Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32e83f4f-5004-3de7-b53b-7f7ffbf6846c.roa
File:                     32e83f4f-5004-3de7-b53b-7f7ffbf6846c.roa (raw, json)
Hash identifier:          Gmie7bSa/6hkHSlBKKzkWGxcvj7hsM6u0kLfkW/fVFQ=
Subject key identifier:   D2:4D:C9:F1:87:A0:FC:D2:55:61:1E:C4:1B:26:9D:DE:12:94:CB:9E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F02E495FEAEDCFCAFFDFF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32e83f4f-5004-3de7-b53b-7f7ffbf6846c.roa
Signing time:             Fri 29 Mar 2024 18:33:42 +0000
ROA not before:           Fri 29 Mar 2024 18:33:42 +0000
ROA not after:            Thu 27 Jun 2024 18:33:42 +0000
asID:                     396982
IP address blocks:        35.186.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:02:e4:95:fe:ae:dc:fc:af:fd:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:33:42 2024 GMT
            Not After : Jun 27 18:33:42 2024 GMT
        Subject: CN=86cc2e41-9647-4694-93a4-d5161eb69599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9e:de:95:48:a6:c9:29:21:84:3f:3a:74:ad:
                    e6:88:4e:b9:f5:77:8e:a8:4a:71:a8:ed:d2:86:d3:
                    1d:c6:67:80:9c:42:be:1d:4c:57:f3:03:0a:5f:97:
                    69:7b:1c:24:88:0f:6c:3d:71:16:49:34:d0:c2:2d:
                    52:f2:d9:77:2d:40:f3:bd:e7:9d:95:06:fb:c9:34:
                    7f:04:fb:c1:1b:5c:40:15:34:b3:00:0f:b0:e4:d3:
                    1e:df:62:56:43:a2:b7:b5:41:d5:49:37:84:0c:17:
                    2a:d6:fa:07:a6:09:3b:55:41:61:aa:d8:b1:58:19:
                    e1:78:3d:2e:cd:db:24:4b:a3:af:bc:e2:4b:fb:6e:
                    79:15:10:d2:f0:6f:d7:1f:4f:98:9d:ff:c7:c8:34:
                    b6:7d:93:f2:62:e9:f1:41:3e:a8:86:55:1b:7e:42:
                    27:b0:6a:d9:90:24:2c:5a:43:38:be:39:f5:81:66:
                    67:ff:6b:aa:3d:d6:68:f1:83:a1:d5:db:45:48:f3:
                    6f:cb:54:d0:15:06:8f:20:60:98:f4:0e:1f:f0:0e:
                    18:ce:6e:10:ae:b1:ea:73:74:51:1f:c2:58:30:78:
                    ae:6c:12:71:55:2b:ef:48:9b:71:09:72:91:81:93:
                    06:21:5c:fa:8c:10:fb:11:6e:b7:64:98:7f:62:e5:
                    07:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4D:C9:F1:87:A0:FC:D2:55:61:1E:C4:1B:26:9D:DE:12:94:CB:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32e83f4f-5004-3de7-b53b-7f7ffbf6846c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.186.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:84:0e:0f:bb:f8:ad:b2:5a:d0:a1:38:74:81:e9:93:7c:fd:
         c8:91:d8:7c:09:7c:c7:7d:4f:2a:60:cb:87:55:0c:c6:07:2f:
         a7:38:a6:7f:8a:1c:f6:65:1c:5d:e5:28:2c:02:e4:9b:28:8e:
         5c:68:8f:dc:cf:b1:1a:fb:e0:ab:bc:8a:23:1c:e2:aa:d1:f6:
         8e:d1:ab:19:db:c4:54:e6:4b:e4:3e:c6:4d:a3:56:48:6b:b4:
         47:ee:90:03:41:b8:4e:5e:ba:a4:b3:38:15:2e:a5:15:a1:39:
         54:43:bb:e6:57:5b:9c:27:c9:1c:95:fd:c1:74:47:60:3b:c9:
         81:db:55:dd:51:82:1c:e0:2c:30:e5:34:36:99:7f:8e:2f:49:
         5c:63:61:d8:36:d6:df:0c:12:2d:5e:05:e7:f3:f0:7a:0e:36:
         ec:75:38:a2:7d:1c:16:3a:05:a7:c3:8d:f0:c5:93:ba:d6:46:
         39:aa:10:ab:04:4e:d2:57:48:55:d3:5b:33:28:42:a0:0b:64:
         36:47:ec:a0:7a:17:9f:d5:f4:73:3b:fe:2b:0d:36:2d:b7:29:
         03:07:de:37:68:10:50:08:8d:a7:f0:3b:65:10:da:3c:77:7f:
         5f:37:e0:ff:c5:9e:c5:1d:0a:5e:a5:c1:d3:b9:00:97:15:f0:
         bf:7c:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:49:04 2024 by rpki-client on console-ams.rpki-client.org