Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18ec2c27-1301-3e0f-8825-94d685ca8c0d.roa
File:                     18ec2c27-1301-3e0f-8825-94d685ca8c0d.roa (raw, json)
Hash identifier:          zKfoHYP59+GVaD0dhsZKg59YUIgeF5sj0JHyL6zsxrs=
Subject key identifier:   3F:B7:D8:3A:B7:28:14:F5:4B:CF:3E:0C:36:48:70:45:40:EC:8C:34
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584508D29BC723B4F509F7067B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18ec2c27-1301-3e0f-8825-94d685ca8c0d.roa
Signing time:             Tue 27 Feb 2024 21:36:53 +0000
ROA not before:           Tue 27 Feb 2024 21:36:53 +0000
ROA not after:            Mon 27 May 2024 20:36:53 +0000
asID:                     15169
IP address blocks:        34.1.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:08:d2:9b:c7:23:b4:f5:09:f7:06:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 27 21:36:53 2024 GMT
            Not After : May 27 20:36:53 2024 GMT
        Subject: CN=03c4629f-9604-44c7-8fff-3bc477655f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:92:43:b2:e8:71:fd:a0:6a:6a:f0:fb:50:38:
                    ce:ec:f0:15:18:2f:49:5e:99:26:e8:0f:54:09:be:
                    30:cb:08:bd:f3:fc:e0:ee:92:41:71:ae:b5:42:45:
                    8a:31:0d:6d:52:ad:12:75:80:12:37:44:9f:37:c7:
                    03:21:77:e8:16:fe:cf:cb:6a:d5:97:1a:89:c4:f4:
                    1b:f2:8d:78:10:18:bd:df:22:d6:6e:33:ec:fb:0f:
                    5d:45:30:d1:5e:25:f0:50:33:31:bb:1a:73:1b:03:
                    e1:60:44:ab:a3:ec:40:3c:79:c8:59:7e:40:22:0a:
                    6e:47:91:71:ea:1a:c8:70:17:ec:5e:de:c2:05:98:
                    db:cc:aa:0b:d0:64:d9:9e:fe:8a:31:8f:0d:20:f1:
                    db:b4:02:d6:d3:ef:82:b1:b0:5d:bb:d1:5d:ac:8e:
                    88:f2:b7:3d:55:f1:8b:ca:cf:89:77:ba:4a:c3:b7:
                    e2:0a:f1:57:fe:10:25:3e:f3:e4:5d:ea:99:6e:dd:
                    8b:e0:f4:da:2d:a1:3d:a7:8e:c0:8a:46:fd:8a:e8:
                    ec:c6:45:fc:aa:19:c1:1d:f9:28:aa:2c:4c:fb:f6:
                    bf:38:f6:1a:46:5e:ec:22:c9:31:f2:d2:a2:5c:a5:
                    fd:41:c9:b3:f6:5d:ef:93:38:44:9f:83:99:f1:7d:
                    f4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B7:D8:3A:B7:28:14:F5:4B:CF:3E:0C:36:48:70:45:40:EC:8C:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18ec2c27-1301-3e0f-8825-94d685ca8c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ad:de:33:3b:69:43:da:e2:22:b9:6d:83:b5:87:c8:62:ce:
         90:f4:ee:d1:9d:7f:39:e7:ac:c4:27:1b:62:99:78:2c:2e:44:
         d3:0b:7b:c7:61:69:8f:54:95:e4:c2:d7:f7:99:c6:8b:4d:b8:
         1b:58:19:7e:77:0d:18:e2:cd:94:1a:c3:8a:76:cd:76:10:44:
         60:54:5f:c2:c4:12:52:a5:81:7e:ca:59:0c:69:42:11:0c:3a:
         79:12:c1:12:4d:3b:1e:58:2e:e7:e3:99:b2:72:75:29:07:bb:
         b7:d0:b9:d0:ef:87:78:d0:f6:cc:91:a5:4c:14:b1:69:62:48:
         9b:ae:6a:50:e3:9c:4b:38:4d:58:54:5f:41:81:61:ac:29:84:
         f3:66:92:b7:13:21:61:61:86:2b:b7:58:8e:a0:0d:3f:cd:73:
         be:42:79:ce:a1:cf:08:52:e3:a4:dd:bb:08:7e:cc:e2:22:d3:
         ff:cd:55:0b:c7:80:1f:de:d1:82:41:78:04:0a:40:a2:39:75:
         73:80:cf:50:9e:70:9c:a0:60:14:7f:e5:cf:70:9d:e0:40:a6:
         53:ec:73:b3:19:3e:5a:f5:8b:ad:aa:a9:df:56:30:7e:cf:18:
         73:c4:f7:cb:db:73:85:89:48:9e:2b:35:0e:af:87:03:24:65:
         a9:00:3f:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUI0pvHI7T1CfcGewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDIyNzIxMzY1M1oXDTI0MDUyNzIwMzY1M1owLzEtMCsGA1UEAxMk
MDNjNDYyOWYtOTYwNC00NGM3LThmZmYtM2JjNDc3NjU1ZjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJJDsuhx/aBqavD7UDjO7PAVGC9JXpkm6A9U
Cb4wywi98/zg7pJBca61QkWKMQ1tUq0SdYASN0SfN8cDIXfoFv7Py2rVlxqJxPQb
8o14EBi93yLWbjPs+w9dRTDRXiXwUDMxuxpzGwPhYESro+xAPHnIWX5AIgpuR5Fx
6hrIcBfsXt7CBZjbzKoL0GTZnv6KMY8NIPHbtALW0++CsbBdu9FdrI6I8rc9VfGL
ys+Jd7pKw7fiCvFX/hAlPvPkXeqZbt2L4PTaLaE9p47Aikb9iujsxkX8qhnBHfko
qixM+/a/OPYaRl7sIskx8tKiXKX9Qcmz9l3vkzhEn4OZ8X304wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD+32Dq3KBT1S88+DDZIcEVA7Iw0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMThlYzJjMjctMTMwMS0z
ZTBmLTg4MjUtOTRkNjg1Y2E4YzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACet3jM7aUPa4iK5bYO1h8hizpD07tGdfznnrMQnG2KZeCwuRNMLe8dh
aY9UleTC1/eZxotNuBtYGX53DRjizZQaw4p2zXYQRGBUX8LEElKlgX7KWQxpQhEM
OnkSwRJNOx5YLufjmbJydSkHu7fQudDvh3jQ9syRpUwUsWliSJuualDjnEs4TVhU
X0GBYawphPNmkrcTIWFhhiu3WI6gDT/Nc75Cec6hzwhS46Tduwh+zOIi0//NVQvH
gB/e0YJBeAQKQKI5dXOAz1CecJygYBR/5c9wneBAplPsc7MZPlr1i62qqd9WMH7P
GHPE98vbc4WJSJ4rNQ6vhwMkZakAP+A=
-----END CERTIFICATE-----
Generated at Thu May 9 01:29:13 2024 by rpki-client on console-ams.rpki-client.org