Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa
File:                     17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa (raw, json)
Hash identifier:          kichdV3LC1AD8xaYeZdBJ4nTLMkxmCKX6Pw3nysL4K0=
Subject key identifier:   8F:5C:C6:C9:D9:C4:FB:F3:DC:4C:6F:BA:65:C2:1E:61:05:B2:D6:A2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490E7ACE33427DB5BEC61080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa
Signing time:             Thu 21 Mar 2024 21:49:16 +0000
ROA not before:           Thu 21 Mar 2024 21:49:16 +0000
ROA not after:            Wed 19 Jun 2024 21:49:16 +0000
asID:                     396982
IP address blocks:        35.198.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0e:7a:ce:33:42:7d:b5:be:c6:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:49:16 2024 GMT
            Not After : Jun 19 21:49:16 2024 GMT
        Subject: CN=4a40694a-bda0-41c5-a2df-7602c3d7c3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:9d:75:b6:4f:e2:dc:b1:b8:f8:56:e1:01:
                    f2:82:c0:fe:29:c8:fc:c2:d0:4b:7a:30:f4:aa:31:
                    65:e9:4a:09:19:6b:17:40:dd:1d:f1:26:c7:17:06:
                    26:d8:b4:1d:bb:59:70:a6:33:b5:a0:c8:b9:b1:2b:
                    fe:99:74:22:e4:97:b9:08:fe:7d:1f:1a:c1:e0:a5:
                    e9:3f:92:f3:56:61:89:0d:b7:d1:ff:82:de:67:95:
                    7a:fe:11:2a:a3:c8:84:5a:c4:05:e6:d2:4b:71:1e:
                    82:c6:63:02:d7:cd:e9:76:39:bf:ce:20:68:56:90:
                    cb:19:2e:da:a0:3a:62:db:01:4a:13:99:e1:e9:56:
                    0d:95:1d:f3:31:e0:ae:c7:28:4b:28:0b:fd:f2:99:
                    ca:78:8a:e1:e4:ab:0e:79:c6:54:ef:ea:86:c0:b6:
                    f3:a5:ad:58:e1:f6:39:4b:1a:cf:ff:72:84:a2:23:
                    c1:50:1a:01:fc:28:22:07:da:3b:01:2f:56:9c:c0:
                    a7:cc:dc:91:b1:2e:f6:f7:51:ec:10:96:8d:7b:19:
                    78:3b:ac:7e:9a:e0:70:de:75:8c:79:0f:50:be:4a:
                    8a:d2:3a:5f:63:89:8d:3d:de:5f:fd:0f:41:b4:12:
                    49:07:da:ac:2d:33:af:e2:55:88:a0:61:2a:dd:e6:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5C:C6:C9:D9:C4:FB:F3:DC:4C:6F:BA:65:C2:1E:61:05:B2:D6:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c0d59e-5811-3b74-8a5e-9a5f611e2f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.198.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:51:d2:a0:a5:9d:08:1a:ed:f6:3b:1e:5b:2b:47:0f:c7:15:
         4c:e5:f4:22:e8:65:22:54:82:66:20:5d:12:c8:f4:80:cd:bc:
         0a:3f:48:8d:29:d5:c3:43:e3:eb:ce:5a:77:b4:d3:9d:23:20:
         67:a9:dd:36:9b:7f:4b:e0:0f:85:eb:b5:a4:0e:08:93:ea:29:
         d7:5e:f6:09:0b:c8:68:18:69:d1:ea:09:94:ce:d7:17:b7:82:
         df:d8:aa:3f:32:f6:ad:20:c5:a2:97:ff:b3:b2:2c:ec:00:8b:
         64:9c:2f:6e:3d:29:ba:ff:44:3b:1c:4f:47:9e:fb:99:e2:9c:
         41:2b:9c:16:fe:17:0a:8c:b2:0d:05:d9:78:a9:8a:3f:6b:a6:
         c2:46:dd:c7:e5:09:12:04:57:94:de:71:d3:dd:56:50:2f:46:
         a2:34:70:fb:1c:1f:df:7a:a7:d3:34:98:3b:f1:a5:e8:3e:a2:
         73:c0:3e:bf:74:6d:09:fc:2c:a6:79:18:02:bb:b9:7b:c1:0d:
         88:64:1b:9c:63:60:8a:ad:25:05:31:88:c8:f9:17:d2:ed:14:
         23:69:89:eb:96:53:53:0b:12:39:c1:fc:1f:41:4d:e5:18:97:
         97:22:8d:62:c0:76:41:4c:4e:2e:ab:4f:87:95:79:e6:64:ad:
         20:40:7a:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJDnrOM0J9tb7GEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxNDkxNloXDTI0MDYxOTIxNDkxNlowLzEtMCsGA1UEAxMk
NGE0MDY5NGEtYmRhMC00MWM1LWEyZGYtNzYwMmMzZDdjM2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6OddbZP4tyxuPhW4QHygsD+Kcj8wtBLejD0
qjFl6UoJGWsXQN0d8SbHFwYm2LQdu1lwpjO1oMi5sSv+mXQi5Je5CP59HxrB4KXp
P5LzVmGJDbfR/4LeZ5V6/hEqo8iEWsQF5tJLcR6CxmMC183pdjm/ziBoVpDLGS7a
oDpi2wFKE5nh6VYNlR3zMeCuxyhLKAv98pnKeIrh5KsOecZU7+qGwLbzpa1Y4fY5
SxrP/3KEoiPBUBoB/CgiB9o7AS9WnMCnzNyRsS7291HsEJaNexl4O6x+muBw3nWM
eQ9QvkqK0jpfY4mNPd5f/Q9BtBJJB9qsLTOv4lWIoGEq3eaowwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9cxsnZxPvz3ExvumXCHmEFstaiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTdjMGQ1OWUtNTgxMS0z
Yjc0LThhNWUtOWE1ZjYxMWUyZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8YgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFR0qClnQga7fY7HlsrRw/HFUzl9CLoZSJUgmYgXRLI9IDNvAo/SI0p
1cND4+vOWne0050jIGep3Tabf0vgD4XrtaQOCJPqKdde9gkLyGgYadHqCZTO1xe3
gt/Yqj8y9q0gxaKX/7OyLOwAi2ScL249Kbr/RDscT0ee+5ninEErnBb+FwqMsg0F
2Xipij9rpsJG3cflCRIEV5TecdPdVlAvRqI0cPscH996p9M0mDvxpeg+onPAPr90
bQn8LKZ5GAK7uXvBDYhkG5xjYIqtJQUxiMj5F9LtFCNpieuWU1MLEjnB/B9BTeUY
l5cijWLAdkFMTi6rT4eVeeZkrSBAejw=
-----END CERTIFICATE-----
Generated at Sun May 5 15:48:52 2024 by rpki-client on console-ams.rpki-client.org