Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39907a3e-43de-3399-afdf-a74ff510c4dd.roa
File:                     39907a3e-43de-3399-afdf-a74ff510c4dd.roa (raw, json)
Hash identifier:          YhgvDfhvidGYmztpwSx1x0NPmt+TxHFYeqC/5EVnq1Q=
Subject key identifier:   13:F8:EE:8D:94:20:C5:64:70:F6:BA:79:87:63:DD:24:D1:EF:BE:6D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490DAF589027193369E27FE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39907a3e-43de-3399-afdf-a74ff510c4dd.roa
Signing time:             Thu 21 Mar 2024 21:47:39 +0000
ROA not before:           Thu 21 Mar 2024 21:47:39 +0000
ROA not after:            Wed 19 Jun 2024 21:47:39 +0000
asID:                     396982
IP address blocks:        35.193.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0d:af:58:90:27:19:33:69:e2:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:47:39 2024 GMT
            Not After : Jun 19 21:47:39 2024 GMT
        Subject: CN=533df098-069b-4893-8d2e-d82e34819df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:eb:06:84:8d:32:5c:a8:6a:c7:5f:aa:9a:
                    a9:a0:f3:7a:d5:72:66:67:3c:42:f0:ca:d1:2d:8c:
                    df:2f:f4:6c:b5:8e:24:fd:16:7c:b5:4c:e7:39:62:
                    f1:65:45:63:e0:ba:34:82:1c:a8:e1:99:fc:be:c7:
                    31:ba:ec:6a:d0:2b:37:66:1a:e6:12:0e:3e:0f:11:
                    16:3f:9a:f6:4d:f0:7b:28:9b:48:71:d3:fd:ef:f3:
                    cf:44:31:a7:3b:48:d9:c8:32:a0:12:3a:9b:f1:ef:
                    c2:48:69:7a:cd:76:64:ad:54:c8:d8:a0:46:e7:38:
                    00:89:e3:34:2a:70:30:fb:e6:fa:41:25:74:28:61:
                    b1:b3:c9:0c:69:58:4f:a1:92:62:24:05:14:82:0a:
                    29:4a:1b:98:8a:dd:2a:f7:a8:0c:2d:e6:bf:18:20:
                    54:cb:d5:8a:34:87:f0:3f:1b:65:ce:3b:1e:d9:0d:
                    bd:84:c2:ae:ed:5c:71:79:4f:82:d0:21:58:7c:04:
                    db:7b:ff:9b:19:56:33:c2:0d:61:c6:53:2a:8c:02:
                    5f:19:3d:8a:ba:70:b4:92:af:6e:5e:29:3a:10:13:
                    39:97:5a:90:15:56:76:80:b2:cc:ee:ae:f7:e3:2d:
                    06:97:d1:aa:8b:eb:13:2e:c4:c6:2f:f1:43:6d:47:
                    62:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F8:EE:8D:94:20:C5:64:70:F6:BA:79:87:63:DD:24:D1:EF:BE:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39907a3e-43de-3399-afdf-a74ff510c4dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.193.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b4:b5:86:b1:96:9e:0b:f9:86:02:d8:06:c2:22:fd:08:eb:
         f0:e9:b8:89:4f:a2:5a:a8:6f:f7:94:e7:9c:7a:1d:ec:f5:e4:
         f8:06:cc:34:e6:13:71:85:81:c0:d8:e3:de:1f:2e:e0:59:02:
         c0:bb:e4:b2:d0:a3:00:5b:76:94:8d:24:a5:6b:ce:93:ce:56:
         2f:99:d2:0f:6b:36:68:68:8f:6c:ea:33:e5:57:2f:77:50:a0:
         3f:82:e6:8d:9f:09:17:54:de:fb:5b:72:ea:59:93:98:c2:67:
         c7:1a:67:eb:f7:fa:fd:da:97:e6:83:34:25:28:5b:ce:a1:ce:
         a5:5f:b4:07:ac:d9:6f:7e:f7:d2:f3:ab:1f:70:72:53:8a:2a:
         14:37:08:35:8b:5e:90:4f:70:ff:b3:f4:45:52:71:76:b0:11:
         f1:52:a0:82:da:e9:d9:ea:cb:ef:8e:6b:3b:fd:52:9e:3a:4a:
         55:21:52:34:8e:dc:28:3c:b2:09:e0:5a:9f:56:ea:5e:48:c1:
         f6:60:6e:8a:0d:be:50:3f:8a:23:e2:a4:68:ba:ca:d5:23:c3:
         68:3d:de:33:05:12:6a:94:b5:10:2b:ec:16:f8:a6:25:d1:17:
         af:a0:1b:21:c8:fd:78:07:b7:9d:72:85:c5:e4:cd:ab:b2:57:
         8a:8d:1c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:07:43 2024 by rpki-client on console-ams.rpki-client.org