Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40cc30de-d6b0-3ee6-8367-33e297a46642.roa
File:                     40cc30de-d6b0-3ee6-8367-33e297a46642.roa (raw, json)
Hash identifier:          7Lm41mDYVlPF+9wXJdTvpm1BxElc+1/VLR1o7YIeCv0=
Subject key identifier:   AE:3E:8A:18:10:54:43:7E:7B:0B:D0:A9:C0:9E:2D:35:8E:AB:F8:23
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584549099FD29F00DD164B228340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40cc30de-d6b0-3ee6-8367-33e297a46642.roa
Signing time:             Thu 21 Mar 2024 21:39:29 +0000
ROA not before:           Thu 21 Mar 2024 21:39:29 +0000
ROA not after:            Wed 19 Jun 2024 21:39:29 +0000
asID:                     396982
IP address blocks:        34.163.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:09:9f:d2:9f:00:dd:16:4b:22:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:39:29 2024 GMT
            Not After : Jun 19 21:39:29 2024 GMT
        Subject: CN=9f481d96-0b87-46e4-8711-797bf5b30e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:ca:67:dc:60:7b:bf:c0:7f:20:4b:6f:ce:
                    34:4b:b5:8e:3b:8f:cd:b7:12:2e:5d:6d:1d:4b:a1:
                    71:06:5f:87:23:f4:31:47:80:c4:35:7f:58:2b:ea:
                    21:1b:f0:1d:95:ce:1e:71:2c:f3:89:99:c5:6c:95:
                    fc:76:50:10:84:46:e3:f7:37:84:f0:d2:d2:b7:57:
                    93:5f:9f:a4:0e:6c:d7:d9:cb:f3:2b:1b:b7:b0:83:
                    5b:85:71:b0:d6:7f:84:cc:df:ca:dd:63:66:4d:f4:
                    cf:12:1f:f4:cd:8c:ef:87:4c:d7:68:0c:e2:95:0f:
                    9a:5d:a0:2d:c4:27:08:1b:f0:77:7f:87:a4:35:e0:
                    2f:da:cc:06:b8:94:74:0b:ff:7e:36:aa:d2:d6:e1:
                    6f:d2:4b:40:4a:17:5f:85:84:9c:23:d9:c8:fd:87:
                    14:16:dd:95:1d:42:5e:2a:c6:85:54:6b:6a:d4:e8:
                    20:48:36:40:8e:9c:8a:e7:78:d1:fd:2f:62:d4:0e:
                    00:07:05:82:f8:a8:e4:fb:97:e9:d6:fd:3b:75:07:
                    00:2c:b2:40:90:46:af:88:bc:92:21:8d:35:43:62:
                    ba:14:67:9b:f5:41:9f:00:39:2c:14:81:02:d3:49:
                    b4:e4:f5:94:97:02:fb:e1:39:a5:47:fb:e3:ab:a1:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3E:8A:18:10:54:43:7E:7B:0B:D0:A9:C0:9E:2D:35:8E:AB:F8:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40cc30de-d6b0-3ee6-8367-33e297a46642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.163.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7b:cc:1f:31:27:d7:d2:81:71:4b:c8:ae:90:96:2e:7c:17:
         95:61:41:69:3a:1c:73:65:dd:6a:b7:42:f2:6b:ef:c5:61:c3:
         cf:e3:31:c4:c6:11:21:28:b4:be:aa:7a:6f:3e:22:62:04:5f:
         39:df:c8:62:6a:43:b9:88:99:d2:0d:7d:af:22:e5:c9:da:58:
         d8:64:07:0b:f5:e9:ec:00:2e:ec:ac:f7:99:59:95:e2:5b:0c:
         f9:ca:37:fd:c4:8c:e5:fd:ee:f2:16:06:fb:7a:d7:d0:f6:f3:
         4f:b3:04:04:fe:59:31:71:07:f4:e3:c9:60:22:37:bf:63:0d:
         65:ad:50:02:b4:29:6d:22:00:47:50:29:93:d1:5f:df:18:33:
         c1:d4:e7:6c:c5:16:d1:10:a1:88:f3:ba:95:8a:ee:b0:32:cd:
         24:54:8e:6c:bb:8e:79:a6:48:68:e2:c4:e8:51:23:bd:1e:e8:
         28:bb:c8:ec:7f:c2:09:65:18:c6:fe:f6:02:ce:12:3b:86:1e:
         b6:65:72:ff:d6:a7:c5:2b:68:31:a3:94:be:c7:51:a4:0a:74:
         bc:83:5e:ce:59:7d:72:95:84:82:1e:9b:ea:d4:17:77:c8:34:
         b7:f7:4a:04:eb:29:0e:d2:38:7a:87:bd:9b:bb:52:71:f4:23:
         78:d9:0c:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJCZ/SnwDdFksig0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxMzkyOVoXDTI0MDYxOTIxMzkyOVowLzEtMCsGA1UEAxMk
OWY0ODFkOTYtMGI4Ny00NmU0LTg3MTEtNzk3YmY1YjMwZTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOfKZ9xge7/AfyBLb840S7WOO4/NtxIuXW0d
S6FxBl+HI/QxR4DENX9YK+ohG/Adlc4ecSzziZnFbJX8dlAQhEbj9zeE8NLSt1eT
X5+kDmzX2cvzKxu3sINbhXGw1n+EzN/K3WNmTfTPEh/0zYzvh0zXaAzilQ+aXaAt
xCcIG/B3f4ekNeAv2swGuJR0C/9+NqrS1uFv0ktAShdfhYScI9nI/YcUFt2VHUJe
KsaFVGtq1OggSDZAjpyK53jR/S9i1A4ABwWC+Kjk+5fp1v07dQcALLJAkEaviLyS
IY01Q2K6FGeb9UGfADksFIEC00m05PWUlwL74TmlR/vjq6ExqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4+ihgQVEN+ewvQqcCeLTWOq/gjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDBjYzMwZGUtZDZiMC0z
ZWU2LTgzNjctMzNlMjk3YTQ2NjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIqNAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEN7zB8xJ9fSgXFLyK6Qli58F5VhQWk6HHNl3Wq3QvJr78Vhw8/jMcTG
ESEotL6qem8+ImIEXznfyGJqQ7mImdINfa8i5cnaWNhkBwv16ewALuys95lZleJb
DPnKN/3EjOX97vIWBvt619D280+zBAT+WTFxB/TjyWAiN79jDWWtUAK0KW0iAEdQ
KZPRX98YM8HU52zFFtEQoYjzupWK7rAyzSRUjmy7jnmmSGjixOhRI70e6Ci7yOx/
wgllGMb+9gLOEjuGHrZlcv/Wp8UraDGjlL7HUaQKdLyDXs5ZfXKVhIIem+rUF3fI
NLf3SgTrKQ7SOHqHvZu7UnH0I3jZDA4=
-----END CERTIFICATE-----
Generated at Sun May 5 15:35:02 2024 by rpki-client on console-fra.rpki-client.org