Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53102170-5c13-3c85-a0da-4a0497370746.roa
File:                     53102170-5c13-3c85-a0da-4a0497370746.roa (raw, json)
Hash identifier:          ihM8zP+1sGgxbfnBK22vl4oLd2L4fj7wkygO1nNoPi8=
Subject key identifier:   E4:97:94:14:65:8D:EE:80:3A:9F:FE:27:41:71:6B:9C:3F:05:A8:4E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454902DE7BF3DB106404A34AD0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53102170-5c13-3c85-a0da-4a0497370746.roa
Signing time:             Thu 21 Mar 2024 21:25:52 +0000
ROA not before:           Thu 21 Mar 2024 21:25:52 +0000
ROA not after:            Wed 19 Jun 2024 21:25:52 +0000
asID:                     396982
IP address blocks:        35.221.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:02:de:7b:f3:db:10:64:04:a3:4a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:25:52 2024 GMT
            Not After : Jun 19 21:25:52 2024 GMT
        Subject: CN=488a516b-0533-45de-94eb-e88f8afcb7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:f3:c7:2a:47:cc:8c:07:53:85:f4:9c:98:
                    45:ab:e6:00:ec:7d:9e:fa:30:80:f2:cb:86:0a:59:
                    73:13:5f:26:a1:89:ee:fc:c6:6a:7f:39:17:68:64:
                    1f:34:7b:1f:b8:76:c8:d3:27:65:83:00:8c:55:eb:
                    19:f8:3d:07:d1:88:4c:0e:63:cf:6f:65:8f:04:d3:
                    52:6a:79:15:75:07:26:8c:46:c9:e3:80:6f:10:b2:
                    7b:bb:18:5c:b7:08:59:99:2b:ec:cf:86:11:73:05:
                    54:c3:7f:dc:d2:21:32:bb:03:42:94:11:31:e6:c0:
                    84:31:58:bd:57:79:8b:99:f3:fc:ae:41:af:81:1a:
                    fa:6d:37:c0:39:90:9a:58:5b:56:d3:36:3e:b2:45:
                    ab:3d:57:71:75:12:2d:cb:dd:a2:c1:54:5a:47:58:
                    19:22:db:17:ab:19:f7:84:4a:de:2e:57:09:9e:46:
                    fc:b5:63:0e:8b:0d:3a:d8:0f:b9:36:65:b1:64:ca:
                    c3:51:83:60:79:e0:37:87:0d:0a:78:25:0d:99:74:
                    f5:ad:37:6c:82:6b:f4:24:1d:eb:f5:db:46:ae:3c:
                    69:0e:61:80:5e:0a:b3:95:37:5a:de:52:13:50:2b:
                    1b:e5:18:26:60:ba:95:24:5b:52:13:a0:f9:dc:dd:
                    48:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:97:94:14:65:8D:EE:80:3A:9F:FE:27:41:71:6B:9C:3F:05:A8:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53102170-5c13-3c85-a0da-4a0497370746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.221.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d8:9b:d5:7e:0a:ed:2f:05:0d:e4:9d:2d:6f:37:44:32:0a:
         77:74:fc:b7:45:e9:0a:a8:62:69:0f:ba:af:98:92:ac:5d:3b:
         b7:c8:5d:ce:20:5f:71:b2:d8:77:ac:0f:ff:61:f9:98:f9:4f:
         ea:38:e9:de:36:df:62:71:d5:33:15:9e:dd:ce:4a:91:ff:54:
         38:9f:4f:76:b4:1f:aa:e8:70:ab:22:25:17:72:1e:3f:23:e1:
         b3:e8:4e:67:11:4c:9b:0b:9b:f4:fd:bc:c3:14:87:76:e3:91:
         5b:c7:2a:f9:c8:8a:aa:94:ec:a3:29:0a:e1:51:b7:b8:82:05:
         e3:96:20:d1:3a:45:89:7d:c2:f9:2a:19:a6:73:24:b1:a4:32:
         23:51:b3:73:50:90:60:80:0d:9a:bf:ff:96:af:56:23:7f:81:
         94:09:92:f2:8c:99:f6:41:dd:70:14:f7:af:fb:82:14:6c:86:
         98:e5:67:c9:b1:20:72:34:23:d4:52:f4:29:56:a7:c4:1b:dc:
         a3:74:af:e6:89:b7:65:87:6c:77:54:fb:17:72:f6:43:92:ab:
         2f:36:31:0b:41:df:a3:33:30:f9:a8:05:62:ba:45:72:d6:a5:
         69:c3:4a:96:e1:88:bb:2f:42:df:e7:1c:3d:11:8a:0b:04:0b:
         60:48:6f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:35:10 2024 by rpki-client on console-fra.rpki-client.org