Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ac14654-b739-3df4-a7af-add24c8361cc.roa
File:                     1ac14654-b739-3df4-a7af-add24c8361cc.roa (raw, json)
Hash identifier:          MT4H8P+tLGpr/NzmyUa1aNi6LdEI1/xmPqi1sn672G4=
Subject key identifier:   03:41:EB:36:FB:F8:A6:C7:1C:79:EC:66:28:62:09:CB:4F:A5:18:16
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584549030B2004F8C7E34CF83400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ac14654-b739-3df4-a7af-add24c8361cc.roa
Signing time:             Thu 21 Mar 2024 21:26:13 +0000
ROA not before:           Thu 21 Mar 2024 21:26:13 +0000
ROA not after:            Wed 19 Jun 2024 21:26:13 +0000
asID:                     15169
IP address blocks:        35.212.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:03:0b:20:04:f8:c7:e3:4c:f8:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:26:13 2024 GMT
            Not After : Jun 19 21:26:13 2024 GMT
        Subject: CN=2f63871d-01c7-4ec7-bab3-26dfdeb3a72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:49:1b:1c:19:04:c0:3b:7c:79:d2:4e:e9:6a:
                    78:86:cb:e6:f3:f5:d0:f2:25:93:8b:05:f8:2f:13:
                    1a:2f:19:ac:43:dd:66:9f:8b:d7:b0:fb:6c:9f:cd:
                    ea:87:9d:97:d6:7e:6f:ff:0e:7d:22:aa:68:ef:c1:
                    6c:83:d7:49:fb:3c:31:40:ef:3f:e5:55:07:84:d1:
                    5c:d4:7d:ed:a9:f0:5f:53:84:48:69:f5:7e:8a:9b:
                    d6:8b:e1:aa:88:8a:a1:d6:3c:bd:10:23:ab:da:fb:
                    71:5e:b7:aa:04:50:25:17:60:33:be:25:a2:0c:ec:
                    4b:3b:e0:50:c6:d9:15:c6:c9:fd:6a:f0:14:d4:b0:
                    df:cc:8f:7a:2e:50:92:8e:78:e5:bf:0b:17:01:ff:
                    e4:7f:64:19:48:c3:e9:d9:5e:c6:6a:b8:04:09:5d:
                    f5:44:cf:c2:de:dd:58:49:22:f3:61:45:da:40:de:
                    47:a7:be:87:fe:b7:c7:f3:a1:96:09:19:49:1c:6a:
                    28:9b:4c:e5:e9:32:3c:29:68:0e:31:3a:d2:2f:69:
                    fb:38:ca:80:4f:91:7f:0e:db:fb:ac:95:79:c6:66:
                    d2:7a:c1:fc:bf:38:5d:d3:fa:90:57:71:13:c1:5b:
                    79:79:0b:e6:95:2d:e8:c8:ff:37:18:a3:e1:a8:de:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:41:EB:36:FB:F8:A6:C7:1C:79:EC:66:28:62:09:CB:4F:A5:18:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ac14654-b739-3df4-a7af-add24c8361cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.212.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:34:7a:cc:68:5c:5f:d5:f7:95:82:9e:6c:2d:45:db:28:be:
         82:96:9c:af:1f:12:8d:fd:9e:06:79:78:47:8c:0a:d1:8a:18:
         2d:3c:45:b1:93:25:d5:f9:0a:1e:e8:fb:a7:e8:1f:f7:d4:cd:
         08:f1:c5:a5:a5:16:20:27:fa:18:3f:a1:f3:51:3b:4a:08:41:
         c4:c3:49:22:fc:fb:ab:1b:61:0b:f3:b1:ac:b9:14:98:ac:a2:
         f6:13:13:5f:91:ca:2d:66:9a:df:29:89:ae:2d:a7:d1:21:b1:
         3e:6e:dc:8e:5f:4a:61:02:49:35:44:5a:7e:ee:10:74:bb:e5:
         c2:20:ae:d0:c6:64:15:fe:1b:a1:c5:0e:a1:8b:b2:90:9c:16:
         66:62:24:87:47:c6:6a:b8:17:95:6b:57:15:82:2f:54:ab:d8:
         35:f6:5a:96:d9:00:8f:a2:a4:f0:70:b9:1e:1f:d7:b8:fe:c9:
         b5:1c:42:dd:b6:71:e7:42:8e:0e:ac:60:bc:cc:ad:17:12:fe:
         c4:af:d2:d0:56:28:ee:f9:c0:4e:49:05:cb:4e:6a:c5:7f:c2:
         64:5e:70:67:63:62:1b:43:ee:c7:de:32:95:62:cb:56:09:60:
         1f:cb:8e:5b:1f:9d:15:a6:8d:bb:c2:1a:d0:30:ee:3c:5e:69:
         47:5c:0e:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJAwsgBPjH40z4NAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxMjYxM1oXDTI0MDYxOTIxMjYxM1owLzEtMCsGA1UEAxMk
MmY2Mzg3MWQtMDFjNy00ZWM3LWJhYjMtMjZkZmRlYjNhNzJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEkbHBkEwDt8edJO6Wp4hsvm8/XQ8iWTiwX4
LxMaLxmsQ91mn4vXsPtsn83qh52X1n5v/w59Iqpo78Fsg9dJ+zwxQO8/5VUHhNFc
1H3tqfBfU4RIafV+ipvWi+GqiIqh1jy9ECOr2vtxXreqBFAlF2AzviWiDOxLO+BQ
xtkVxsn9avAU1LDfzI96LlCSjnjlvwsXAf/kf2QZSMPp2V7GargECV31RM/C3t1Y
SSLzYUXaQN5Hp76H/rfH86GWCRlJHGoom0zl6TI8KWgOMTrSL2n7OMqAT5F/Dtv7
rJV5xmbSesH8vzhd0/qQV3ETwVt5eQvmlS3oyP83GKPhqN6CtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFANB6zb7+KbHHHnsZihiCctPpRgWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWFjMTQ2NTQtYjczOS0z
ZGY0LWE3YWYtYWRkMjRjODM2MWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9SAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKk0esxoXF/V95WCnmwtRdsovoKWnK8fEo39ngZ5eEeMCtGKGC08RbGT
JdX5Ch7o+6foH/fUzQjxxaWlFiAn+hg/ofNRO0oIQcTDSSL8+6sbYQvzsay5FJis
ovYTE1+Ryi1mmt8pia4tp9EhsT5u3I5fSmECSTVEWn7uEHS75cIgrtDGZBX+G6HF
DqGLspCcFmZiJIdHxmq4F5VrVxWCL1Sr2DX2WpbZAI+ipPBwuR4f17j+ybUcQt22
cedCjg6sYLzMrRcS/sSv0tBWKO75wE5JBctOasV/wmRecGdjYhtD7sfeMpViy1YJ
YB/LjlsfnRWmjbvCGtAw7jxeaUdcDms=
-----END CERTIFICATE-----
Generated at Thu May 9 07:44:32 2024 by rpki-client on console-ams.rpki-client.org