Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f4703fd-b375-333d-98b9-45a4ab3b761e.roa
File:                     0f4703fd-b375-333d-98b9-45a4ab3b761e.roa (raw, json)
Hash identifier:          tbe0sIf0LagLLDiQl+5jynMZap1r9i1KjIfQOicpXZ4=
Subject key identifier:   ED:8E:05:B2:FD:C1:1A:A4:53:90:62:18:E7:A0:35:BA:6C:26:41:03
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F07BED5FFD48FC8A0A24D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f4703fd-b375-333d-98b9-45a4ab3b761e.roa
Signing time:             Fri 29 Mar 2024 18:43:28 +0000
ROA not before:           Fri 29 Mar 2024 18:43:28 +0000
ROA not after:            Thu 27 Jun 2024 18:43:28 +0000
asID:                     396982
IP address blocks:        35.189.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:07:be:d5:ff:d4:8f:c8:a0:a2:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:43:28 2024 GMT
            Not After : Jun 27 18:43:28 2024 GMT
        Subject: CN=76b6ef70-c970-4c56-93ae-10bc21f669c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:57:da:eb:51:fc:d8:a2:40:d7:e1:38:88:
                    69:39:b3:b3:be:17:93:30:8d:33:6e:a5:3d:01:f2:
                    e0:9f:24:1e:0f:4f:6f:47:15:a6:a6:66:bd:43:b5:
                    0c:88:46:28:e2:85:df:05:fb:80:97:ae:a6:c2:bc:
                    e4:4b:83:dc:fc:36:8b:ad:11:18:f0:22:72:b2:e5:
                    3e:2c:bb:aa:64:f9:39:e8:df:30:7c:1b:f1:0d:d6:
                    29:e6:ad:e0:ec:07:75:b2:b6:86:db:0a:9b:5c:4d:
                    a7:ca:a9:8e:35:12:ca:97:04:a6:4c:44:cb:e5:14:
                    9c:8c:af:f4:38:2e:a1:eb:9a:7e:64:bf:56:12:b0:
                    c4:14:1f:fe:2e:1c:69:95:bb:61:b4:d0:af:52:d9:
                    a6:6c:2c:66:60:98:2f:c1:38:60:48:cf:81:ad:ae:
                    01:58:f1:1e:24:26:13:ca:71:42:8a:d1:a0:94:e4:
                    52:27:09:c6:49:dc:9d:60:56:74:fa:8f:ff:44:2f:
                    8d:94:92:39:f3:c8:c0:97:02:24:10:74:b3:d6:b2:
                    09:fb:4e:98:55:17:0d:59:84:5c:7f:48:74:b0:a8:
                    ad:8e:d2:58:ab:6d:b6:b3:20:ef:f7:53:d8:11:e9:
                    a8:0d:ef:71:3e:e4:b2:28:c4:72:b3:f8:8c:f5:01:
                    7f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8E:05:B2:FD:C1:1A:A4:53:90:62:18:E7:A0:35:BA:6C:26:41:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f4703fd-b375-333d-98b9-45a4ab3b761e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.189.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:94:66:83:6b:13:45:51:52:7e:36:0c:ec:f6:b3:c3:d8:bf:
         96:8a:6b:e2:e6:0d:c5:98:5b:34:2a:f7:d4:f6:a7:57:16:d1:
         b0:2f:36:a3:8e:d9:af:13:9a:71:ef:3d:d8:01:77:0a:24:ec:
         7d:3a:7d:0d:c1:2d:39:fb:f1:40:2b:64:ec:11:2f:93:2d:5a:
         5a:40:90:c0:e7:1e:e0:0e:1b:78:b7:e2:2f:50:7f:51:21:09:
         38:80:1c:1a:09:55:cf:28:43:1f:2f:37:25:ec:c6:22:11:07:
         b7:4c:71:a1:1e:46:f7:74:24:92:8a:54:1c:03:ac:48:73:bb:
         f7:10:64:67:e0:ad:bc:2e:e7:35:bd:a4:9f:15:b9:b1:d5:2b:
         e5:e8:f5:2f:3a:93:ab:8c:71:b3:c5:fc:b8:74:2d:b7:20:c1:
         33:06:da:f9:01:8b:e2:0f:85:76:40:0b:53:cf:6b:80:4f:91:
         ea:a2:45:06:c6:6e:fb:c9:d6:77:c5:0b:52:9b:0d:be:0c:3f:
         ef:6f:31:6c:d1:b5:d7:db:e6:13:04:f5:40:7a:0d:a2:86:87:
         ae:07:19:67:2e:4a:3e:fb:7d:1e:88:85:d7:9d:7b:b1:da:6a:
         61:ef:76:63:d2:d8:f8:b6:5e:cd:cd:df:81:e9:79:6e:df:10:
         20:01:0a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:48:47 2024 by rpki-client on console-ams.rpki-client.org