Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/446578ca-a558-3725-938a-df8a6c8ec5c6.roa
File:                     446578ca-a558-3725-938a-df8a6c8ec5c6.roa (raw, json)
Hash identifier:          SE+8cnxoOWXeJgt1ECrZNlSMmyCN2Aax+t54OUUyBxE=
Subject key identifier:   BB:30:E5:57:03:2C:E4:A4:5D:8F:91:A8:57:DC:47:27:53:16:C2:6B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858450B9D4A754F94F921C2500B40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/446578ca-a558-3725-938a-df8a6c8ec5c6.roa
Signing time:             Wed 28 Feb 2024 21:36:53 +0000
ROA not before:           Wed 28 Feb 2024 21:36:53 +0000
ROA not after:            Tue 28 May 2024 20:36:53 +0000
asID:                     15169
IP address blocks:        34.1.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0b:9d:4a:75:4f:94:f9:21:c2:50:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 28 21:36:53 2024 GMT
            Not After : May 28 20:36:53 2024 GMT
        Subject: CN=27b8fade-6bb5-4090-a553-7a23eb38264a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:19:c4:22:bd:85:83:26:8d:a8:83:ee:9f:82:
                    b3:0b:4e:81:53:63:63:28:c7:9b:93:4a:4d:7a:70:
                    90:0b:b8:f9:3e:db:3a:af:7f:a9:f8:be:ae:5f:ef:
                    6a:00:5d:55:27:97:49:a1:84:a9:d2:3e:d6:68:ce:
                    55:b9:b4:05:50:ad:47:b9:d9:aa:49:65:10:a9:45:
                    20:b0:b8:2b:fe:d7:92:68:97:97:f7:43:ac:18:13:
                    30:66:5b:06:b2:89:af:9e:2f:4e:e5:42:f5:0a:58:
                    6c:f3:b5:4c:a4:84:b5:c8:c8:1d:ba:e2:75:02:f0:
                    8f:d4:8d:b6:0d:28:96:3c:af:c9:ca:3c:1e:d8:8e:
                    31:27:6e:3d:bd:43:a3:0b:bc:c1:03:b5:8e:fe:73:
                    e8:5c:f3:dc:9e:b8:ab:03:83:00:df:ec:64:83:d7:
                    70:e6:a8:e9:ea:3a:9d:94:7d:bd:29:61:f6:e6:5e:
                    35:b1:06:ed:b2:9c:15:30:0c:fa:8d:9f:fe:21:95:
                    6f:c0:d5:66:09:25:6e:bc:6e:5f:33:c7:67:6c:60:
                    7f:88:ce:a5:96:bf:78:da:55:2d:bb:b0:c6:2a:05:
                    12:fb:da:43:f9:1e:53:6e:cd:19:a4:cd:c6:ee:b9:
                    2b:92:c2:6a:b0:b7:0c:ce:5c:14:bb:ca:4a:32:6a:
                    66:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:30:E5:57:03:2C:E4:A4:5D:8F:91:A8:57:DC:47:27:53:16:C2:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/446578ca-a558-3725-938a-df8a6c8ec5c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:66:e9:9e:9b:fb:eb:ac:52:a5:4d:c8:5b:b9:0c:b7:4c:2a:
         ab:7b:89:84:b5:74:bb:36:a2:e5:15:26:d9:a6:63:76:6e:fb:
         6e:28:e3:e0:e1:9a:1e:ea:b0:70:7b:84:fc:a4:90:15:0a:fb:
         29:5e:f6:b2:40:0f:a5:87:eb:40:8d:bb:0e:05:93:ed:2c:29:
         7b:49:7c:0f:89:df:83:56:3a:6b:02:05:2e:2c:3d:04:7e:fc:
         cb:39:1a:e9:5f:87:90:a4:c1:7d:9d:e2:04:ca:83:17:8d:9e:
         a1:13:8c:48:f3:60:e5:0e:29:67:f0:42:0f:a6:33:f1:b6:e5:
         23:24:2e:92:e6:18:5f:ed:6c:43:21:69:a3:a4:6b:48:2b:65:
         9c:4b:61:18:2b:0d:41:bb:bc:0c:d0:07:9e:e5:62:16:52:95:
         6e:6e:0f:03:b0:61:d8:f5:e3:88:59:16:91:83:37:a5:bb:cf:
         45:d6:f2:48:26:2d:6b:bc:6b:df:45:cc:f5:4c:a9:df:fb:a0:
         85:bf:8c:4d:96:bf:cf:99:19:8b:2f:db:5d:fe:e9:06:06:bd:
         66:96:eb:b7:e0:b7:fd:93:8f:d6:e0:be:49:33:da:c9:1d:ad:
         8c:7f:37:86:75:26:99:6c:6c:1b:cc:65:eb:dd:8d:3f:fd:4c:
         05:38:fb:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEULnUp1T5T5IcJQC0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDIyODIxMzY1M1oXDTI0MDUyODIwMzY1M1owLzEtMCsGA1UEAxMk
MjdiOGZhZGUtNmJiNS00MDkwLWE1NTMtN2EyM2ViMzgyNjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRnEIr2FgyaNqIPun4KzC06BU2NjKMebk0pN
enCQC7j5Pts6r3+p+L6uX+9qAF1VJ5dJoYSp0j7WaM5VubQFUK1HudmqSWUQqUUg
sLgr/teSaJeX90OsGBMwZlsGsomvni9O5UL1Clhs87VMpIS1yMgduuJ1AvCP1I22
DSiWPK/Jyjwe2I4xJ249vUOjC7zBA7WO/nPoXPPcnrirA4MA3+xkg9dw5qjp6jqd
lH29KWH25l41sQbtspwVMAz6jZ/+IZVvwNVmCSVuvG5fM8dnbGB/iM6llr942lUt
u7DGKgUS+9pD+R5Tbs0ZpM3G7rkrksJqsLcMzlwUu8pKMmpmqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLsw5VcDLOSkXY+RqFfcRydTFsJrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDQ2NTc4Y2EtYTU1OC0z
NzI1LTkzOGEtZGY4YTZjOGVjNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZm6Z6b++usUqVNyFu5DLdMKqt7iYS1dLs2ouUVJtmmY3Zu+24o4+Dh
mh7qsHB7hPykkBUK+yle9rJAD6WH60CNuw4Fk+0sKXtJfA+J34NWOmsCBS4sPQR+
/Ms5Gulfh5CkwX2d4gTKgxeNnqETjEjzYOUOKWfwQg+mM/G25SMkLpLmGF/tbEMh
aaOka0grZZxLYRgrDUG7vAzQB57lYhZSlW5uDwOwYdj144hZFpGDN6W7z0XW8kgm
LWu8a99FzPVMqd/7oIW/jE2Wv8+ZGYsv213+6QYGvWaW67fgt/2Tj9bgvkkz2skd
rYx/N4Z1JplsbBvMZevdjT/9TAU4+9A=
-----END CERTIFICATE-----
Generated at Thu May 9 07:44:47 2024 by rpki-client on console-ams.rpki-client.org