Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6d8998e3-ac11-3f32-b82a-54ac26370783.roa
File:                     6d8998e3-ac11-3f32-b82a-54ac26370783.roa (raw, json)
Hash identifier:          iJi7NvToUK+vYpRA3VHz7/G5zkJRMDj8AecIirPRiTU=
Subject key identifier:   0C:19:73:0F:82:70:71:D4:79:3A:44:79:88:F9:99:CE:9C:80:F7:9B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BFD4781DF404555B0B400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6d8998e3-ac11-3f32-b82a-54ac26370783.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        34.144.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:fd:47:81:df:40:45:55:b0:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=94ce5c86-5490-496f-865d-4f4668cc1516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8c:56:1b:ec:db:4e:a2:89:e1:e5:dd:0f:be:
                    e8:d3:de:cd:4b:b8:85:b6:c5:5d:f2:97:5e:87:bd:
                    4f:a4:50:9c:46:c6:4e:84:9a:29:ea:9d:a4:2f:d7:
                    74:8f:b6:72:8d:65:09:e9:a7:e0:44:12:71:42:36:
                    ac:bd:93:51:08:4b:50:38:02:34:7f:69:8d:af:52:
                    9b:a1:a5:e7:63:ff:d0:14:b0:e2:37:4c:48:1c:77:
                    14:3c:30:49:cc:5d:de:3b:41:51:0a:c9:20:2d:99:
                    6f:39:86:11:49:6b:73:d2:bb:0f:d9:0d:c8:a5:15:
                    26:34:20:eb:d9:71:5e:0f:dd:84:a8:65:e9:86:12:
                    56:5c:bb:4f:41:85:c8:5d:eb:51:46:cc:34:74:76:
                    25:10:b1:26:98:7e:8f:8e:df:15:fb:d0:3b:40:ea:
                    1f:0e:13:55:24:e5:38:6c:61:ac:6e:6f:d6:41:5e:
                    b5:21:eb:b6:4d:d4:6c:83:1c:0c:64:da:46:c5:b9:
                    40:5b:ab:04:e8:c5:a8:fe:d4:56:2a:83:67:77:3b:
                    c9:06:51:91:57:de:54:bf:ec:e9:c8:57:0e:19:45:
                    2e:57:cb:9c:6b:54:c7:6d:c1:30:00:83:ce:a1:1f:
                    0a:72:a4:f4:82:15:12:88:8f:24:e5:19:10:75:bc:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:19:73:0F:82:70:71:D4:79:3A:44:79:88:F9:99:CE:9C:80:F7:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6d8998e3-ac11-3f32-b82a-54ac26370783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.144.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:58:a7:2f:76:52:ad:59:83:e8:99:28:d8:37:78:67:a7:f4:
         62:ba:76:4e:79:31:34:d3:4d:80:ff:93:ec:fc:ea:9f:2f:52:
         49:d5:c0:95:c3:81:57:f6:e6:4b:09:bd:9c:08:a9:fa:ba:df:
         4f:6d:b7:b0:54:4d:3d:90:bb:64:c2:c8:ef:6c:a0:fb:b7:b7:
         c8:26:d5:0b:3d:e4:b3:e5:3d:81:a0:8b:b6:fd:de:af:c5:5e:
         09:b2:51:96:c9:d1:b2:6f:07:0c:79:3d:10:5f:de:14:75:73:
         7b:53:08:6f:8a:27:02:f3:54:f9:ad:a4:dc:a0:35:e8:66:86:
         3f:d6:f4:1a:a7:7c:c8:26:05:f9:a4:29:58:6c:19:1d:40:5d:
         a9:28:26:0e:7a:f3:b0:be:b6:a5:ab:73:7a:9f:8a:6e:17:da:
         71:17:de:72:77:23:aa:05:6e:3f:34:0f:eb:ae:60:0a:30:9b:
         dd:0c:7d:82:70:8f:cf:b9:9e:83:c4:b2:6d:76:f5:36:40:8e:
         2d:ca:0c:1f:c6:ae:63:6f:de:0f:f7:7a:9b:22:aa:38:f5:49:
         47:66:ad:4e:ad:dc:41:d8:62:9a:e3:62:55:b7:11:c6:1f:18:
         4b:c0:81:3c:5a:50:b3:b3:a5:30:e2:4e:3d:fd:8d:89:09:5a:
         24:84:09:b2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjIS/1Hgd9ARVWwtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
OTRjZTVjODYtNTQ5MC00OTZmLTg2NWQtNGY0NjY4Y2MxNTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4xWG+zbTqKJ4eXdD77o097NS7iFtsVd8pde
h71PpFCcRsZOhJop6p2kL9d0j7ZyjWUJ6afgRBJxQjasvZNRCEtQOAI0f2mNr1Kb
oaXnY//QFLDiN0xIHHcUPDBJzF3eO0FRCskgLZlvOYYRSWtz0rsP2Q3IpRUmNCDr
2XFeD92EqGXphhJWXLtPQYXIXetRRsw0dHYlELEmmH6Pjt8V+9A7QOofDhNVJOU4
bGGsbm/WQV61Ieu2TdRsgxwMZNpGxblAW6sE6MWo/tRWKoNndzvJBlGRV95Uv+zp
yFcOGUUuV8uca1THbcEwAIPOoR8KcqT0ghUSiI8k5RkQdbwMTwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAwZcw+CcHHUeTpEeYj5mc6cgPebMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmQ4OTk4ZTMtYWMxMS0z
ZjMyLWI4MmEtNTRhYzI2MzcwNzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIpAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEFinL3ZSrVmD6Jko2Dd4Z6f0Yrp2TnkxNNNNgP+T7Pzqny9SSdXAlcOB
V/bmSwm9nAip+rrfT223sFRNPZC7ZMLI72yg+7e3yCbVCz3ks+U9gaCLtv3er8Ve
CbJRlsnRsm8HDHk9EF/eFHVze1MIb4onAvNU+a2k3KA16GaGP9b0Gqd8yCYF+aQp
WGwZHUBdqSgmDnrzsL62patzep+KbhfacRfecncjqgVuPzQP665gCjCb3Qx9gnCP
z7meg8SybXb1NkCOLcoMH8auY2/eD/d6myKqOPVJR2atTq3cQdhimuNiVbcRxh8Y
S8CBPFpQs7OlMOJOPf2NiQlaJIQJsg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 09:03:46 2025 by rpki-client