Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/328fec2d-bed0-382b-8813-4b15f045734f.roa
File:                     328fec2d-bed0-382b-8813-4b15f045734f.roa (raw, json)
Hash identifier:          N4C4We3n6nB++nB7+uRvWtNwBrqtAmuw8yZ/dFjT3L0=
Subject key identifier:   B7:ED:64:F8:53:71:AE:DE:CA:47:AB:C9:DF:4C:00:E5:97:AC:8A:81
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490622243A35A7893B3612A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/328fec2d-bed0-382b-8813-4b15f045734f.roa
Signing time:             Thu 21 Mar 2024 21:32:27 +0000
ROA not before:           Thu 21 Mar 2024 21:32:27 +0000
ROA not after:            Wed 19 Jun 2024 21:32:27 +0000
asID:                     396982
IP address blocks:        35.234.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:06:22:24:3a:35:a7:89:3b:36:12:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:32:27 2024 GMT
            Not After : Jun 19 21:32:27 2024 GMT
        Subject: CN=5b9451ef-d3ce-46f2-8504-f15701ffc1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:a2:e5:8e:c6:09:da:33:26:a9:54:61:6a:
                    6c:04:f9:66:5d:66:e1:eb:fd:cd:87:c3:80:4c:25:
                    d6:37:26:f2:49:25:14:02:b8:5b:29:a6:4d:aa:d3:
                    d0:51:23:51:cf:ba:c8:b3:52:77:2e:54:87:21:64:
                    a6:01:4e:56:df:63:59:ef:6b:fa:f0:b4:75:e1:0f:
                    8b:aa:4f:24:f7:38:20:99:37:fe:55:f9:f1:11:4e:
                    ef:6a:07:04:9e:13:48:18:8f:3c:f8:15:a6:df:e0:
                    8b:27:4d:3f:c4:0b:49:35:ae:1a:8f:45:37:9b:6f:
                    29:2b:d5:4d:e3:3e:5e:67:58:e7:9f:3c:20:39:08:
                    b4:49:03:6b:5e:4d:d2:c5:b7:2a:93:30:31:57:ba:
                    5b:bd:04:23:e2:f2:ee:52:e6:53:bc:27:ee:0e:62:
                    a6:b2:39:61:8f:a6:e1:be:70:cc:1b:4f:fa:a5:75:
                    ad:07:68:4a:a4:03:b0:86:7d:34:f9:d1:45:ed:5a:
                    10:d2:ec:53:d5:b5:d5:60:08:00:44:e4:cd:e8:c2:
                    1f:d0:e3:05:4b:a9:9f:b8:6e:7e:f6:ed:00:85:ea:
                    70:ad:69:23:be:49:f4:34:4b:fa:04:63:17:97:84:
                    c5:f2:c0:ed:70:69:09:2a:6b:50:2a:64:33:58:ee:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:ED:64:F8:53:71:AE:DE:CA:47:AB:C9:DF:4C:00:E5:97:AC:8A:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/328fec2d-bed0-382b-8813-4b15f045734f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.234.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:8a:bd:1e:b8:a9:d3:d5:a0:6d:ac:68:17:4a:06:00:17:
         ec:50:08:e9:55:e2:45:67:7e:1a:4d:40:b9:37:31:df:18:0d:
         8b:c2:59:73:3b:f4:87:26:c4:0e:c6:98:c9:84:da:3f:0c:9f:
         e1:05:28:97:e2:3c:45:33:28:dc:3e:25:ea:12:39:9c:f2:b7:
         e5:45:dc:21:98:d6:72:fd:f9:a0:4f:4f:c0:cf:76:92:be:d9:
         6e:dd:d0:43:cc:ea:f2:a5:ce:06:19:b8:a4:84:26:65:d2:73:
         15:cf:16:b3:2d:a7:d1:4c:9f:e2:9a:99:21:f3:f0:19:f3:a9:
         49:44:9b:ca:35:39:45:b0:cf:5c:c6:02:fe:f9:6d:83:3c:3a:
         40:97:30:20:a7:88:a0:9a:45:34:70:a4:4e:a8:d5:ad:04:52:
         aa:6c:ce:7c:d2:c3:bc:ba:e9:09:41:54:b3:34:bc:8b:b6:c6:
         a9:d0:58:3f:36:c7:bf:cc:a3:93:ba:ed:8c:ad:11:3b:c1:f5:
         aa:ea:40:bb:9e:d9:c3:2c:48:4e:b1:44:10:a9:63:09:0d:91:
         ef:db:95:44:21:47:b2:fe:96:7d:74:2b:a8:ad:ef:a8:76:7b:
         95:88:40:07:65:3e:59:5c:27:5d:c7:1e:e3:a7:dc:6c:81:19:
         df:ba:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:49:04 2024 by rpki-client on console-ams.rpki-client.org