Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30be15d4-1a56-3dcd-88d8-b00c3224a96c.roa
File:                     30be15d4-1a56-3dcd-88d8-b00c3224a96c.roa (raw, json)
Hash identifier:          PnG68P0eahX025nkn7F89YKKys3b/7I9j4DwFwgUI3k=
Subject key identifier:   3A:68:86:3C:59:15:D0:44:E2:1E:34:94:41:1C:1F:F1:BA:DE:15:CF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490E39369E0195E925687CC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30be15d4-1a56-3dcd-88d8-b00c3224a96c.roa
Signing time:             Thu 21 Mar 2024 21:48:45 +0000
ROA not before:           Thu 21 Mar 2024 21:48:45 +0000
ROA not after:            Wed 19 Jun 2024 21:48:45 +0000
asID:                     15169
IP address blocks:        35.216.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0e:39:36:9e:01:95:e9:25:68:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:48:45 2024 GMT
            Not After : Jun 19 21:48:45 2024 GMT
        Subject: CN=d1fb1632-8177-4a99-816d-da5cbc5f132c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:20:54:ff:c8:22:9c:14:0e:4a:95:57:8c:
                    84:57:a6:53:79:b4:93:eb:85:69:aa:16:7f:7a:95:
                    cf:f7:43:f1:c6:e4:ec:88:5a:19:c8:a3:3a:b9:43:
                    51:27:52:fc:63:7b:8b:3c:b0:ac:40:6b:e7:69:8f:
                    aa:20:a9:45:5c:70:06:3e:9a:b3:5e:cc:ab:42:fc:
                    bc:5f:a9:4d:bf:76:b9:9f:20:80:57:2f:42:0c:d0:
                    25:7d:c5:dc:e3:d0:f5:18:48:ed:8d:82:46:93:a9:
                    31:a6:37:4d:91:78:36:e1:27:7f:21:6c:e5:1a:9c:
                    10:62:a3:41:ca:b3:c3:ca:a9:a0:98:c7:9b:2c:81:
                    58:1a:0a:8b:c8:9e:b8:34:38:68:20:e1:60:1f:6e:
                    d1:19:da:07:a3:55:83:ec:e3:a0:33:38:6a:40:6b:
                    1d:7f:16:33:26:68:e1:67:75:72:9b:4b:1d:e8:d7:
                    6b:82:24:a2:4f:94:28:cc:01:14:0a:ce:3a:6d:85:
                    74:b6:54:de:7a:a4:74:48:50:83:d4:90:ad:0f:13:
                    df:a9:f7:c3:97:e3:8e:85:da:d7:3e:7f:ba:56:c8:
                    b2:11:17:33:26:df:42:d1:61:4d:8c:bf:1d:46:e1:
                    e6:23:78:5d:ae:ae:43:47:f1:16:7a:98:39:ab:82:
                    eb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:68:86:3C:59:15:D0:44:E2:1E:34:94:41:1C:1F:F1:BA:DE:15:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30be15d4-1a56-3dcd-88d8-b00c3224a96c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.216.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4c:7c:e4:dd:22:67:69:b3:76:7d:89:b2:fa:64:23:97:c7:
         a6:42:aa:94:9f:71:ba:62:54:aa:bc:97:03:97:8f:02:75:5c:
         47:81:11:12:46:c5:6b:5c:47:04:a8:c2:bb:b1:41:ed:36:db:
         95:43:51:49:7d:63:98:ab:30:b8:f6:a7:23:25:f0:10:a0:f1:
         cc:61:39:45:8e:1a:b8:b9:19:1d:6e:88:7e:9c:45:c9:98:b0:
         4e:5a:0b:31:34:8b:f8:88:27:99:3c:44:76:8f:7e:9e:72:f0:
         36:88:a0:86:c7:b4:b2:34:45:34:ba:2d:2c:25:9f:15:0c:dd:
         1b:06:39:43:22:1c:5d:df:00:d1:2c:b0:e9:7f:76:ce:9c:62:
         d6:86:a7:6d:48:c8:68:44:65:e7:fe:e4:3b:d0:ae:06:0c:93:
         db:10:5f:41:45:93:97:4b:93:5d:b4:c0:9b:12:93:ee:25:93:
         98:a7:3e:d4:ef:3b:aa:e0:89:9c:3d:8f:f4:66:01:62:c3:84:
         b9:79:66:5f:3e:08:e9:57:67:74:30:28:1b:22:46:04:c6:43:
         c6:d2:1c:4c:7a:0e:ba:b8:cf:c9:6f:7e:09:6b:54:b1:54:47:
         0d:3e:d5:5c:d5:16:1f:3b:28:31:0f:33:1a:54:1d:ad:9d:76:
         da:b7:50:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJDjk2ngGV6SVofMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxNDg0NVoXDTI0MDYxOTIxNDg0NVowLzEtMCsGA1UEAxMk
ZDFmYjE2MzItODE3Ny00YTk5LTgxNmQtZGE1Y2JjNWYxMzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRwgVP/IIpwUDkqVV4yEV6ZTebST64VpqhZ/
epXP90PxxuTsiFoZyKM6uUNRJ1L8Y3uLPLCsQGvnaY+qIKlFXHAGPpqzXsyrQvy8
X6lNv3a5nyCAVy9CDNAlfcXc49D1GEjtjYJGk6kxpjdNkXg24Sd/IWzlGpwQYqNB
yrPDyqmgmMebLIFYGgqLyJ64NDhoIOFgH27RGdoHo1WD7OOgMzhqQGsdfxYzJmjh
Z3Vym0sd6NdrgiSiT5QozAEUCs46bYV0tlTeeqR0SFCD1JCtDxPfqffDl+OOhdrX
Pn+6VsiyERczJt9C0WFNjL8dRuHmI3hdrq5DR/EWepg5q4LrkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDpohjxZFdBE4h40lEEcH/G63hXPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzBiZTE1ZDQtMWE1Ni0z
ZGNkLTg4ZDgtYjAwYzMyMjRhOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9gAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5MfOTdImdps3Z9ibL6ZCOXx6ZCqpSfcbpiVKq8lwOXjwJ1XEeBERJG
xWtcRwSowruxQe0225VDUUl9Y5irMLj2pyMl8BCg8cxhOUWOGri5GR1uiH6cRcmY
sE5aCzE0i/iIJ5k8RHaPfp5y8DaIoIbHtLI0RTS6LSwlnxUM3RsGOUMiHF3fANEs
sOl/ds6cYtaGp21IyGhEZef+5DvQrgYMk9sQX0FFk5dLk120wJsSk+4lk5inPtTv
O6rgiZw9j/RmAWLDhLl5Zl8+COlXZ3QwKBsiRgTGQ8bSHEx6Drq4z8lvfglrVLFU
Rw0+1VzVFh87KDEPMxpUHa2ddtq3UAo=
-----END CERTIFICATE-----
Generated at Thu May 9 15:22:22 2024 by rpki-client on console-ams.rpki-client.org