Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7429d408-7c24-3ca9-836c-e6d48c666a01.roa
File:                     7429d408-7c24-3ca9-836c-e6d48c666a01.roa (raw, json)
Hash identifier:          rYf/8Fmu9ZHFN0sl32SN489XGeLWWlNn8S0oZBrc65Q=
Subject key identifier:   EC:08:6D:06:E4:FE:59:0C:CB:92:F0:39:6C:BF:8C:92:96:E6:97:E9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F047F5E8FED887D8127C280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7429d408-7c24-3ca9-836c-e6d48c666a01.roa
Signing time:             Fri 29 Mar 2024 18:36:56 +0000
ROA not before:           Fri 29 Mar 2024 18:36:56 +0000
ROA not after:            Thu 27 Jun 2024 18:36:56 +0000
asID:                     396982
IP address blocks:        34.149.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:04:7f:5e:8f:ed:88:7d:81:27:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:36:56 2024 GMT
            Not After : Jun 27 18:36:56 2024 GMT
        Subject: CN=87aa267f-d867-428d-879f-a0d7f68ca191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3f:be:f6:40:94:1b:9d:c4:a4:30:60:58:85:
                    f7:89:29:1e:bc:b8:ec:ff:1c:cf:22:00:12:05:ee:
                    ad:9d:64:ad:c0:58:ba:c5:74:92:47:35:7e:7a:05:
                    1f:ec:35:58:71:15:74:46:ee:79:50:4e:4c:f5:85:
                    c9:46:d1:ef:f2:14:bf:3e:89:77:d8:e9:7f:03:09:
                    ea:c5:ec:f1:6e:e5:d9:33:2b:f1:8c:90:85:f0:6e:
                    7d:0d:45:5a:1b:56:26:3e:25:29:4d:16:d3:30:f0:
                    d6:cd:95:d2:e2:3c:8e:42:eb:e7:67:8f:79:8f:93:
                    88:52:be:f7:40:34:ec:f1:f8:12:fe:4e:08:eb:c2:
                    c4:73:c4:a8:68:fb:f5:ce:a0:ef:13:01:23:1d:16:
                    74:5d:e2:7d:95:d3:e4:43:4c:1d:d8:13:7d:96:71:
                    6c:cf:52:4a:77:f3:48:db:30:0d:a7:43:cf:0b:a1:
                    96:cb:ba:1c:bd:e3:9c:1c:6f:7c:a1:1f:b7:2b:71:
                    60:9f:8d:80:86:fc:4a:37:55:fc:cd:63:06:68:1f:
                    f7:bf:2b:32:aa:a9:66:bf:6d:89:53:dd:47:b1:8e:
                    a4:08:b3:15:63:61:6c:fb:c5:8f:9c:a1:93:68:37:
                    aa:66:b7:26:7b:75:b8:74:48:b7:0b:00:26:be:b3:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:08:6D:06:E4:FE:59:0C:CB:92:F0:39:6C:BF:8C:92:96:E6:97:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7429d408-7c24-3ca9-836c-e6d48c666a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.149.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:69:05:88:d1:32:f7:45:ec:bd:28:8a:f0:fb:d4:d3:d5:e1:
         62:f7:4d:15:50:b0:7d:db:a0:b9:84:3e:94:ac:d4:19:bd:8c:
         57:f6:ba:18:a6:21:6d:28:09:b7:86:0a:a5:2d:d3:be:54:ce:
         aa:92:ff:fb:fd:b3:7a:16:bf:33:9b:55:76:dd:6e:76:45:83:
         2e:92:e5:03:fd:06:91:dd:05:0d:90:19:49:d7:26:6c:01:1d:
         88:68:e6:8e:8e:c0:8b:d1:95:5f:55:c4:84:5c:a7:1d:20:16:
         0a:7d:14:2c:cb:16:9b:05:80:b6:b9:33:5d:aa:6b:a0:21:87:
         d2:d2:4c:7b:cd:ef:cd:86:ad:f7:95:9a:26:73:2c:95:13:77:
         27:a9:c1:c2:d1:0f:32:0b:4c:ca:74:70:81:51:ab:85:b2:36:
         a7:6d:eb:a4:7a:19:9e:e0:5d:91:89:92:54:1c:6a:4c:bf:07:
         e9:11:0e:16:d5:71:b9:fb:1b:98:db:00:bb:a7:07:2a:70:0c:
         40:1f:9b:44:84:c6:b1:10:06:e1:8f:e9:91:cd:f9:0b:9d:14:
         a0:35:41:0b:82:e7:86:d4:34:77:3e:9d:4c:84:04:1b:59:99:
         0c:49:05:13:4b:d6:77:0e:cb:60:50:1b:5b:40:80:59:8b:6a:
         51:b0:22:13
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVfBH9ej+2IfYEnwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyOTE4MzY1NloXDTI0MDYyNzE4MzY1NlowLzEtMCsGA1UEAxMk
ODdhYTI2N2YtZDg2Ny00MjhkLTg3OWYtYTBkN2Y2OGNhMTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7T++9kCUG53EpDBgWIX3iSkevLjs/xzPIgAS
Be6tnWStwFi6xXSSRzV+egUf7DVYcRV0Ru55UE5M9YXJRtHv8hS/Pol32Ol/Awnq
xezxbuXZMyvxjJCF8G59DUVaG1YmPiUpTRbTMPDWzZXS4jyOQuvnZ495j5OIUr73
QDTs8fgS/k4I68LEc8SoaPv1zqDvEwEjHRZ0XeJ9ldPkQ0wd2BN9lnFsz1JKd/NI
2zANp0PPC6GWy7ocveOcHG98oR+3K3Fgn42AhvxKN1X8zWMGaB/3vysyqqlmv22J
U91HsY6kCLMVY2Fs+8WPnKGTaDeqZrcme3W4dEi3CwAmvrOT9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOwIbQbk/lkMy5LwOWy/jJKW5pfpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzQyOWQ0MDgtN2MyNC0z
Y2E5LTgzNmMtZTZkNDhjNjY2YTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIpUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVmkFiNEy90XsvSiK8PvU09XhYvdNFVCwfduguYQ+lKzUGb2MV/a6GKYh
bSgJt4YKpS3TvlTOqpL/+/2zeha/M5tVdt1udkWDLpLlA/0Gkd0FDZAZSdcmbAEd
iGjmjo7Ai9GVX1XEhFynHSAWCn0ULMsWmwWAtrkzXaproCGH0tJMe83vzYat95Wa
JnMslRN3J6nBwtEPMgtMynRwgVGrhbI2p23rpHoZnuBdkYmSVBxqTL8H6REOFtVx
ufsbmNsAu6cHKnAMQB+bRITGsRAG4Y/pkc35C50UoDVBC4LnhtQ0dz6dTIQEG1mZ
DEkFE0vWdw7LYFAbW0CAWYtqUbAiEw==
-----END CERTIFICATE-----
Generated at Mon May 6 01:59:33 2024 by rpki-client on console-fra.rpki-client.org