Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbfae0c1-8a5a-3e1a-bd21-505ecf368e17.roa
File:                     fbfae0c1-8a5a-3e1a-bd21-505ecf368e17.roa (raw, json)
Hash identifier:          fhWO12zytVGaS/JU0QF+IqPQKBAXAbqI2sb8rYkZCiA=
Subject key identifier:   DB:B1:68:1A:E1:6C:E9:8E:E2:AB:6C:5E:9B:A8:65:82:FF:81:69:F2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285844FB60017C1720F59041FE4280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbfae0c1-8a5a-3e1a-bd21-505ecf368e17.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        34.104.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:01:7c:17:20:f5:90:41:fe:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=21fd8e95-691a-40ce-8f35-fd79124196f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:17:19:e0:4a:18:ee:ea:d6:a1:86:dc:c6:23:
                    cb:91:32:65:fb:83:66:4a:62:fa:31:48:d7:28:fb:
                    23:9f:2f:ba:d7:5a:50:c7:ba:ba:3a:27:5e:2e:80:
                    2c:aa:c1:21:51:26:97:fa:1f:3e:2e:b9:b9:75:ba:
                    31:47:65:93:00:68:b8:ff:5d:67:d0:06:53:09:93:
                    44:ac:88:97:ad:7e:73:91:07:2e:b8:80:7e:bd:22:
                    2b:c7:31:d5:17:75:25:15:f8:04:75:ee:75:c4:65:
                    0a:be:71:bc:c1:1e:0b:db:17:e5:b4:4e:69:ef:9d:
                    ac:3f:b0:ac:b0:34:70:8c:75:de:e8:6a:13:01:e5:
                    8e:12:2f:2a:a6:e2:16:8e:30:1b:f4:f2:2c:ec:5a:
                    bb:14:bf:67:9d:a9:da:aa:4b:4d:d0:fa:5e:ea:f0:
                    54:2d:a1:6d:ad:9a:ac:70:b7:d5:e8:26:c9:3e:5b:
                    46:97:0e:cc:84:e2:c3:62:e4:60:41:cd:c4:81:6f:
                    ee:22:03:ca:b6:63:28:48:ed:f7:df:12:d5:71:2d:
                    69:79:58:12:42:c8:b2:4c:f1:c4:9f:43:26:90:ad:
                    db:02:8c:8b:96:31:9a:51:03:d5:a6:23:47:21:25:
                    26:f4:df:9a:3d:4c:33:82:fa:06:e3:29:83:6c:dd:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B1:68:1A:E1:6C:E9:8E:E2:AB:6C:5E:9B:A8:65:82:FF:81:69:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fbfae0c1-8a5a-3e1a-bd21-505ecf368e17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.104.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f5:71:1f:bf:78:23:4d:8f:3b:a4:a5:70:2c:c2:e6:1e:17:
         7a:9a:96:77:ef:b0:28:7f:f3:e0:76:eb:cb:d4:90:aa:cf:fa:
         c4:b6:58:1c:e5:6f:14:5f:1b:ca:3d:5a:a2:84:36:e2:78:90:
         72:17:0e:57:8c:3c:f4:34:df:81:e6:0b:65:f1:c7:7e:15:fc:
         e3:df:e1:60:4f:b7:a6:a1:06:a2:17:46:3a:d9:ee:14:b5:9c:
         8c:df:11:7d:21:3c:ba:67:07:7b:8d:35:59:70:16:97:96:f1:
         ba:0f:8d:0d:3d:65:d9:08:d3:4c:ca:fb:db:cc:20:7e:4b:58:
         d2:8f:ba:12:78:d4:88:05:52:2e:ee:11:2f:39:a6:df:bb:99:
         a4:4a:7c:28:7e:44:bc:2e:3f:96:70:62:8a:44:db:4b:ea:de:
         42:9e:48:5b:53:55:b4:60:c8:e4:f5:83:59:6b:fc:1e:7e:b0:
         19:7f:9f:f2:b7:ff:94:9f:d2:6a:ce:c3:2f:a7:51:c9:f8:e9:
         3c:ed:06:0a:bb:3f:74:0b:6e:b2:30:1e:71:f8:c6:27:94:09:
         bd:da:d1:bd:3f:37:ec:55:64:36:bc:00:14:83:86:1f:76:bf:
         ec:e3:bd:f5:77:58:25:47:e8:42:0b:72:93:d0:aa:e2:bc:2f:
         96:1a:5a:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET7YAF8FyD1kEH+QoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDIyMzAyMDAyNloXDTI0MDUyMzAxMDAyNlowLzEtMCsGA1UEAxMk
MjFmZDhlOTUtNjkxYS00MGNlLThmMzUtZmQ3OTEyNDE5NmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBcZ4EoY7urWoYbcxiPLkTJl+4NmSmL6MUjX
KPsjny+611pQx7q6OideLoAsqsEhUSaX+h8+Lrm5dboxR2WTAGi4/11n0AZTCZNE
rIiXrX5zkQcuuIB+vSIrxzHVF3UlFfgEde51xGUKvnG8wR4L2xfltE5p752sP7Cs
sDRwjHXe6GoTAeWOEi8qpuIWjjAb9PIs7Fq7FL9nnanaqktN0Ppe6vBULaFtrZqs
cLfV6CbJPltGlw7MhOLDYuRgQc3EgW/uIgPKtmMoSO333xLVcS1peVgSQsiyTPHE
n0MmkK3bAoyLljGaUQPVpiNHISUm9N+aPUwzgvoG4ymDbN2MUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNuxaBrhbOmO4qtsXpuoZYL/gWnyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmJmYWUwYzEtOGE1YS0z
ZTFhLWJkMjEtNTA1ZWNmMzY4ZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAImgeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEn1cR+/eCNNjzukpXAswuYeF3qalnfvsCh/8+B268vUkKrP+sS2WBzl
bxRfG8o9WqKENuJ4kHIXDleMPPQ034HmC2Xxx34V/OPf4WBPt6ahBqIXRjrZ7hS1
nIzfEX0hPLpnB3uNNVlwFpeW8boPjQ09ZdkI00zK+9vMIH5LWNKPuhJ41IgFUi7u
ES85pt+7maRKfCh+RLwuP5ZwYopE20vq3kKeSFtTVbRgyOT1g1lr/B5+sBl/n/K3
/5Sf0mrOwy+nUcn46TztBgq7P3QLbrIwHnH4xieUCb3a0b0/N+xVZDa8ABSDhh92
v+zjvfV3WCVH6EILcpPQquK8L5YaWow=
-----END CERTIFICATE-----
Generated at Mon May 6 01:58:25 2024 by rpki-client on console-ams.rpki-client.org