Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/88cfb93c-155c-3b0d-be04-aa21f30fa493.roa
File:                     88cfb93c-155c-3b0d-be04-aa21f30fa493.roa (raw, json)
Hash identifier:          X6QRL4do+4GEhSA1f/blXIoZy40bY9Jsq6OwQc+4b4A=
Subject key identifier:   3A:8E:3A:72:AC:67:09:64:91:64:3A:B2:AA:C9:9C:C0:51:83:7E:3A
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285845DBFE6E4AE60E21456964B800
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/88cfb93c-155c-3b0d-be04-aa21f30fa493.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     395638
IP address blocks:        35.62.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:6e:4a:e6:0e:21:45:69:64:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=2b977a88-a3dc-4211-9907-24281f3e9132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:ac:8d:75:b4:27:f6:42:e8:7c:71:17:0d:
                    84:d8:8a:ca:17:d4:0d:97:63:58:48:6a:65:ce:5f:
                    32:af:ac:59:aa:2f:c5:99:83:90:c3:48:0f:fc:22:
                    e3:f0:1d:a9:77:20:8a:90:ba:ec:8e:e0:bc:95:d4:
                    77:78:6e:99:b7:84:79:09:8d:fa:38:eb:90:e4:38:
                    01:3b:3b:2a:57:df:51:da:a4:b1:41:b8:96:67:11:
                    7a:df:69:92:b2:1c:ba:53:11:a1:19:2b:91:c5:18:
                    7a:32:7a:c3:89:82:ef:b0:b9:d4:1d:22:21:4b:a1:
                    6e:25:b0:d6:4b:c1:dd:b4:2d:45:b5:4e:bd:2f:53:
                    c8:ea:89:80:be:13:f9:fd:10:6d:69:4f:bb:97:57:
                    0b:5f:e6:52:40:49:86:b2:2a:12:89:cf:3b:09:f5:
                    98:cf:d0:ca:0e:a4:9c:47:15:fd:e5:a3:e7:f2:b5:
                    29:01:b1:08:21:48:5f:a9:f3:4a:8e:dd:6f:b0:b8:
                    e5:4c:2a:b1:25:8c:79:9d:30:a7:34:5b:8e:1d:74:
                    bd:3d:95:10:3b:e4:cc:0f:08:57:87:b1:5b:2b:88:
                    8f:01:fd:e1:fa:d5:fd:e5:34:ac:a8:a7:32:51:3f:
                    f5:8f:36:e0:9b:f3:9b:ba:fd:c6:af:b0:d2:b9:09:
                    f8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8E:3A:72:AC:67:09:64:91:64:3A:B2:AA:C9:9C:C0:51:83:7E:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/88cfb93c-155c-3b0d-be04-aa21f30fa493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.62.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:b8:fb:09:17:45:91:84:63:24:fc:bb:a6:91:7d:fd:08:ef:
         04:3c:44:3b:e6:68:af:13:3a:e5:87:c5:93:58:71:83:f6:1c:
         50:ca:e9:5d:75:5d:2f:e8:bb:c1:20:73:da:32:a4:06:02:ef:
         2f:d4:75:4d:98:6b:5b:94:2b:e4:21:16:31:4e:03:2b:bc:75:
         34:1b:50:9f:82:c2:28:51:eb:c4:04:ea:9a:f3:f3:bc:c2:3b:
         26:ac:30:a3:95:a7:2d:ea:11:ba:cc:a5:5c:27:6d:a4:a0:02:
         e1:99:fc:49:84:51:3d:13:57:2f:e3:f4:71:6a:b5:ef:2a:de:
         0b:91:ab:93:63:6b:4b:24:b1:ee:6e:d2:cd:c4:59:cf:ae:de:
         a9:9b:41:f1:8b:a4:3f:15:e9:07:b7:b8:45:65:77:2e:19:a8:
         50:cc:8f:28:12:b3:d2:d0:3e:bd:4c:1a:cf:d4:47:6e:85:b8:
         4f:d0:07:bc:52:09:36:2f:98:9e:b2:9f:1a:7e:62:38:c9:99:
         75:18:33:bb:06:a5:aa:4a:b8:39:04:62:63:92:83:e2:8b:2e:
         be:a7:d0:d9:f3:83:94:48:32:8f:6e:9f:ff:f8:1e:de:2c:6a:
         17:27:b1:b7:c6:ca:69:00:00:53:4f:ae:99:3e:17:98:a3:3c:
         14:b9:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:53:29 2024 by rpki-client on console-ams.rpki-client.org