Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14f49ac2-c390-3b2c-b217-e200d024d211.roa
File:                     14f49ac2-c390-3b2c-b217-e200d024d211.roa (raw, json)
Hash identifier:          AlgHaZSpboCQhzfFzu9ltp+oYOeFnp4k8wNGNyHJNJQ=
Subject key identifier:   B1:DC:8D:5C:5E:9B:4B:89:6E:03:0A:B6:E2:6E:1E:BE:39:39:08:41
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FE56061765CED48EFEAD80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14f49ac2-c390-3b2c-b217-e200d024d211.roa
Signing time:             Thu 21 Mar 2024 21:16:44 +0000
ROA not before:           Thu 21 Mar 2024 21:16:44 +0000
ROA not after:            Wed 19 Jun 2024 21:16:44 +0000
asID:                     396982
IP address blocks:        35.193.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fe:56:06:17:65:ce:d4:8e:fe:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:16:44 2024 GMT
            Not After : Jun 19 21:16:44 2024 GMT
        Subject: CN=60bfae1a-8aae-46ef-942d-b054ff014742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:86:b4:2e:30:c7:97:68:75:70:c7:27:d7:2e:
                    c6:06:53:b6:73:8e:5e:a7:7b:6c:ea:97:bf:99:d9:
                    8a:67:cc:13:67:08:35:ac:5b:fa:b2:cd:c0:30:a4:
                    a1:2a:c1:bb:04:af:f5:5d:4f:22:20:15:0b:19:1c:
                    6a:b2:1a:cf:9b:42:e5:ea:0e:8b:71:84:ee:2e:ae:
                    2e:e4:01:9c:55:8e:29:2b:e5:90:82:72:6c:70:9c:
                    9d:2e:92:d8:d0:be:55:42:25:ae:7e:08:4f:25:0b:
                    c2:67:c4:7e:47:91:2d:8a:ee:d5:6c:83:7b:90:4b:
                    b6:99:02:06:23:d6:5d:f2:0b:3d:86:4f:ac:0f:6b:
                    f0:ef:fa:9c:93:db:28:11:c7:a3:c3:71:96:4b:c8:
                    82:a8:f5:b1:22:49:29:28:10:97:d5:3b:26:93:40:
                    7e:7b:eb:80:c4:1e:0d:53:95:69:eb:48:d0:19:dc:
                    9c:41:34:f4:46:56:e5:83:8e:4d:4d:5a:bf:98:6d:
                    82:14:5c:24:d0:88:2c:9b:b7:b4:8e:64:a0:81:47:
                    ad:9a:78:3c:b0:61:6a:cc:a6:55:c7:eb:6a:ff:8c:
                    71:f0:a8:87:e5:47:96:51:2c:63:5b:d4:d7:2f:b8:
                    54:d4:83:bf:7d:ff:bb:f1:81:ce:b1:da:5c:42:da:
                    15:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DC:8D:5C:5E:9B:4B:89:6E:03:0A:B6:E2:6E:1E:BE:39:39:08:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14f49ac2-c390-3b2c-b217-e200d024d211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.193.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f6:55:3f:87:2d:50:4a:0b:5a:6b:59:3e:63:1c:06:dc:0d:
         4d:b3:cd:b2:e2:0e:c7:ad:eb:06:c3:67:2e:61:33:70:d1:2f:
         05:5c:8b:ef:c9:ca:51:08:8e:a4:d9:1c:69:e3:25:32:c4:a6:
         e3:ca:80:f1:a2:ca:34:ee:97:1a:7d:27:6e:8f:54:97:61:10:
         d9:fc:2b:fb:04:cd:d8:3d:4c:c3:74:db:29:14:96:cf:5e:38:
         e7:f7:d9:16:57:81:1c:7b:98:93:51:84:dd:b0:ef:75:e5:9b:
         d8:40:80:41:e4:cc:70:56:aa:cc:7d:5c:2b:da:9d:51:ce:03:
         4f:33:14:1c:77:3b:4a:29:03:11:02:d1:28:6f:15:a7:b8:cb:
         a2:65:67:70:15:2f:93:a7:aa:8f:12:59:7d:55:2a:05:1b:77:
         47:0f:63:ae:03:23:36:6b:ba:e3:75:97:a3:51:7d:49:04:18:
         ab:f0:5c:f3:85:91:3a:bc:23:fd:33:3c:d5:17:95:98:65:9d:
         ea:aa:eb:55:34:ad:8c:f0:d1:82:33:56:ee:a1:69:23:28:ff:
         18:98:80:68:d4:37:15:b0:3e:cb:56:b2:f2:5c:0a:8e:a1:5a:
         db:1e:12:18:1a:66:ef:c1:64:5b:7f:26:ef:61:4b:81:fb:5b:
         9d:27:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:07:34 2024 by rpki-client on console-ams.rpki-client.org