Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/404877f8-ca2b-39b0-95c3-95a11a3c927a.roa
File:                     404877f8-ca2b-39b0-95c3-95a11a3c927a.roa (raw, json)
Hash identifier:          lqQq/1dKEDFRMG/WfAbUwTU4sQnWAOy9Hs9dlgmHQIw=
Subject key identifier:   4B:9D:87:CC:9F:6B:1B:1C:89:86:9F:68:84:2D:95:30:01:4D:DD:3A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FC843EA06EEA6CAF2C1180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/404877f8-ca2b-39b0-95c3-95a11a3c927a.roa
Signing time:             Thu 21 Mar 2024 21:13:04 +0000
ROA not before:           Thu 21 Mar 2024 21:13:04 +0000
ROA not after:            Wed 19 Jun 2024 21:13:04 +0000
asID:                     396982
IP address blocks:        35.186.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fc:84:3e:a0:6e:ea:6c:af:2c:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:13:04 2024 GMT
            Not After : Jun 19 21:13:04 2024 GMT
        Subject: CN=1e9047af-5073-4f63-ad33-896fb190d11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a4:99:32:e7:fb:32:32:37:2b:f9:9f:59:12:
                    db:a3:d4:b5:6b:f9:59:e7:c4:3f:38:65:89:cb:35:
                    22:d8:11:8f:01:a5:98:56:45:4e:b4:f9:2c:54:7b:
                    a4:73:92:8f:40:e2:15:6b:39:9e:da:6d:d4:2f:5c:
                    06:c7:85:56:da:51:1a:2d:67:91:21:9f:c6:e9:d6:
                    7c:0e:e8:af:e5:47:47:4d:90:23:84:c8:c9:42:09:
                    99:28:8c:8f:26:f4:bd:93:45:ff:9b:70:95:4d:1e:
                    22:75:04:71:58:85:fd:dc:67:a5:a3:24:93:ac:ec:
                    20:1e:b6:d7:05:00:89:4e:17:8d:ff:c0:29:8c:85:
                    28:80:94:92:4e:14:7d:7d:1f:f4:ca:ac:c7:39:9a:
                    49:a5:a2:12:be:cf:0b:c1:36:a6:99:56:41:a4:58:
                    3f:b9:b9:6b:8d:5c:fc:87:87:cf:2c:2a:32:e3:00:
                    96:ec:78:27:9e:b9:e6:66:01:53:82:a7:d9:80:62:
                    d1:45:12:33:06:fb:78:92:ab:77:70:63:b2:6f:c0:
                    bf:ec:38:cc:cc:b1:4d:46:1c:82:6e:ee:f6:52:8d:
                    f8:0a:f6:44:79:d4:d7:d1:de:f6:a2:94:26:4b:66:
                    02:b5:25:92:ce:50:40:0b:fd:fa:f1:ed:b8:4e:25:
                    43:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9D:87:CC:9F:6B:1B:1C:89:86:9F:68:84:2D:95:30:01:4D:DD:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/404877f8-ca2b-39b0-95c3-95a11a3c927a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.186.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:45:9f:4e:95:c6:d0:58:36:03:de:0c:47:db:f1:9c:a1:4e:
         87:97:dc:a3:c2:6d:dd:99:6d:80:30:b2:af:df:81:76:01:72:
         b5:94:a0:f7:4a:94:9d:50:05:fd:a6:83:ff:e5:2f:4b:2b:cd:
         ea:9d:d6:fe:67:f1:df:7e:77:3d:b2:a1:c1:7a:6b:73:61:d8:
         b8:6d:a1:cb:eb:40:0b:e9:f9:aa:d5:ed:5c:76:f3:7c:e5:b6:
         4e:c8:d8:94:d4:b8:ae:10:3f:74:8f:16:c4:b5:07:cd:bb:ea:
         8a:15:1c:dd:2f:ee:17:8f:7f:d1:1e:b3:d9:d2:f8:73:34:4c:
         ae:cf:7e:32:1d:87:72:aa:b5:a6:4b:98:9a:a3:06:71:19:75:
         0f:a0:8d:59:04:7b:2a:00:1f:7e:89:64:03:a6:7e:92:99:f1:
         6d:b4:74:e9:df:06:95:ff:dd:a0:96:df:fb:88:6c:d6:8e:18:
         f1:1f:f5:cd:1e:fe:52:ab:76:46:20:39:86:10:8c:bd:01:2e:
         04:ed:c4:51:3f:23:97:4c:d8:3a:57:0f:44:c7:c5:19:32:a9:
         4b:c6:66:bf:8c:24:f4:03:19:1c:ae:68:79:de:f4:db:bb:27:
         da:20:08:1e:6d:36:dc:67:e1:63:c7:42:11:bf:68:69:36:9b:
         0e:26:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:12:13 2024 by rpki-client on console-fra.rpki-client.org