Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a8674ea-f491-32f8-8a19-419793a95e2a.roa
File:                     3a8674ea-f491-32f8-8a19-419793a95e2a.roa (raw, json)
Hash identifier:          3mxAaK2es6SElzaDGmlkH9fhxGf2QyWNH38qqs6zkKA=
Subject key identifier:   0A:53:1E:91:B5:76:17:DF:9D:99:78:9D:52:F1:0C:DB:D3:61:79:BC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FC58DC0E1B51D3BFC69D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a8674ea-f491-32f8-8a19-419793a95e2a.roa
Signing time:             Thu 21 Mar 2024 21:12:43 +0000
ROA not before:           Thu 21 Mar 2024 21:12:43 +0000
ROA not after:            Wed 19 Jun 2024 21:12:43 +0000
asID:                     396982
IP address blocks:        35.193.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fc:58:dc:0e:1b:51:d3:bf:c6:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:12:43 2024 GMT
            Not After : Jun 19 21:12:43 2024 GMT
        Subject: CN=3be0b858-aa29-4dd8-a961-7eef862884e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:34:3a:c0:1d:34:b0:44:a0:9c:53:b4:7a:
                    de:ac:d7:db:4d:2a:a6:ce:69:02:49:d2:8b:75:9f:
                    56:e4:90:db:33:03:13:3e:f2:55:93:3a:d1:f8:10:
                    e3:94:e2:bc:0c:0b:ae:3e:e7:34:ec:51:38:8f:dc:
                    47:83:d7:f9:8d:6b:ce:98:7a:93:ab:f7:8e:01:ac:
                    7f:c4:02:65:03:c1:e1:79:0e:6f:dd:33:76:e1:1d:
                    16:50:36:49:09:68:23:db:e1:08:88:89:2f:d3:fd:
                    cb:32:80:3e:a5:d2:02:b9:db:93:e4:79:b1:87:e1:
                    85:a1:f4:67:de:73:46:e3:6e:b2:ad:71:e8:43:fc:
                    f9:c3:e2:74:5f:d6:32:01:90:f8:e1:5a:66:24:ce:
                    68:9d:d7:af:e9:d1:44:50:08:c8:e1:6b:aa:4d:4a:
                    5d:84:97:51:b7:6c:10:b5:b2:54:50:2f:19:11:4b:
                    e7:89:af:ac:cd:fc:3d:26:3f:a5:d0:a4:54:5e:63:
                    f7:fe:50:8d:7c:cc:33:66:95:de:0f:56:c9:c5:f6:
                    e1:74:cf:37:9f:2b:76:03:4b:c7:e9:03:50:1e:c7:
                    05:04:df:8c:01:fd:c1:92:d4:22:50:59:3f:0c:88:
                    58:d1:c5:be:56:c3:43:0b:00:8c:c7:74:f3:49:2b:
                    d0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:53:1E:91:B5:76:17:DF:9D:99:78:9D:52:F1:0C:DB:D3:61:79:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a8674ea-f491-32f8-8a19-419793a95e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.193.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:dd:27:b7:8a:f6:de:21:33:e7:f5:b6:05:74:df:a8:48:f5:
         d3:d6:2f:0f:ba:fc:31:3f:de:87:43:f0:1a:c1:4a:1a:c4:85:
         be:a7:32:32:8a:f4:00:fb:24:2c:1d:f4:15:7a:c6:fd:62:34:
         86:ba:b2:bb:72:78:fa:ea:de:42:73:05:b7:d0:08:13:7e:50:
         95:eb:1e:d3:d9:ca:d5:3a:8d:60:cc:31:e1:87:dd:5a:b5:90:
         64:31:b9:74:d9:eb:7c:50:18:35:65:23:f2:73:eb:65:db:38:
         55:7f:07:d9:8f:67:a1:ea:b0:5f:a9:e9:c1:aa:07:07:d5:df:
         f4:fd:33:d3:14:12:3d:ff:7d:53:f4:fe:c5:fd:3e:ec:f2:c0:
         21:ad:4f:4b:8b:c7:c8:04:9b:ed:83:a7:4e:26:74:db:2e:51:
         d5:66:f1:fb:62:b1:5e:27:0e:16:ca:ec:1d:89:79:cc:b8:ba:
         64:25:95:c6:e4:69:19:b0:27:96:d4:4a:60:17:e8:88:a8:8c:
         f8:c7:79:9f:7b:cb:cf:43:3c:a7:2c:bb:e6:5f:cf:4b:f1:88:
         c5:67:32:09:4f:24:b5:9a:a7:de:8d:a2:e2:86:5b:5f:4a:2a:
         a0:0f:f2:bb:d6:6d:b3:6a:c3:f0:a1:87:da:68:a8:68:3c:cb:
         c2:de:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:10 2024 by rpki-client on console-fra.rpki-client.org