Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aecdcb7b-6fc2-315b-bdb0-8340eece40e5.roa
File:                     aecdcb7b-6fc2-315b-bdb0-8340eece40e5.roa (raw, json)
Hash identifier:          ExZPs6UXkxK3tPyDEoyZK2UA4dWA5G7nyPVSEvxgJpA=
Subject key identifier:   36:2F:D8:21:BC:44:44:CB:8C:93:57:40:05:B2:FD:1B:1E:90:56:74
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E70898D9A6BA9379284E380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aecdcb7b-6fc2-315b-bdb0-8340eece40e5.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        34.84.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:89:8d:9a:6b:a9:37:92:84:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=46235571-3c9b-4bc6-9773-da20a8b5e42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4b:8e:75:69:e8:1d:23:d7:91:77:d6:11:2c:
                    8b:54:a5:cc:17:7e:90:1a:17:70:1b:a9:a2:86:09:
                    ea:c3:4d:b4:e9:32:43:62:27:09:35:7d:8f:c2:c1:
                    6d:38:9a:90:60:98:49:bb:1d:67:8c:74:a2:a7:fc:
                    65:15:ad:ec:69:06:5a:55:b1:61:e1:55:c1:a9:16:
                    55:04:17:ea:bf:77:9e:df:da:bb:9e:6c:0d:f4:9c:
                    43:a8:86:d0:bd:eb:15:c1:db:94:6f:ee:4d:13:6d:
                    18:cc:54:01:8c:cd:de:9d:a0:63:5b:f1:3f:39:3f:
                    ca:3f:34:94:ec:9b:20:22:e2:1a:92:e3:08:1a:63:
                    7b:8e:5f:f0:cd:21:53:18:c6:58:93:7b:50:77:81:
                    c5:3d:6e:23:0d:8d:6b:2b:c3:39:7b:fd:fd:a8:8c:
                    05:f8:0f:cc:94:13:a0:96:3a:8a:92:20:87:79:fa:
                    2e:ca:91:ea:04:8c:d5:7f:56:8e:15:c5:16:81:53:
                    85:ef:ab:fa:2a:9e:1e:52:24:bf:05:65:1b:6d:33:
                    de:d7:15:a5:03:d6:ce:04:4a:27:a1:75:58:a7:69:
                    bd:a2:9a:41:e5:ea:f3:30:32:f3:66:e3:84:66:7f:
                    75:a9:d8:3d:73:c4:46:d3:46:0f:a8:89:08:8e:aa:
                    ae:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2F:D8:21:BC:44:44:CB:8C:93:57:40:05:B2:FD:1B:1E:90:56:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aecdcb7b-6fc2-315b-bdb0-8340eece40e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:5c:aa:51:49:61:7d:3b:cc:79:88:40:83:3c:08:3e:25:32:
         cd:fc:c0:3d:21:c0:08:76:8a:ee:9b:20:24:60:41:80:9e:44:
         4a:4a:9b:76:bf:62:90:f8:66:78:d8:10:dd:78:38:93:6f:9c:
         57:84:df:67:f7:27:75:cd:59:ae:9c:df:d4:9c:cd:c8:33:d7:
         be:be:c4:e0:6b:78:df:25:d3:31:22:44:00:57:ba:9d:d4:dd:
         d4:54:61:97:a1:c0:74:77:0a:45:b8:e9:60:0c:00:33:60:b7:
         e8:8c:ec:32:09:15:91:ca:dc:e6:23:01:eb:33:7c:97:82:e6:
         fe:d3:fc:40:40:60:c3:f3:b8:eb:18:9f:a3:de:e9:0f:8e:73:
         dd:e6:81:0e:9b:8d:d4:31:c9:02:b4:01:5f:32:aa:d7:0c:fd:
         2e:0c:fb:81:6e:09:ca:14:c5:93:8a:bf:fc:f1:7c:d4:ad:fe:
         19:d2:6f:1f:1a:0e:9b:d1:8f:bd:f5:7c:da:d3:e1:4b:9a:32:
         93:9b:f0:51:ce:e8:6e:d3:d4:32:22:45:f0:08:bb:c9:eb:9c:
         21:43:b2:9e:70:61:7c:29:1a:c2:cb:9e:13:0f:21:d9:fb:31:
         75:04:d3:9b:d6:7c:1d:5d:f9:1b:a7:3d:67:6c:0f:45:3b:0f:
         b4:67:ef:5d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcecImNmmupN5KE44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
NDYyMzU1NzEtM2M5Yi00YmM2LTk3NzMtZGEyMGE4YjVlNDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UuOdWnoHSPXkXfWESyLVKXMF36QGhdwG6mi
hgnqw0206TJDYicJNX2PwsFtOJqQYJhJux1njHSip/xlFa3saQZaVbFh4VXBqRZV
BBfqv3ee39q7nmwN9JxDqIbQvesVwduUb+5NE20YzFQBjM3enaBjW/E/OT/KPzSU
7JsgIuIakuMIGmN7jl/wzSFTGMZYk3tQd4HFPW4jDY1rK8M5e/39qIwF+A/MlBOg
ljqKkiCHefouypHqBIzVf1aOFcUWgVOF76v6Kp4eUiS/BWUbbTPe1xWlA9bOBEon
oXVYp2m9oppB5erzMDLzZuOEZn91qdg9c8RG00YPqIkIjqquuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDYv2CG8RETLjJNXQAWy/RsekFZ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWVjZGNiN2ItNmZjMi0z
MTViLWJkYjAtODM0MGVlY2U0MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIlQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGlyqUUlhfTvMeYhAgzwIPiUyzfzAPSHACHaK7psgJGBBgJ5ESkqbdr9i
kPhmeNgQ3Xg4k2+cV4TfZ/cndc1Zrpzf1JzNyDPXvr7E4Gt43yXTMSJEAFe6ndTd
1FRhl6HAdHcKRbjpYAwAM2C36IzsMgkVkcrc5iMB6zN8l4Lm/tP8QEBgw/O46xif
o97pD45z3eaBDpuN1DHJArQBXzKq1wz9Lgz7gW4JyhTFk4q//PF81K3+GdJvHxoO
m9GPvfV82tPhS5oyk5vwUc7obtPUMiJF8Ai7yeucIUOynnBhfCkawsueEw8h2fsx
dQTTm9Z8HV35G6c9Z2wPRTsPtGfvXQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:33 2024 by rpki-client on console-ams.rpki-client.org