Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58c93e40-9cb6-3077-9a64-e6e1336f5f2c.roa
File:                     58c93e40-9cb6-3077-9a64-e6e1336f5f2c.roa (raw, json)
Hash identifier:          SRrwz4Hg6lmzNvFwbrOWQUVx9C0AOTebmKBtiQoFKFo=
Subject key identifier:   63:D0:0B:90:DE:3D:F5:1C:EA:06:8C:82:38:2F:09:C7:16:64:1C:48
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F01646A05AB2B66A1DFA100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58c93e40-9cb6-3077-9a64-e6e1336f5f2c.roa
Signing time:             Fri 29 Mar 2024 18:30:40 +0000
ROA not before:           Fri 29 Mar 2024 18:30:40 +0000
ROA not after:            Thu 27 Jun 2024 18:30:40 +0000
asID:                     396982
IP address blocks:        34.164.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:01:64:6a:05:ab:2b:66:a1:df:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:30:40 2024 GMT
            Not After : Jun 27 18:30:40 2024 GMT
        Subject: CN=ba37fd19-21e6-4d68-9766-82ac198a4522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:0b:82:b6:81:1c:a2:78:9d:1d:60:74:39:
                    6e:9b:ee:02:09:8e:38:eb:6b:e3:fd:1e:16:b2:bf:
                    49:34:6a:d6:0d:98:00:12:a0:f7:38:8f:ea:38:37:
                    e0:59:be:17:a0:fd:7e:fd:bf:a1:48:94:54:22:b9:
                    92:7d:c9:9b:ac:8f:37:08:35:f5:4b:3c:a6:6c:c2:
                    ba:1d:ed:1d:05:d5:db:eb:ca:55:f9:3d:0e:17:67:
                    bb:b6:59:ed:3e:aa:65:5c:0d:a7:f9:11:72:1e:f1:
                    0c:a5:90:09:3f:06:6b:97:bb:26:56:5a:dd:16:3b:
                    84:a1:35:54:4a:78:bb:26:2a:f7:20:35:02:5c:47:
                    a7:07:6e:25:ee:90:22:c4:0b:d4:3f:a9:23:1c:e8:
                    89:44:53:5d:fa:7b:c9:5c:c1:20:bf:ec:85:1f:63:
                    f7:08:37:5e:07:0d:2a:6b:5d:0a:21:a6:b3:3b:5d:
                    2d:f8:c4:b5:16:99:40:33:53:2e:b9:73:4e:b8:aa:
                    3d:0c:f2:f3:4f:7b:ac:c2:ce:71:ce:29:92:5a:55:
                    a5:25:08:d5:fc:7b:12:eb:a5:57:e6:50:70:ad:5f:
                    ab:63:f5:da:d1:e1:a6:9f:99:15:16:9f:88:52:84:
                    2f:a0:98:01:1e:34:74:e0:68:40:77:07:71:05:1f:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D0:0B:90:DE:3D:F5:1C:EA:06:8C:82:38:2F:09:C7:16:64:1C:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/58c93e40-9cb6-3077-9a64-e6e1336f5f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.164.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:70:ec:6c:a3:ea:65:b7:fa:39:0c:9d:7f:8d:76:48:db:c3:
         c0:a9:c7:85:8c:85:c3:5e:f3:82:1f:20:4f:c6:cc:0f:16:f4:
         1c:d0:d5:93:44:cc:44:bd:d7:f8:ea:31:a9:ef:9b:6f:a7:6d:
         a2:0d:b3:7c:9f:ed:b2:f1:2f:4c:e2:7f:d9:3a:69:1c:e8:16:
         12:b6:13:b7:4a:d5:47:77:df:ad:7e:d1:25:f6:19:e4:a7:60:
         bd:28:1c:d4:ac:d5:b5:34:ad:68:bf:24:7b:ad:eb:79:65:56:
         a7:08:a1:22:d4:e5:7d:28:bb:c2:27:db:e1:a7:1c:0a:34:a7:
         ef:8b:a7:6e:ab:91:66:76:df:32:bc:db:0a:7f:57:f6:4a:4f:
         db:14:0c:50:68:c5:4c:74:18:5f:55:cd:93:5b:9a:3d:6b:97:
         67:27:4f:2d:b4:a9:3b:5d:be:6c:cd:fe:b4:d6:5c:c7:7c:2a:
         ab:f2:a1:25:d1:93:36:8a:84:5b:54:76:c0:2d:12:82:f6:42:
         5f:61:e9:81:32:36:8c:cf:2b:91:96:81:e9:e9:9c:b7:86:ec:
         51:39:a9:84:21:79:4c:25:17:25:59:5c:62:c2:81:01:9e:9f:
         22:72:c1:2a:5f:96:35:b7:17:8b:64:d9:a8:6e:c3:17:80:f4:
         ac:7a:39:13
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVfAWRqBasrZqHfoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyOTE4MzA0MFoXDTI0MDYyNzE4MzA0MFowLzEtMCsGA1UEAxMk
YmEzN2ZkMTktMjFlNi00ZDY4LTk3NjYtODJhYzE5OGE0NTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn0LgraBHKJ4nR1gdDlum+4CCY4462vj/R4W
sr9JNGrWDZgAEqD3OI/qODfgWb4XoP1+/b+hSJRUIrmSfcmbrI83CDX1SzymbMK6
He0dBdXb68pV+T0OF2e7tlntPqplXA2n+RFyHvEMpZAJPwZrl7smVlrdFjuEoTVU
Sni7Jir3IDUCXEenB24l7pAixAvUP6kjHOiJRFNd+nvJXMEgv+yFH2P3CDdeBw0q
a10KIaazO10t+MS1FplAM1MuuXNOuKo9DPLzT3usws5xzimSWlWlJQjV/HsS66VX
5lBwrV+rY/Xa0eGmn5kVFp+IUoQvoJgBHjR04GhAdwdxBR9+LQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGPQC5DePfUc6gaMgjgvCccWZBxIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNThjOTNlNDAtOWNiNi0z
MDc3LTlhNjQtZTZlMTMzNmY1ZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMnDsbKPqZbf6OQydf412SNvDwKnHhYyFw17zgh8gT8bMDxb0HNDVk0TM
RL3X+Ooxqe+bb6dtog2zfJ/tsvEvTOJ/2TppHOgWErYTt0rVR3ffrX7RJfYZ5Kdg
vSgc1KzVtTStaL8ke63reWVWpwihItTlfSi7wifb4accCjSn74unbquRZnbfMrzb
Cn9X9kpP2xQMUGjFTHQYX1XNk1uaPWuXZydPLbSpO12+bM3+tNZcx3wqq/KhJdGT
NoqEW1R2wC0SgvZCX2HpgTI2jM8rkZaB6emct4bsUTmphCF5TCUXJVlcYsKBAZ6f
InLBKl+WNbcXi2TZqG7DF4D0rHo5Ew==
-----END CERTIFICATE-----
Generated at Sun May 5 15:35:12 2024 by rpki-client on console-fra.rpki-client.org