08:2a:7b:a6:27:49:6b:04:4c:9c:64:ed:2c:b4:19:ae:bf:3b:
         39:30:15:9a:57:a3:7b:07:05:4d:3b:3e:d8:7f:8a:8c:17:9a:
         f2:21:83:a8:ec:bf:59:0f:c6:a4:f2:96:ff:ce:6f:6d:c2:a1:
         74:2b:38:21:ba:d3:1b:21:36:1e:6c:89:5a:69:4b:eb:df:e7:
         c5:34:6a:16:cd:26:e9:42:e0:f5:19:46:63:01:b2:35:06:c7:
         a1:59:0d:3c:ea:cd:ef:fb:31:b9:8e:bf:19:c7:2e:29:a2:d9:
         b1:90:c2:17:85:af:50:09:d0:99:66:d5:ed:4d:f2:e1:5c:c5:
         11:af:9e:67:f7:5e:13:84:45:7c:f5:32:ba:8d:1d:74:ea:ad:
         04:8b:c5:d1:3f:20:df:da:a0:9a:16:44:2b:b9:cd:68:92:0c:
         f8:7a:58:14:ee:06:ef:6a:15:7f:82:2d:87:77:c8:01:e8:d2:
         c9:51:3f:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/orm2rFScXAWpaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxMTcwOVoXDTI0MDYxOTIxMTcwOVowLzEtMCsGA1UEAxMk
YjU3NzM2NzgtYTI1MC00OTY2LWFlZmItNzBlY2ViYjJjNjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo09G20N3bSAjYf1Qlw4I7aoFH4YQi8CXHa/O
9UW/wMxhJBbYt3rIyBg8242INdwWOwKAfZYM4fdY2cBuZPEpMXGTzEJ80yZIlpqs
1Lv86yisitKFnE4xUehJNgOYlQaV1j6uIREQ5IXTuqaibAuizgMVsgfX0cxq4sGA
xMSqnnXxS9tpjFEPFfmg1o1d1T0gjk4fGfuFVY/PYcI+aEa+zwytiMwyO1ReTMKo
9c2rxcNvpxN5tlDUhbnZnuTRQwcBI2qyUecJzjzPzhrICutd49REvItbGjV3kh0F
IIS9UWAmPjBIzvJX103n+8rQGLhJ+lFKJEhdfnPcJEmdKnisywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKzsXeSGqBH6rACx+5NBEWA99EWoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmU3OGY3ZmYtN2M1Ni0z
N2YxLThlYTAtZWUzMzRiMWFkMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk0QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTc2rqZHLua94qXcWV0UOzCUdkXJXethKbdehOL6aDHaK6LbRUrrTnP
6A4wibTErMObBe22+PJxfthvsqfafJDOOvs+6UZ3swgqe6YnSWsETJxk7Sy0Ga6/
OzkwFZpXo3sHBU07Pth/iowXmvIhg6jsv1kPxqTylv/Ob23CoXQrOCG60xshNh5s
iVppS+vf58U0ahbNJulC4PUZRmMBsjUGx6FZDTzqze/7MbmOvxnHLimi2bGQwheF
r1AJ0Jlm1e1N8uFcxRGvnmf3XhOERXz1MrqNHXTqrQSLxdE/IN/aoJoWRCu5zWiS
DPh6WBTuBu9qFX+CLYd3yAHo0slRPwg=
-----END CERTIFICATE-----
Generated at Sun May 5 15:48:59 2024 by rpki-client on console-ams.rpki-client.org