Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/51a65ff9-4328-3b4e-a2c0-e50d5f31d1a4.roa
File:                     51a65ff9-4328-3b4e-a2c0-e50d5f31d1a4.roa (raw, json)
Hash identifier:          ebB8r9B3Er6hLqU08fW7+ckOL7Y+LTg82umKWf6NNds=
Subject key identifier:   98:70:02:64:3D:14:31:BA:70:68:3C:B1:23:ED:94:C5:DC:CD:98:39
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490ED8000CDF34B74915FB00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/51a65ff9-4328-3b4e-a2c0-e50d5f31d1a4.roa
Signing time:             Thu 21 Mar 2024 21:50:00 +0000
ROA not before:           Thu 21 Mar 2024 21:50:00 +0000
ROA not after:            Wed 19 Jun 2024 21:50:00 +0000
asID:                     396982
IP address blocks:        35.204.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0e:d8:00:0c:df:34:b7:49:15:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:50:00 2024 GMT
            Not After : Jun 19 21:50:00 2024 GMT
        Subject: CN=468032c3-b719-400b-8066-9cd296ef44d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:c9:7d:24:5b:f6:1b:4c:b8:51:af:de:9b:
                    c8:9a:55:71:ea:c2:55:6a:9d:b9:63:2d:c3:0a:ae:
                    57:f5:6a:60:8f:cb:61:8f:6a:1c:ff:42:c2:df:2b:
                    99:70:eb:12:30:4a:f7:18:3e:8d:d0:14:a2:19:f1:
                    81:db:68:25:e3:53:d3:4f:00:67:e5:d4:80:1b:0f:
                    ba:55:ed:03:ed:c7:de:70:cb:a0:6c:bf:2a:03:bc:
                    9c:e8:27:82:9a:e1:d1:49:a7:f7:b9:7e:cb:d8:29:
                    14:34:d6:ee:df:cf:71:be:39:bf:c6:6e:5a:30:cc:
                    b5:4c:26:2b:33:7d:35:33:50:9f:36:9b:9f:09:16:
                    fd:1f:c4:75:7e:aa:d3:0b:8a:83:af:70:29:3c:1a:
                    75:05:4b:1b:89:bf:14:54:4f:f9:3d:ae:0c:6f:cb:
                    5e:8e:5b:02:2a:d4:3f:a3:ef:46:91:f2:52:c6:c6:
                    2b:ae:48:2a:b4:a0:10:f5:1c:0f:e5:3a:c8:36:6f:
                    5b:c7:70:b9:81:d0:9f:57:1c:cd:e4:51:86:c1:cf:
                    3f:b2:ff:1c:56:f6:7c:ef:c7:c6:1a:de:ad:c1:e3:
                    a7:3d:aa:5b:d9:33:46:55:8b:ac:e4:36:72:7e:88:
                    8f:00:86:49:45:08:af:bf:04:cb:45:9f:cd:6b:9c:
                    cb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:70:02:64:3D:14:31:BA:70:68:3C:B1:23:ED:94:C5:DC:CD:98:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/51a65ff9-4328-3b4e-a2c0-e50d5f31d1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.204.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:8e:03:be:5c:3e:af:2e:57:02:ba:0d:dd:27:a1:88:9d:a9:
         79:56:a1:35:b3:d8:92:85:f0:a1:32:bb:fe:3c:bc:c8:e7:9f:
         7c:17:90:28:3a:49:c7:86:1c:d8:f8:04:82:06:82:e3:47:7f:
         60:2f:7f:e1:57:29:49:ea:27:61:b7:da:62:1b:5c:21:1b:91:
         9b:a9:f9:d5:99:3c:8f:77:9f:72:2d:8c:fe:19:7d:c6:35:99:
         be:8a:d6:06:a2:f4:85:bc:f7:46:dd:58:06:97:c9:e2:60:1e:
         74:d0:09:77:b0:60:f4:d0:17:ce:b3:16:66:c6:89:04:ec:2e:
         4d:4c:76:e1:98:24:ae:81:8a:46:bc:6c:eb:a5:8a:d0:10:fa:
         f7:98:a5:33:54:20:9b:75:1f:fe:98:42:71:f8:0f:2c:31:95:
         cc:13:02:86:f3:65:48:1f:e1:6b:da:fe:ce:60:f8:dd:39:d7:
         37:0b:7d:67:27:9f:06:64:c2:d7:81:97:87:ff:f6:79:bf:a2:
         bc:82:e9:88:dc:cb:f0:69:5c:33:ef:d9:a2:04:64:bd:95:b5:
         10:32:b7:65:f8:d0:ee:58:74:96:99:f5:1a:1d:50:a7:ee:c2:
         2f:f3:95:7d:eb:81:06:dd:4f:ee:41:9e:95:21:60:9d:99:a3:
         ce:8b:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:07:50 2024 by rpki-client on console-ams.rpki-client.org