Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ff62ecc-5558-36ba-8115-1aa9887da859.roa
File:                     3ff62ecc-5558-36ba-8115-1aa9887da859.roa (raw, json)
Hash identifier:          biGfWqb2NloJQRMH3dr0MqblD1xvmsx8lnKDr2HwQT8=
Subject key identifier:   95:16:EB:07:CC:EE:7F:57:C7:F6:1F:E7:CD:B4:29:B0:73:12:BA:74
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C5820E613EE15C18D8028400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ff62ecc-5558-36ba-8115-1aa9887da859.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        34.0.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:0e:61:3e:e1:5c:18:d8:02:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=d8df9a0f-49c3-4ea1-a90f-4517d6e761b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:8b:dc:5b:c6:f5:d3:33:9d:7c:ea:83:0c:
                    3a:e8:b5:f6:69:68:3c:2b:5e:56:fa:14:84:e7:35:
                    2b:11:de:51:4a:e9:c1:2c:44:be:33:f0:b3:3f:e2:
                    67:c9:6c:89:cc:4f:04:28:a6:f3:4d:33:61:a1:b8:
                    3b:40:62:d6:1c:f4:40:4a:06:5b:cf:78:e2:24:82:
                    66:e1:1f:c0:2b:36:20:97:cd:dc:b9:f4:a7:30:ee:
                    cd:43:34:a8:50:25:63:bb:ac:8e:10:74:78:73:0b:
                    81:a9:d5:d2:19:84:23:b3:fe:da:9b:5f:1a:d5:91:
                    eb:f5:6c:cb:c8:6f:95:8c:c4:c9:8a:91:cb:c6:dc:
                    36:8f:91:bb:e8:33:07:15:1c:c0:23:95:ca:46:2a:
                    50:65:a6:fc:5f:8d:bd:75:bb:b6:c6:0a:d9:61:97:
                    20:63:f1:99:81:9e:4c:84:8c:87:9b:38:89:85:0a:
                    13:08:e0:1a:ca:cd:b5:a1:50:b0:bc:1b:40:ca:17:
                    7b:2e:5c:62:2b:f7:c5:9c:6a:21:4e:90:bc:81:7f:
                    2c:c1:be:4c:c2:e1:71:9a:f8:f5:08:62:4c:48:1d:
                    35:8c:7d:3b:52:f8:78:de:87:c3:84:25:7b:4b:c4:
                    3c:39:88:8e:68:a3:b6:1b:7f:25:3a:0e:d1:54:5a:
                    dd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:16:EB:07:CC:EE:7F:57:C7:F6:1F:E7:CD:B4:29:B0:73:12:BA:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ff62ecc-5558-36ba-8115-1aa9887da859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:36:b4:46:e3:66:25:5b:1e:36:23:5b:bf:f9:c1:6d:90:ec:
         7c:66:51:80:c9:3e:61:62:6f:29:ad:b6:3e:7f:cf:07:ba:69:
         c2:1b:8e:01:e2:bb:d1:b6:c0:28:36:22:c3:fb:34:d2:41:d8:
         f7:fe:c2:b8:f5:28:b8:71:58:04:0c:69:39:80:e4:39:a8:8e:
         7c:ae:0d:aa:7b:b7:48:87:ce:b8:a0:8c:d5:13:d5:43:c2:6f:
         07:b8:e7:65:0e:67:70:c2:ef:13:e5:35:aa:ea:a2:46:b3:06:
         05:81:85:53:bf:0d:10:39:3c:3d:78:5f:55:ce:38:31:fd:31:
         ac:3c:2b:a2:29:07:bd:bd:1d:2b:15:21:8a:43:08:1e:79:ed:
         c3:ee:fb:33:2e:5c:53:3b:be:32:ad:0e:af:a7:60:c4:84:a0:
         9a:b2:6b:d4:7a:18:84:8c:b8:8f:bb:90:5f:31:c6:0b:5b:1d:
         d9:74:62:a7:71:a2:7f:a1:3b:8f:58:4f:02:3c:8e:d1:38:02:
         25:3b:ff:65:a0:5a:de:59:f6:fe:00:79:30:c4:22:7b:16:89:
         ff:19:e1:15:f6:dc:65:54:c4:76:0f:25:99:ad:19:58:ec:aa:
         6b:e9:a1:8a:a1:6c:3a:f9:e7:7a:13:3c:ba:f0:f6:49:87:47:
         eb:f6:08:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgg5hPuFcGNgChAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDhkZjlhMGYtNDljMy00ZWExLWE5MGYtNDUxN2Q2ZTc2MWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurWL3FvG9dMznXzqgww66LX2aWg8K15W+hSE
5zUrEd5RSunBLES+M/CzP+JnyWyJzE8EKKbzTTNhobg7QGLWHPRASgZbz3jiJIJm
4R/AKzYgl83cufSnMO7NQzSoUCVju6yOEHR4cwuBqdXSGYQjs/7am18a1ZHr9WzL
yG+VjMTJipHLxtw2j5G76DMHFRzAI5XKRipQZab8X429dbu2xgrZYZcgY/GZgZ5M
hIyHmziJhQoTCOAays21oVCwvBtAyhd7LlxiK/fFnGohTpC8gX8swb5MwuFxmvj1
CGJMSB01jH07Uvh43ofDhCV7S8Q8OYiOaKO2G38lOg7RVFrdqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJUW6wfM7n9Xx/Yf5820KbBzErp0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2ZmNjJlY2MtNTU1OC0z
NmJhLTgxMTUtMWFhOTg4N2RhODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgDjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIg2tEbjZiVbHjYjW7/5wW2Q7HxmUYDJPmFibymttj5/zwe6acIbjgHi
u9G2wCg2IsP7NNJB2Pf+wrj1KLhxWAQMaTmA5DmojnyuDap7t0iHzrigjNUT1UPC
bwe452UOZ3DC7xPlNarqokazBgWBhVO/DRA5PD14X1XOODH9Maw8K6IpB729HSsV
IYpDCB557cPu+zMuXFM7vjKtDq+nYMSEoJqya9R6GISMuI+7kF8xxgtbHdl0Yqdx
on+hO49YTwI8jtE4AiU7/2WgWt5Z9v4AeTDEInsWif8Z4RX23GVUxHYPJZmtGVjs
qmvpoYqhbDr553oTPLrw9kmHR+v2CFE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:44 2025 by rpki-client