Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d96e043-74c7-3888-bb15-c6ff72f33121.roa
File:                     1d96e043-74c7-3888-bb15-c6ff72f33121.roa (raw, json)
Hash identifier:          3rVx4vhT4XTNm0X46DRKUuAqeEEIAYRp7rbBtHDfZHI=
Subject key identifier:   48:1F:36:C2:EE:70:39:69:F6:23:5D:11:49:24:01:94:ED:BB:3F:2E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C58170AA1918CA3BBA0D4500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d96e043-74c7-3888-bb15-c6ff72f33121.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     19527
IP address blocks:        34.1.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:70:aa:19:18:ca:3b:ba:0d:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=5a1095d6-4dcd-434d-be57-6553f612025d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:a2:7d:71:3e:f0:47:e1:60:bd:0e:ce:c2:
                    1c:20:84:b4:c8:a3:4b:40:29:5a:e9:37:1b:da:60:
                    38:54:db:4e:3b:4a:c5:66:e6:02:ec:b4:fd:d9:1a:
                    ec:89:c1:72:e0:a6:70:c0:d7:bd:c7:51:79:c6:82:
                    84:7b:e6:19:b5:d9:44:22:0b:e6:2e:63:68:f3:90:
                    28:6f:6f:eb:57:18:91:8d:c2:e7:53:9f:b9:a7:a3:
                    2b:09:b3:ae:6b:1b:0c:f2:90:bf:22:ed:2e:bd:1a:
                    5a:dd:f0:b1:9e:5a:06:28:72:45:1a:e8:d3:dd:19:
                    b8:a5:ba:7e:34:c7:8d:34:c8:99:1a:96:76:d2:ad:
                    36:80:f4:d2:61:87:ad:e7:ab:d6:dc:e8:28:2a:b9:
                    12:9e:8d:f8:60:b7:55:ea:bb:56:1e:7e:65:93:1c:
                    df:56:e2:e0:86:ff:67:eb:77:de:5f:bb:49:cf:66:
                    eb:9e:ca:6b:b2:ed:ef:61:87:c7:d9:8b:d0:6f:91:
                    3c:91:85:b8:4c:b0:3f:9f:2c:a1:79:1b:cd:4c:ed:
                    27:0c:0c:c9:fb:52:ed:66:19:8d:b7:dc:b6:c7:00:
                    5d:e1:16:a0:4f:34:41:c7:9a:a0:16:bd:ca:fe:34:
                    c8:21:98:90:d5:7f:36:c6:23:f2:c5:6f:6b:88:ef:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1F:36:C2:EE:70:39:69:F6:23:5D:11:49:24:01:94:ED:BB:3F:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d96e043-74c7-3888-bb15-c6ff72f33121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1a:ca:64:8a:9d:8b:af:37:fd:eb:c5:f0:ea:a6:2f:fe:c7:
         f3:b9:f2:d2:23:c2:e7:a1:c9:42:69:9e:c0:80:59:e7:3a:61:
         db:b9:7f:a1:48:ce:32:c7:43:67:14:35:d2:7e:4f:07:60:5a:
         3b:21:1c:a4:e8:34:af:be:2a:93:8f:87:90:5e:da:41:07:90:
         16:a4:21:c6:04:cc:61:ab:37:b9:78:a0:1c:d7:36:27:29:f4:
         c9:0b:26:b1:0d:9b:a5:8e:2d:4e:80:d0:4d:9b:57:d8:ea:d2:
         cf:f5:32:ac:63:e7:5d:a6:0b:32:09:5a:b6:b4:e7:0f:39:f3:
         38:9b:4e:49:a8:3f:86:9f:e6:d8:29:55:82:23:90:3d:4d:57:
         0a:c6:a6:3d:b8:70:72:25:e6:3c:10:2a:8a:15:ff:f4:e6:88:
         71:ca:51:1b:c0:91:bd:ce:ce:db:c8:b5:09:57:1a:97:6f:c7:
         0e:1c:23:21:79:76:97:c7:76:6d:fa:e4:0a:b1:60:fa:61:dc:
         cc:5e:e8:e3:d3:df:d0:b2:8b:6c:bd:e4:e4:ac:6c:30:d5:8d:
         67:26:e1:65:68:ef:a8:0f:c7:af:14:14:56:4c:e8:29:55:56:
         64:8c:cd:32:6b:76:a7:cc:e3:17:ce:8f:f0:60:7f:7f:90:23:
         b2:f2:fb:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXCqGRjKO7oNRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NWExMDk1ZDYtNGRjZC00MzRkLWJlNTctNjU1M2Y2MTIwMjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn26ifXE+8EfhYL0OzsIcIIS0yKNLQCla6Tcb
2mA4VNtOO0rFZuYC7LT92RrsicFy4KZwwNe9x1F5xoKEe+YZtdlEIgvmLmNo85Ao
b2/rVxiRjcLnU5+5p6MrCbOuaxsM8pC/Iu0uvRpa3fCxnloGKHJFGujT3Rm4pbp+
NMeNNMiZGpZ20q02gPTSYYet56vW3OgoKrkSno34YLdV6rtWHn5lkxzfVuLghv9n
63feX7tJz2brnsprsu3vYYfH2YvQb5E8kYW4TLA/nyyheRvNTO0nDAzJ+1LtZhmN
t9y2xwBd4RagTzRBx5qgFr3K/jTIIZiQ1X82xiPyxW9riO8V0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgfNsLucDlp9iNdEUkkAZTtuz8uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQ5NmUwNDMtNzRjNy0z
ODg4LWJiMTUtYzZmZjcyZjMzMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgaymSKnYuvN/3rxfDqpi/+x/O58tIjwuehyUJpnsCAWec6Ydu5f6FI
zjLHQ2cUNdJ+TwdgWjshHKToNK++KpOPh5Be2kEHkBakIcYEzGGrN7l4oBzXNicp
9MkLJrENm6WOLU6A0E2bV9jq0s/1Mqxj512mCzIJWra05w858zibTkmoP4af5tgp
VYIjkD1NVwrGpj24cHIl5jwQKooV//TmiHHKURvAkb3OztvItQlXGpdvxw4cIyF5
dpfHdm365AqxYPph3Mxe6OPT39Cyi2y95OSsbDDVjWcm4WVo76gPx68UFFZM6ClV
VmSMzTJrdqfM4xfOj/Bgf3+QI7Ly++I=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:57:45 2025 by rpki-client