Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa
File:                     b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa (raw, json)
Hash identifier:          lCRHMzzVefoxhthjI7dQ9doOxhQYNoJ38a+TO5WmhUM=
Subject key identifier:   0D:EB:94:D0:0C:63:26:28:B7:AE:4D:33:47:77:F2:CC:BA:C1:54:1D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858450B9D5E604D3A33401F0BB3E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa
Signing time:             Wed 28 Feb 2024 21:37:03 +0000
ROA not before:           Wed 28 Feb 2024 21:37:03 +0000
ROA not after:            Tue 28 May 2024 20:37:03 +0000
asID:                     19527
IP address blocks:        34.1.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0b:9d:5e:60:4d:3a:33:40:1f:0b:b3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 28 21:37:03 2024 GMT
            Not After : May 28 20:37:03 2024 GMT
        Subject: CN=3e2e8b09-b5c8-4098-a5ea-e340fb31ee6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:9d:fb:9f:f6:33:88:80:ba:95:89:18:38:
                    4c:3d:11:45:79:05:35:17:ee:ac:13:66:91:6d:84:
                    58:d9:8e:3e:a6:f1:90:73:ab:24:a3:55:50:3e:6c:
                    77:7f:77:4a:01:6e:2d:19:aa:b0:3b:0d:2b:c4:d9:
                    91:30:1d:25:96:08:56:28:75:1a:ae:7b:65:99:e0:
                    de:cc:4c:10:91:c4:5e:cb:a3:34:c3:23:7f:0b:6b:
                    2d:64:9b:63:e0:3f:53:05:18:58:c5:d0:db:95:42:
                    99:75:ec:7e:c4:fb:9f:01:2c:d6:15:f3:86:87:7e:
                    fa:47:4f:74:61:56:cd:7c:2a:fc:83:16:b9:9b:2b:
                    91:e3:7b:5e:1e:b2:92:ba:c7:f0:a1:35:7f:98:28:
                    90:83:77:52:67:3a:fd:2d:5d:ec:28:d9:e7:31:bd:
                    5b:61:0c:4f:fd:37:c5:a4:00:12:2c:96:83:4a:24:
                    2f:44:e0:4a:c7:03:e2:3e:37:2d:ba:d8:b8:9f:ff:
                    e5:0e:e1:e0:14:8c:06:d6:a3:68:b1:e8:34:ae:80:
                    9a:1b:5f:08:1e:68:8a:74:71:51:7c:1c:ca:2b:c0:
                    cd:3e:80:89:45:a6:f3:cd:44:0c:bb:ae:1c:a2:04:
                    c3:63:bd:7d:ca:0e:22:c5:64:12:45:ca:19:fd:80:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EB:94:D0:0C:63:26:28:B7:AE:4D:33:47:77:F2:CC:BA:C1:54:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b1c8d0ba-ddd8-3869-a193-b2c3d0e23553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:7f:23:f0:30:48:1a:df:01:01:e0:97:ab:d0:84:4d:39:67:
         29:06:3d:8e:44:5e:a4:57:5c:35:ed:9b:2c:8d:ef:59:91:88:
         6d:e5:a0:f9:24:a6:fe:06:6c:b6:1f:bc:8b:42:60:ff:74:b5:
         f8:17:c7:96:bb:16:fb:28:1f:b8:aa:f5:90:71:cf:fe:a0:9f:
         5f:ed:65:26:8b:b4:f0:cf:c2:d7:ac:47:72:71:7d:f1:88:43:
         c3:f9:ba:47:77:92:b6:f0:13:4f:01:70:5c:e0:a3:23:ce:2e:
         a2:9f:47:1a:05:18:07:1a:80:91:bb:1b:1e:f7:a6:3b:ea:56:
         1e:d6:34:a7:df:d7:86:5b:ea:60:09:79:3f:eb:47:4c:95:b4:
         fb:e9:af:ad:35:14:c3:69:ac:62:89:43:4a:ae:fd:24:6f:ed:
         a0:40:d4:b1:84:07:11:dc:38:78:ab:38:bd:32:c5:e2:2b:a4:
         71:0b:60:ae:82:d7:ef:75:7f:bf:90:0c:77:71:4c:b8:4a:c6:
         f8:65:bc:60:a0:6b:57:4d:b0:ad:0b:d9:91:8f:ce:f7:1e:b1:
         ea:00:68:cb:70:52:be:68:6f:b3:79:60:39:c8:8a:80:5b:9b:
         cb:58:9c:27:80:a4:d3:b2:df:d4:ea:a9:bb:65:bf:06:1b:eb:
         3b:37:bb:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEULnV5gTTozQB8Ls+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDIyODIxMzcwM1oXDTI0MDUyODIwMzcwM1owLzEtMCsGA1UEAxMk
M2UyZThiMDktYjVjOC00MDk4LWE1ZWEtZTM0MGZiMzFlZTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXmd+5/2M4iAupWJGDhMPRFFeQU1F+6sE2aR
bYRY2Y4+pvGQc6sko1VQPmx3f3dKAW4tGaqwOw0rxNmRMB0llghWKHUarntlmeDe
zEwQkcRey6M0wyN/C2stZJtj4D9TBRhYxdDblUKZdex+xPufASzWFfOGh376R090
YVbNfCr8gxa5myuR43teHrKSusfwoTV/mCiQg3dSZzr9LV3sKNnnMb1bYQxP/TfF
pAASLJaDSiQvROBKxwPiPjctuti4n//lDuHgFIwG1qNoseg0roCaG18IHmiKdHFR
fBzKK8DNPoCJRabzzUQMu64cogTDY719yg4ixWQSRcoZ/YAOoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3rlNAMYyYot65NM0d38sy6wVQdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjFjOGQwYmEtZGRkOC0z
ODY5LWExOTMtYjJjM2QwZTIzNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACB/I/AwSBrfAQHgl6vQhE05ZykGPY5EXqRXXDXtmyyN71mRiG3loPkk
pv4GbLYfvItCYP90tfgXx5a7FvsoH7iq9ZBxz/6gn1/tZSaLtPDPwtesR3JxffGI
Q8P5ukd3krbwE08BcFzgoyPOLqKfRxoFGAcagJG7Gx73pjvqVh7WNKff14Zb6mAJ
eT/rR0yVtPvpr601FMNprGKJQ0qu/SRv7aBA1LGEBxHcOHirOL0yxeIrpHELYK6C
1+91f7+QDHdxTLhKxvhlvGCga1dNsK0L2ZGPzvceseoAaMtwUr5ob7N5YDnIioBb
m8tYnCeApNOy39TqqbtlvwYb6zs3uwo=
-----END CERTIFICATE-----
Generated at Thu May 9 07:45:32 2024 by rpki-client on console-fra.rpki-client.org