Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa
File:                     627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa (raw, json)
Hash identifier:          jXiqWHoZt0VfhVhs9ic1vkVhBwIXJA5cKHsW5itdTlI=
Subject key identifier:   30:3A:1A:D9:D8:92:96:7C:3D:44:5B:44:1E:ED:FA:1C:A1:C9:07:9C
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285845DBFE625B9F6F1C31D4128C00
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     231
IP address blocks:        35.20.0.0/14 maxlen: 24
                          35.8.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:62:5b:9f:6f:1c:31:d4:12:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=f0e26aa7-f535-459c-8624-a6e9ddc6e04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:2f:54:95:e0:b6:c0:40:d8:8f:7b:72:d8:
                    bd:53:d4:1b:2b:3c:fd:2a:33:34:c5:c2:eb:98:27:
                    66:91:c7:87:33:50:a4:1f:43:6d:88:00:0e:dd:cd:
                    dc:d3:46:20:f7:0a:fd:f2:76:4c:77:a4:b5:b7:f4:
                    6e:0b:88:25:92:75:5c:cd:dc:71:07:e5:9a:7d:f6:
                    98:97:a1:3c:72:af:de:62:0e:7b:54:03:a3:e8:2d:
                    97:10:19:a8:96:1d:a3:43:65:f7:ce:11:ef:17:e7:
                    51:61:31:dc:8d:7e:da:d0:da:64:a3:95:be:0a:14:
                    b3:d4:c5:85:ef:88:40:20:b7:dd:0a:ac:52:5b:df:
                    59:ee:90:15:65:38:b3:aa:63:3a:66:e5:76:9d:82:
                    5d:69:cc:9f:72:57:51:2e:cd:98:5d:b7:0f:15:7f:
                    46:31:78:97:f6:25:f4:08:ba:90:74:33:9c:47:9c:
                    9a:61:84:93:a7:88:5b:67:8e:3e:d0:fd:66:fc:f4:
                    12:18:e8:5b:d5:f0:a1:a1:ab:dd:77:34:4f:6e:27:
                    a3:62:22:00:22:30:f6:c9:a3:d2:21:b3:df:4b:90:
                    93:77:19:63:11:52:d9:8a:94:1e:d8:e6:06:0e:cf:
                    af:e7:39:80:51:cf:0a:ba:a6:49:35:a8:cf:44:9f:
                    68:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3A:1A:D9:D8:92:96:7C:3D:44:5B:44:1E:ED:FA:1C:A1:C9:07:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.8.0.0/13
                  35.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a2:bc:b1:be:bd:a2:c0:bd:33:b1:84:67:e1:c7:f3:29:ae:
         5a:91:dd:65:d6:44:4b:18:f7:bf:7c:a9:71:19:7c:31:3b:98:
         21:85:06:08:22:a0:3b:e8:65:1b:bf:f8:25:14:90:f9:23:ac:
         c2:99:2a:cf:aa:f9:9f:ef:b6:f5:4f:f7:3a:1a:14:84:18:5a:
         60:bb:cd:fb:e8:b0:00:46:93:53:11:7c:97:46:95:b5:c8:cd:
         d9:ce:2c:cf:e1:9b:dd:e3:0a:ef:10:7c:7a:25:2c:21:66:8a:
         d7:3a:62:f6:a1:75:19:89:76:4c:60:6a:95:79:5e:18:3c:91:
         91:d9:cc:99:14:ac:ae:ae:51:8b:bf:d2:3e:73:83:22:2c:17:
         45:a4:95:ef:e0:24:db:c1:8a:dd:10:26:44:bb:71:f9:fc:f8:
         15:e3:5b:b2:50:66:4d:ff:03:50:24:23:7e:dc:ef:7f:03:9c:
         ab:2e:e7:d6:ea:a7:e9:be:fd:9a:4c:b8:24:4e:af:86:95:57:
         fd:9d:32:e0:89:f6:9b:5f:5f:78:a1:c7:62:99:f9:b6:8c:f5:
         f3:25:17:de:e9:dd:0f:91:a7:22:ce:5f:f2:3d:1a:3e:cd:af:
         af:64:4a:db:d1:29:93:e6:ba:60:52:9e:ba:dc:bb:b2:28:30:
         b4:58:1c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:30:27 2024 by rpki-client on console-ams.rpki-client.org