Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ce2b548-a7d4-3a52-89dd-58ed757e00a3.roa
File:                     8ce2b548-a7d4-3a52-89dd-58ed757e00a3.roa (raw, json)
Hash identifier:          6rU15jNJNVyMfjZGeaifdvBDt0JZQww7T3WJjQ4mYjo=
Subject key identifier:   9A:3E:AC:F0:A9:3B:EF:68:63:E0:6C:FF:5C:D5:72:D0:1F:AD:16:77
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4DA7FD80FD6734EBDFD00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ce2b548-a7d4-3a52-89dd-58ed757e00a3.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        34.176.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:da:7f:d8:0f:d6:73:4e:bd:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=10bd4cf1-e25c-4979-a6ae-7f63890e5c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:50:49:04:47:a8:64:16:e3:eb:2b:e5:66:
                    b1:6f:9e:1e:da:da:b9:0b:19:da:cd:22:92:1f:e6:
                    f5:86:8f:ae:c6:eb:8c:37:59:05:71:d5:36:0a:e4:
                    53:d8:d1:f8:12:87:03:d6:a0:88:c7:f1:99:d1:d8:
                    0f:73:08:db:0c:30:7d:67:e7:c2:a3:7f:f3:fe:78:
                    38:2d:8c:1f:cf:88:83:b2:72:d2:c8:84:07:42:6d:
                    7b:73:9a:9b:80:ce:bd:dd:0f:e5:01:db:52:c7:70:
                    88:32:07:00:80:f1:3c:7f:4a:cb:02:98:b4:85:a4:
                    96:89:79:7d:e5:67:f4:84:1a:e5:db:89:c4:15:23:
                    b1:3c:39:f2:8d:17:90:76:46:75:60:97:b3:fe:ad:
                    59:e6:7e:a3:a0:a2:13:81:7d:0e:c5:fc:00:41:ad:
                    fc:d2:2c:46:90:2c:ab:c8:c2:e3:6c:1e:4f:7e:d9:
                    04:a4:15:ac:e0:5b:6e:70:59:32:32:2e:4b:bf:f3:
                    ea:59:ca:2f:f1:5d:c6:47:68:e6:a1:c3:0f:a9:9d:
                    01:60:5d:a6:f8:0a:1b:25:bb:0b:08:a6:d0:67:65:
                    21:90:bb:8c:60:b8:49:1f:62:83:0a:18:34:d7:c5:
                    fd:96:fb:76:79:11:3d:93:af:93:27:52:cb:2a:b0:
                    a4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3E:AC:F0:A9:3B:EF:68:63:E0:6C:FF:5C:D5:72:D0:1F:AD:16:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ce2b548-a7d4-3a52-89dd-58ed757e00a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:61:9c:60:64:7b:c4:80:7f:4f:64:64:a5:a2:e2:67:18:08:
         bf:1b:59:c8:c9:aa:f2:3c:79:93:ab:fa:a7:50:f1:ec:bb:24:
         38:bc:76:d1:5b:7e:49:ed:2f:5d:90:a3:b7:26:d9:4a:06:69:
         36:83:39:6a:a0:e6:c7:1f:0d:17:e9:8a:a7:af:e6:58:a2:16:
         7a:4a:2b:06:16:ca:fb:16:05:26:43:59:6f:3b:5b:6d:3f:e4:
         3d:d3:85:29:52:a9:f0:a1:25:4d:4c:2e:2a:ee:d8:ee:a2:fc:
         2d:e8:62:7b:3e:d2:44:12:82:55:70:34:91:28:e9:2e:47:32:
         ef:e6:f7:b4:d8:6f:71:07:99:e3:d5:cc:d3:b2:76:53:d0:c8:
         d4:ef:14:76:e9:fe:2e:79:f2:64:15:4b:f8:81:c7:7d:0b:9f:
         19:42:e6:0b:4d:f0:94:f3:10:f1:8c:ce:55:22:65:cd:64:e1:
         b2:b5:b8:91:a8:62:3d:0e:4f:52:5a:bf:76:76:82:24:d2:c5:
         8a:d0:2a:e8:54:c3:45:01:54:46:b9:fe:2c:68:e0:39:54:05:
         7c:ea:8e:57:e3:2c:06:75:05:69:61:9d:05:44:ce:ef:56:9c:
         28:36:41:31:a9:2a:82:4c:61:79:1d:53:21:d9:a0:34:b8:a4:
         0d:79:48:eb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfo9Np/2A/Wc069/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
MTBiZDRjZjEtZTI1Yy00OTc5LWE2YWUtN2Y2Mzg5MGU1Yzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ElQSQRHqGQW4+sr5Waxb54e2tq5CxnazSKS
H+b1ho+uxuuMN1kFcdU2CuRT2NH4EocD1qCIx/GZ0dgPcwjbDDB9Z+fCo3/z/ng4
LYwfz4iDsnLSyIQHQm17c5qbgM693Q/lAdtSx3CIMgcAgPE8f0rLApi0haSWiXl9
5Wf0hBrl24nEFSOxPDnyjReQdkZ1YJez/q1Z5n6joKITgX0OxfwAQa380ixGkCyr
yMLjbB5PftkEpBWs4FtucFkyMi5Lv/PqWcov8V3GR2jmocMPqZ0BYF2m+AobJbsL
CKbQZ2UhkLuMYLhJH2KDChg018X9lvt2eRE9k6+TJ1LLKrCkpwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJo+rPCpO+9oY+Bs/1zVctAfrRZ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGNlMmI1NDgtYTdkNC0z
YTUyLTg5ZGQtNThlZDc1N2UwMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIrAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEWGcYGR7xIB/T2RkpaLiZxgIvxtZyMmq8jx5k6v6p1Dx7LskOLx20Vt+
Se0vXZCjtybZSgZpNoM5aqDmxx8NF+mKp6/mWKIWekorBhbK+xYFJkNZbztbbT/k
PdOFKVKp8KElTUwuKu7Y7qL8Lehiez7SRBKCVXA0kSjpLkcy7+b3tNhvcQeZ49XM
07J2U9DI1O8Udun+LnnyZBVL+IHHfQufGULmC03wlPMQ8YzOVSJlzWThsrW4kahi
PQ5PUlq/dnaCJNLFitAq6FTDRQFURrn+LGjgOVQFfOqOV+MsBnUFaWGdBUTO71ac
KDZBMakqgkxheR1TIdmgNLikDXlI6w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:17 2024 by rpki-client on console-ams.rpki-client.org