Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/167123ff-d2c6-3c2d-a289-ae073a4d4b9e.roa
File:                     167123ff-d2c6-3c2d-a289-ae073a4d4b9e.roa (raw, json)
Hash identifier:          pACtxfh6g7QSJ4VDl4yz9+aMXQEYK1CsfC4TzSDhHVg=
Subject key identifier:   89:59:5A:EA:F6:28:01:FC:12:14:A7:C0:7F:E7:DE:02:8B:B1:8F:FE
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285845DBFE72131BEE570C27872980
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/167123ff-d2c6-3c2d-a289-ae073a4d4b9e.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     397797
IP address blocks:        35.62.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:72:13:1b:ee:57:0c:27:87:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=d30e5b7c-4e4d-44ce-beac-20ff49855ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0a:7a:90:f2:aa:c2:cc:8d:e6:58:08:a5:1e:
                    89:5b:aa:da:d3:4c:6d:96:bf:b2:36:90:7d:1b:cb:
                    6a:b1:f8:d0:ea:48:db:20:43:a9:6f:be:92:ef:a0:
                    41:f2:f5:8a:ea:06:68:2a:a5:fe:1f:6b:40:bd:84:
                    b1:04:62:40:4d:a0:9b:85:98:0f:fe:77:6d:15:29:
                    15:2f:42:ae:72:d3:1d:da:ef:a6:b2:cd:4f:23:7d:
                    0e:cd:52:31:2a:15:51:53:9c:23:35:60:30:6a:0f:
                    6c:fc:79:ad:de:d3:dc:42:01:aa:0b:e5:da:72:c1:
                    be:7f:34:03:e2:c2:c2:70:bb:d9:1c:d2:92:c8:04:
                    65:93:1e:36:5e:aa:f4:fe:83:fd:29:b4:fd:ca:74:
                    fa:31:cf:d7:8b:3e:64:c3:04:b9:1f:07:1c:d0:a5:
                    a6:17:96:c5:8b:e5:ce:08:e9:10:d4:82:88:4f:3b:
                    5d:d2:36:42:8c:97:eb:29:a8:0c:f5:27:ac:4c:b4:
                    80:fd:81:48:a5:32:8f:14:f3:ec:05:1a:2a:ad:7d:
                    df:d7:e2:e2:13:94:f3:36:43:6d:dd:2f:82:ab:34:
                    f8:f6:26:7e:01:09:23:72:c6:7e:72:1e:0c:09:33:
                    f9:37:a4:29:99:76:e9:98:1c:94:d2:b0:b7:fe:a8:
                    8f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:59:5A:EA:F6:28:01:FC:12:14:A7:C0:7F:E7:DE:02:8B:B1:8F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/167123ff-d2c6-3c2d-a289-ae073a4d4b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.62.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:fb:72:6d:5b:1d:de:67:94:e1:36:0e:9b:23:9c:07:6e:f0:
         2a:84:4f:ae:24:d7:08:dd:9e:78:4c:8d:3f:a6:6f:fb:a4:f0:
         68:2e:ef:45:e9:b5:29:30:a6:57:12:37:80:76:48:a6:0f:e5:
         8f:30:fd:ea:09:09:91:f8:6c:e9:c5:8d:b7:a0:51:46:98:7f:
         22:1b:c7:95:a7:ee:ab:fd:1a:e6:ba:e9:dc:d3:84:5e:bb:0f:
         c0:d5:ec:58:83:ff:f9:41:78:4e:80:fc:22:e1:9c:06:47:ef:
         ed:19:93:64:2e:46:1d:9f:69:70:59:c8:d9:ec:4c:65:74:57:
         e4:2d:df:2b:4f:23:0a:ff:3a:5f:6e:18:af:7a:df:6b:ac:e2:
         45:8c:ae:7f:07:b1:98:9c:d9:13:78:20:60:03:8c:11:a1:26:
         57:b3:cf:d1:f9:e8:25:71:16:19:c8:a0:b8:12:ce:02:21:67:
         39:33:f2:eb:54:b3:79:e5:d0:7c:12:9f:18:3e:93:86:03:23:
         54:bf:0f:1c:a9:d7:6e:9a:75:6f:d9:2f:ec:96:96:47:8a:26:
         0d:6d:7a:91:5f:1a:65:ec:35:52:88:5f:99:cb:76:f5:db:bd:
         96:ae:ff:cf:00:76:95:f0:c9:8f:74:b9:79:01:be:1f:34:1b:
         76:da:57:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:53:29 2024 by rpki-client on console-ams.rpki-client.org