Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06f32fbc-5982-3eb9-a9d2-67f277dc485e.roa
File:                     06f32fbc-5982-3eb9-a9d2-67f277dc485e.roa (raw, json)
Hash identifier:          Q/b17JbnG7GO/FIudIEzVdOv6o/wbgMWezHXm1ahfcc=
Subject key identifier:   71:B6:41:EE:5D:9A:6E:03:75:DB:EE:4A:B8:1B:2B:EB:2B:A0:D7:1F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FC2708ED7271E9FCAEDD00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06f32fbc-5982-3eb9-a9d2-67f277dc485e.roa
Signing time:             Thu 21 Mar 2024 21:12:20 +0000
ROA not before:           Thu 21 Mar 2024 21:12:20 +0000
ROA not after:            Wed 19 Jun 2024 21:12:20 +0000
asID:                     396982
IP address blocks:        35.198.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fc:27:08:ed:72:71:e9:fc:ae:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:12:20 2024 GMT
            Not After : Jun 19 21:12:20 2024 GMT
        Subject: CN=24ffc176-beeb-4c91-9f36-6a1ab0f52244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a5:9f:3e:ad:e5:73:62:c9:87:db:38:75:d2:
                    a7:e3:68:15:dd:44:de:a0:20:ca:29:14:40:5c:d0:
                    f2:96:b6:81:19:56:c8:d1:83:9f:9b:0b:74:9c:cf:
                    8e:17:da:7b:72:84:d1:37:9d:ab:e0:b4:23:f0:b6:
                    52:08:97:41:d6:70:ad:ae:d6:3f:30:49:93:3d:18:
                    bd:00:82:5f:86:5c:2f:ab:7b:99:0d:50:1b:cd:a8:
                    2b:0f:4b:a6:59:a2:ac:4d:93:47:25:ed:c9:78:22:
                    ec:3a:d7:fe:f9:e0:30:85:87:d8:96:90:bc:a0:9a:
                    02:50:d6:61:6f:b2:4e:4b:37:c7:84:1a:80:6e:e3:
                    e8:29:65:b2:cb:ab:3e:27:17:25:e8:88:c9:c1:f9:
                    98:54:59:ac:d4:cc:5e:89:d8:cc:e7:65:09:e7:ff:
                    78:33:84:c5:45:a2:e8:bd:cc:30:eb:e9:4a:03:bf:
                    38:a5:97:18:7a:a0:61:cb:d5:3f:f5:c9:43:19:d2:
                    21:72:f4:aa:29:48:d3:c6:06:61:9a:99:aa:e8:b6:
                    d8:bd:eb:c3:5e:fc:8f:cb:02:8a:3f:9a:7e:0f:95:
                    ba:6c:95:3f:c2:8d:c1:e6:57:8c:51:35:87:03:f3:
                    60:4a:fd:43:76:b0:57:3f:d8:14:4e:1d:19:98:a2:
                    55:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B6:41:EE:5D:9A:6E:03:75:DB:EE:4A:B8:1B:2B:EB:2B:A0:D7:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06f32fbc-5982-3eb9-a9d2-67f277dc485e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.198.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f2:09:08:ae:4e:31:f5:50:7d:b3:c2:52:d7:96:e0:87:17:
         9b:02:bb:bc:aa:4f:87:d1:aa:1a:19:11:3e:60:19:47:6b:85:
         be:40:9d:b9:49:13:09:8e:76:f5:63:2d:bb:cb:29:1c:39:db:
         8b:52:7a:d0:05:de:e3:07:90:26:fe:ab:5c:66:90:2e:9a:46:
         d9:3c:ac:18:ef:ba:45:91:f9:0b:1b:cb:4b:58:1b:f3:3c:ac:
         9a:cd:f2:89:bb:ef:d8:02:f4:e1:c1:2d:70:d3:a4:ff:80:aa:
         47:48:04:22:5d:fc:a5:bb:78:6d:e4:87:c7:f1:bd:70:c8:ac:
         3b:40:a5:5b:b9:ba:e6:f1:fd:77:75:dd:6d:6d:0f:eb:a5:54:
         c3:2e:b9:77:25:f4:41:03:ba:d3:ee:e4:e1:b1:eb:67:0a:59:
         14:9c:31:af:f2:10:1b:5a:60:fb:40:e3:b2:ca:6a:b4:09:c0:
         32:81:f2:05:26:99:11:f2:06:d0:2d:79:7d:01:ae:87:a6:c4:
         f4:87:68:d8:6a:ff:e0:42:71:a8:71:d9:cf:5f:9c:f0:5f:a4:
         01:80:61:7d:c1:13:1a:a2:e2:a8:29:fd:c6:c5:c5:03:50:46:
         18:48:04:b4:50:c2:f4:0d:55:70:1f:f4:4e:68:7e:62:d0:3e:
         14:c9:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:34:37 2024 by rpki-client on console-fra.rpki-client.org