Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6aeb739-e3d1-3874-a308-39c62aa45b23.roa
File:                     a6aeb739-e3d1-3874-a308-39c62aa45b23.roa (raw, json)
Hash identifier:          tv4axcnrqN+KFAGiimKZWz5CE56W8XT8b509ocAaXLg=
Subject key identifier:   92:55:72:7C:8D:A9:31:56:5D:69:BE:AF:7C:D1:CA:F0:7B:E2:CE:FD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BB97B0CC37ABA72652E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6aeb739-e3d1-3874-a308-39c62aa45b23.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        34.144.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:b9:7b:0c:c3:7a:ba:72:65:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=1417b95c-2947-470b-adf4-6f25bccc6722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a4:68:f6:54:35:e5:37:67:22:20:4e:f1:54:
                    9e:a8:61:fa:4b:b9:88:5d:a3:1c:03:1e:3f:2c:91:
                    29:be:5d:de:f3:49:fd:c5:4d:7d:07:ff:47:d5:dd:
                    c9:53:41:1f:47:f2:fd:44:f9:5c:cc:b3:96:e4:e7:
                    18:52:b4:19:78:66:f0:a2:ae:c1:55:35:77:c5:5c:
                    66:77:76:db:6e:c9:33:b0:43:8e:27:d4:d7:ac:32:
                    02:30:d1:fb:f0:01:e5:a5:54:5d:80:ff:fe:fb:86:
                    69:4a:d7:c1:1e:f8:04:6f:b5:40:f0:c8:37:ea:52:
                    c1:5f:10:16:a9:87:1c:24:cf:c3:2f:28:82:aa:af:
                    a9:a4:e6:c1:8b:3d:e2:ab:c6:a6:c7:40:9d:41:cf:
                    4e:92:d4:55:9e:0d:90:5d:19:af:7e:56:6b:bb:10:
                    73:58:56:ef:aa:d9:29:b7:25:73:a5:17:84:bf:21:
                    8a:50:d0:66:7b:e5:37:d0:80:87:6b:c3:6b:f1:8d:
                    6e:a6:e6:af:43:e1:fa:74:50:29:55:d0:13:ef:43:
                    0c:01:82:65:68:6a:ec:cc:cc:53:99:14:99:6e:63:
                    bc:3a:bd:11:4d:a9:6f:08:77:c3:1e:23:db:08:ec:
                    8d:8a:b8:a1:62:bc:ab:b2:c6:0c:71:a8:65:36:85:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:55:72:7C:8D:A9:31:56:5D:69:BE:AF:7C:D1:CA:F0:7B:E2:CE:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a6aeb739-e3d1-3874-a308-39c62aa45b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.144.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3d:3e:00:53:9a:58:16:82:92:f9:33:ab:50:a7:1f:43:5a:
         e1:40:35:38:29:75:05:dc:c7:02:2d:0d:c6:19:a9:22:90:1a:
         db:cc:74:77:82:c1:82:db:71:bb:7e:f3:2f:15:e9:27:3f:c1:
         be:7f:e4:54:3b:97:00:7e:cb:47:82:dc:ac:73:f2:d1:41:a5:
         f4:e7:42:b6:6e:91:63:96:a1:27:94:aa:bb:b4:5d:93:6d:23:
         b8:3e:1d:0e:b4:b0:e0:a4:e0:50:26:6e:e8:08:a4:cf:84:52:
         a1:c9:5b:29:f6:e6:c6:d2:8f:93:a7:55:77:1d:96:7c:ae:74:
         74:a2:d9:b0:00:75:5c:30:b9:ea:25:3e:89:03:fa:39:eb:36:
         82:fa:bb:19:64:1d:77:d0:93:2e:01:ad:11:88:0d:56:bb:3d:
         17:a6:e9:d9:d7:2d:25:b2:69:a4:82:7e:63:a5:31:9c:c5:9f:
         56:5e:db:86:b0:37:97:77:7d:45:16:96:17:1f:15:0e:b0:08:
         71:42:3e:0c:68:f0:f9:5e:cd:70:e4:7a:be:2f:1e:9b:9c:76:
         d2:cf:51:f4:70:c2:83:64:ea:a8:28:0f:9b:17:ea:3b:7a:1b:
         ba:58:05:df:e1:58:6c:4d:79:18:56:5d:13:0b:a8:c9:6d:02:
         18:42:c5:55
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjIS7l7DMN6unJlLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
MTQxN2I5NWMtMjk0Ny00NzBiLWFkZjQtNmYyNWJjY2M2NzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKRo9lQ15TdnIiBO8VSeqGH6S7mIXaMcAx4/
LJEpvl3e80n9xU19B/9H1d3JU0EfR/L9RPlczLOW5OcYUrQZeGbwoq7BVTV3xVxm
d3bbbskzsEOOJ9TXrDICMNH78AHlpVRdgP/++4ZpStfBHvgEb7VA8Mg36lLBXxAW
qYccJM/DLyiCqq+ppObBiz3iq8amx0CdQc9OktRVng2QXRmvflZruxBzWFbvqtkp
tyVzpReEvyGKUNBme+U30ICHa8Nr8Y1upuavQ+H6dFApVdAT70MMAYJlaGrszMxT
mRSZbmO8Or0RTalvCHfDHiPbCOyNirihYryrssYMcahlNoWh0wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJJVcnyNqTFWXWm+r3zRyvB74s79MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTZhZWI3MzktZTNkMS0z
ODc0LWEzMDgtMzljNjJhYTQ1YjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDIpAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWT0+AFOaWBaCkvkzq1CnH0Na4UA1OCl1BdzHAi0NxhmpIpAa28x0d4LB
gttxu37zLxXpJz/Bvn/kVDuXAH7LR4LcrHPy0UGl9OdCtm6RY5ahJ5Squ7Rdk20j
uD4dDrSw4KTgUCZu6Aikz4RSoclbKfbmxtKPk6dVdx2WfK50dKLZsAB1XDC56iU+
iQP6Oes2gvq7GWQdd9CTLgGtEYgNVrs9F6bp2dctJbJppIJ+Y6UxnMWfVl7bhrA3
l3d9RRaWFx8VDrAIcUI+DGjw+V7NcOR6vi8em5x20s9R9HDCg2TqqCgPmxfqO3ob
ulgF3+FYbE15GFZdEwuoyW0CGELFVQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:50 2025 by rpki-client