Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bae87cf2-b43b-3c51-9e30-056aa8bce4e3.roa
File:                     bae87cf2-b43b-3c51-9e30-056aa8bce4e3.roa (raw, json)
Hash identifier:          YYPNoArrjy6OYF45RGKiOyxgFbkTc2xL1lPFH/v/Zaw=
Subject key identifier:   53:4C:98:38:85:37:3A:10:AF:B0:71:06:D3:A9:D5:B9:F4:6F:74:B2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E70889887EB9BD744992BA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bae87cf2-b43b-3c51-9e30-056aa8bce4e3.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     17378
IP address blocks:        34.172.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:88:98:87:eb:9b:d7:44:99:2b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=d2fe6aec-0fbb-43c6-be80-2656f8c7b707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:b6:a2:bf:22:4e:7d:b3:6d:15:a8:ca:8d:
                    79:92:f2:1a:3d:cc:6f:fb:70:5d:68:52:b7:f8:ec:
                    13:69:fb:4a:ba:47:d7:34:8f:48:09:97:1f:25:86:
                    bc:06:bc:d5:1b:40:3d:5a:11:93:69:61:09:b1:97:
                    8c:ec:c4:6e:68:37:55:b2:f9:82:d3:ae:9f:81:3b:
                    bc:7c:bb:c2:20:f1:9b:22:64:da:ca:ba:e3:1a:46:
                    b8:82:94:07:c8:ed:50:46:4a:00:f8:f4:14:32:2e:
                    af:32:59:83:a8:f2:8c:d9:ce:14:a4:97:69:cf:08:
                    91:68:84:67:cc:53:a2:b0:aa:bd:23:c7:e2:97:5b:
                    ca:ae:3f:09:37:9a:ad:93:a8:d3:42:cb:ca:28:9a:
                    37:79:da:37:02:aa:8e:a2:00:f1:96:c1:b3:67:78:
                    ef:c7:3c:e8:47:3f:b7:4b:a8:ed:7f:00:0b:52:0b:
                    ac:9f:d1:77:a7:ac:21:87:ff:f4:8b:5a:4c:2a:78:
                    6e:8f:71:b2:97:06:94:60:bd:1c:c0:f4:78:ec:f7:
                    06:75:41:96:47:4d:74:38:2a:75:62:22:be:72:f0:
                    9f:51:f0:0b:4f:68:38:5f:93:7c:90:3c:71:dd:6b:
                    db:cc:78:f9:3f:21:86:06:50:a2:b4:fb:88:64:53:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4C:98:38:85:37:3A:10:AF:B0:71:06:D3:A9:D5:B9:F4:6F:74:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bae87cf2-b43b-3c51-9e30-056aa8bce4e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.172.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:15:bf:0e:39:64:67:87:9d:d4:b6:98:8f:ec:26:df:e3:
         da:5c:4b:94:50:d6:84:9e:1d:bf:25:54:2a:d2:e1:67:c4:5c:
         fc:ee:35:4d:83:65:37:4e:d8:d6:ab:c1:42:0c:b2:d7:d6:30:
         a0:d9:93:9d:e9:92:b8:65:d6:2f:76:09:0b:6b:7b:bb:d8:0e:
         68:55:b5:ea:1d:7a:fb:d4:c7:26:d8:6c:76:6f:1c:7b:40:27:
         8b:f5:25:93:e4:84:bb:48:3c:fb:c7:1c:4b:61:2c:ba:37:6c:
         8d:32:d8:87:2d:9f:2e:38:1f:94:f7:a0:e5:55:29:d6:e3:cc:
         87:d0:f2:d5:f1:a0:79:08:46:91:01:9e:aa:6e:5f:be:c1:5b:
         66:09:8a:26:9f:fb:86:04:e5:f7:34:6b:d5:d4:b1:25:c9:19:
         61:bb:a5:58:85:df:9c:4d:4c:ec:ec:55:f6:85:4d:6c:ef:9f:
         51:0f:51:0b:be:ec:52:4b:b6:5f:73:94:87:ba:a1:9d:fa:2a:
         53:ef:92:a6:db:33:6c:3c:c4:b2:11:84:10:2a:36:2a:68:88:
         70:96:65:fd:28:1d:2d:a0:44:29:52:e1:9c:13:fc:09:45:d2:
         39:e3:ea:52:ca:3e:63:3d:2f:54:31:58:72:05:f2:10:c1:74:
         d1:77:09:80
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcecIiYh+ub10SZK6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
ZDJmZTZhZWMtMGZiYi00M2M2LWJlODAtMjY1NmY4YzdiNzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGe2or8iTn2zbRWoyo15kvIaPcxv+3BdaFK3
+OwTaftKukfXNI9ICZcfJYa8BrzVG0A9WhGTaWEJsZeM7MRuaDdVsvmC066fgTu8
fLvCIPGbImTayrrjGka4gpQHyO1QRkoA+PQUMi6vMlmDqPKM2c4UpJdpzwiRaIRn
zFOisKq9I8fil1vKrj8JN5qtk6jTQsvKKJo3edo3AqqOogDxlsGzZ3jvxzzoRz+3
S6jtfwALUgusn9F3p6whh//0i1pMKnhuj3GylwaUYL0cwPR47PcGdUGWR010OCp1
YiK+cvCfUfALT2g4X5N8kDxx3WvbzHj5PyGGBlCitPuIZFNo+QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFNMmDiFNzoQr7BxBtOp1bn0b3SyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmFlODdjZjItYjQzYi0z
YzUxLTllMzAtMDU2YWE4YmNlNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhM0Vvw45ZGeHndS2mI/sJt/j2lxLlFDWhJ4dvyVUKtLhZ8Rc/O41TYNl
N07Y1qvBQgyy19YwoNmTnemSuGXWL3YJC2t7u9gOaFW16h16+9THJthsdm8ce0An
i/Ulk+SEu0g8+8ccS2EsujdsjTLYhy2fLjgflPeg5VUp1uPMh9Dy1fGgeQhGkQGe
qm5fvsFbZgmKJp/7hgTl9zRr1dSxJckZYbulWIXfnE1M7OxV9oVNbO+fUQ9RC77s
Uku2X3OUh7qhnfoqU++SptszbDzEshGEECo2KmiIcJZl/SgdLaBEKVLhnBP8CUXS
OePqUso+Yz0vVDFYcgXyEMF00XcJgA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:05:24 2024 by rpki-client on console-ams.rpki-client.org