Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/61eb7ada-d487-3b84-8eb2-f1f5bf829723.roa
File:                     61eb7ada-d487-3b84-8eb2-f1f5bf829723.roa (raw, json)
Hash identifier:          FT64DEfqZh6p5H/ruFuP10QXz0lw9J9lDK2IIYCevvE=
Subject key identifier:   6C:EE:C8:BB:B6:0E:CB:8D:DB:58:DF:0A:89:83:CD:D4:20:19:34:9D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454905F38BD3CA1C2A26CB6120
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/61eb7ada-d487-3b84-8eb2-f1f5bf829723.roa
Signing time:             Thu 21 Mar 2024 21:32:05 +0000
ROA not before:           Thu 21 Mar 2024 21:32:05 +0000
ROA not after:            Wed 19 Jun 2024 21:32:05 +0000
asID:                     396982
IP address blocks:        35.188.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:05:f3:8b:d3:ca:1c:2a:26:cb:61:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:32:05 2024 GMT
            Not After : Jun 19 21:32:05 2024 GMT
        Subject: CN=451719e9-e334-4246-b575-b259fb217ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:ee:8a:f9:87:29:09:bf:28:ed:dd:39:43:
                    2d:19:74:a7:0f:25:77:3e:d9:ff:77:2b:ee:23:83:
                    5c:a5:fa:7d:9c:eb:8d:1d:cb:94:3b:8c:f2:87:70:
                    c4:46:80:df:da:8a:3e:51:22:84:5f:a2:cc:d3:71:
                    23:4b:39:44:75:00:e4:43:dd:08:f3:b3:15:8e:b5:
                    ad:e2:46:51:6d:0e:85:36:48:e6:04:9a:b2:ec:55:
                    f3:fd:8b:31:92:cb:d9:51:29:c8:23:d2:17:f7:f9:
                    1b:b6:af:5b:3a:ae:2f:a2:71:79:d4:49:01:61:db:
                    b6:dc:0f:62:c4:bb:0d:ec:f1:f8:5e:ee:78:35:11:
                    9d:57:d0:f3:e2:79:5e:87:df:ab:fd:a6:4c:08:71:
                    68:e2:9e:8d:aa:b6:9d:13:13:03:66:ba:3e:6a:ea:
                    b4:d3:ba:be:b8:a8:71:93:7f:5f:1c:8e:d1:e0:61:
                    b6:2a:4f:d9:ab:8c:e2:0c:16:74:06:ca:ac:fa:32:
                    11:03:3c:10:e5:9f:c5:02:6a:31:9e:01:29:24:6a:
                    07:97:0e:09:0b:ad:2d:ec:58:c7:0e:a4:b6:aa:04:
                    a3:5a:bf:ea:02:60:e6:79:f4:ec:5b:03:cc:a8:55:
                    1f:69:d0:50:90:82:0e:52:35:80:22:f6:93:98:0c:
                    d3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EE:C8:BB:B6:0E:CB:8D:DB:58:DF:0A:89:83:CD:D4:20:19:34:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/61eb7ada-d487-3b84-8eb2-f1f5bf829723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.188.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:fb:47:af:e2:e2:dd:34:9b:69:bc:dd:9c:41:ea:44:ed:b8:
         79:78:ea:10:4b:56:c7:2d:6a:11:28:7b:56:99:8f:cd:c8:c1:
         1e:e4:28:db:4a:06:a3:ae:d7:b5:f8:d6:7a:e8:49:73:92:38:
         d9:ae:96:60:9a:44:c6:b3:db:2a:f8:3a:7c:b4:72:e5:07:66:
         f8:b2:8c:63:10:48:e6:19:b5:52:0a:f5:4a:79:3f:af:67:4d:
         d1:97:71:6a:f8:21:a5:e5:3e:ed:94:7e:6a:4f:9f:be:19:21:
         66:b0:34:dc:a5:f2:01:e7:0e:ac:29:80:6a:a6:50:5f:30:2c:
         cc:4f:5c:ed:98:87:dd:91:28:31:67:91:23:1e:bc:fb:28:e8:
         2e:44:26:fc:c7:44:0d:32:a5:41:87:77:c9:fa:ba:c9:bc:73:
         c2:4f:d3:6f:41:c6:a0:da:e2:e1:9f:ac:e4:33:9f:3a:0f:7a:
         04:ac:db:2f:40:ca:ca:14:cc:59:40:cf:98:4b:82:c1:47:12:
         80:bf:ff:1b:c5:31:db:47:d4:9f:ef:ae:f8:f5:f8:d5:37:50:
         c7:68:f2:ca:fb:77:1a:95:de:1b:c9:a8:7e:80:f9:46:50:bc:
         ed:46:5c:84:f9:f1:20:c6:00:47:bf:6c:9e:a7:aa:67:b7:92:
         90:bc:6c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:26 2024 by rpki-client on console-fra.rpki-client.org