Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50a5a45b-0aa8-347f-b25a-9d4caa1519c9.roa
File:                     50a5a45b-0aa8-347f-b25a-9d4caa1519c9.roa (raw, json)
Hash identifier:          OXmE+thaWHgOoX3Bav8Cty41bg0NVesRPmHUcOSvV4I=
Subject key identifier:   9C:A5:EB:8A:F5:09:F3:40:84:85:3B:0C:39:65:4C:E9:D7:12:14:18
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454901BF3FC76D2B7DEC2CA400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50a5a45b-0aa8-347f-b25a-9d4caa1519c9.roa
Signing time:             Thu 21 Mar 2024 21:23:36 +0000
ROA not before:           Thu 21 Mar 2024 21:23:36 +0000
ROA not after:            Wed 19 Jun 2024 21:23:36 +0000
asID:                     396982
IP address blocks:        35.202.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:01:bf:3f:c7:6d:2b:7d:ec:2c:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:23:36 2024 GMT
            Not After : Jun 19 21:23:36 2024 GMT
        Subject: CN=57b3c05a-2f59-42f3-b96b-30cba6637fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:66:cd:4c:03:9d:2f:0c:ca:77:1b:df:9d:
                    6c:30:5b:50:e8:ec:01:c0:9c:1f:8f:b1:83:af:a7:
                    9c:72:e6:01:d6:b4:a9:3e:3d:bb:25:c3:a6:da:cf:
                    6a:8a:25:94:ae:d0:4c:91:8e:e9:b7:53:a5:4f:57:
                    a3:0b:8e:6d:16:94:c5:6c:d2:f8:1b:4d:d7:78:69:
                    89:5d:da:ec:35:fe:a4:f7:27:d4:99:ca:55:cb:80:
                    cf:50:d9:c3:e3:ad:a1:6d:f1:2c:26:51:a6:ec:d8:
                    42:cf:26:ff:21:fb:e7:41:06:84:df:23:c5:cd:ed:
                    3a:48:c0:4c:57:3f:8a:5d:77:87:f9:87:a8:ac:cd:
                    d8:c0:da:b2:0e:7d:73:f7:62:34:ff:2e:0a:71:05:
                    64:c8:8f:66:82:83:1c:77:1b:c4:ac:9e:03:e5:c4:
                    90:03:b9:72:07:0e:02:e0:1f:d8:b5:8d:0c:b6:de:
                    7b:e3:65:97:3d:db:c5:37:92:b2:ff:93:fa:4d:b9:
                    ee:90:d9:86:a9:09:3f:68:32:f7:f9:1d:4e:3d:01:
                    16:bb:0a:a6:dd:60:1b:c4:55:86:c6:59:ad:98:8f:
                    f6:6e:bf:3c:6a:e4:38:b7:cc:2d:d9:63:03:fb:3d:
                    e8:27:3f:ee:15:0e:71:b3:51:42:b3:47:a0:a0:03:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A5:EB:8A:F5:09:F3:40:84:85:3B:0C:39:65:4C:E9:D7:12:14:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50a5a45b-0aa8-347f-b25a-9d4caa1519c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.202.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:df:76:52:b3:17:33:a8:1e:db:3d:d2:bd:e1:b8:ab:f2:da:
         6f:51:db:27:27:e3:4c:38:fb:75:8c:cb:3e:af:c2:77:04:c7:
         0e:92:2f:4b:4f:10:37:6c:5f:e8:6b:8d:a0:a1:42:ce:72:2f:
         4d:8b:eb:5f:42:aa:14:99:61:3a:55:10:bf:e9:f6:d8:8b:ee:
         c7:76:ee:c6:5f:27:a0:a2:89:a8:84:7c:a0:fd:d1:81:7d:ae:
         81:b6:bb:cb:e7:0b:ba:08:8c:c8:63:82:11:ec:13:81:dd:77:
         33:4b:2e:b1:ac:ce:9e:8c:6d:19:6a:f5:44:ed:8d:65:f8:24:
         d0:8a:49:64:29:cf:a8:cf:fd:df:80:4b:ad:8f:19:72:af:48:
         8a:bb:6c:01:b5:dc:5f:bd:6b:ea:17:af:77:ce:4d:e1:c0:f8:
         3e:53:2e:46:4b:ef:65:b7:ee:98:97:60:c4:f4:32:52:19:f6:
         e3:b1:2a:ae:4b:fc:0f:89:c1:67:eb:0d:64:3f:9f:84:27:ab:
         6a:64:f4:dc:8b:ba:a2:65:ce:eb:06:ce:33:95:e1:f6:79:33:
         bb:a5:9a:25:cc:f5:4b:cf:c9:de:b1:34:e3:a3:99:3c:cb:7b:
         66:4b:d1:2b:40:6c:83:2c:7e:3d:e8:88:bd:a2:1c:6d:57:e0:
         3b:36:e0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:19 2024 by rpki-client on console-fra.rpki-client.org