Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64843a99-637f-3b90-b32c-77f6cdcea810.roa
File:                     64843a99-637f-3b90-b32c-77f6cdcea810.roa (raw, json)
Hash identifier:          BzPS9khBGVuFAN4+0++YENcRGXn32f/f/8QAQvvKKHw=
Subject key identifier:   1F:67:FE:F6:57:A8:F5:B2:13:5C:E3:AC:1D:DA:27:9A:2D:C7:34:74
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490A52541ECA2E1A98BD4A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64843a99-637f-3b90-b32c-77f6cdcea810.roa
Signing time:             Thu 21 Mar 2024 21:40:53 +0000
ROA not before:           Thu 21 Mar 2024 21:40:53 +0000
ROA not after:            Wed 19 Jun 2024 21:40:53 +0000
asID:                     396982
IP address blocks:        35.238.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0a:52:54:1e:ca:2e:1a:98:bd:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:40:53 2024 GMT
            Not After : Jun 19 21:40:53 2024 GMT
        Subject: CN=b1700a9f-6d99-41a2-9843-6f3dfa7d8317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:38:58:5e:9a:e5:4f:c5:b6:47:cf:4b:1b:84:
                    1b:25:12:9e:02:bd:bd:8c:7e:11:85:ea:e8:60:34:
                    ab:39:0c:d4:bb:bd:d3:6e:57:68:72:d0:04:16:a9:
                    94:1e:f1:a6:26:02:ee:2e:ab:59:e8:da:eb:6b:cb:
                    6d:1d:42:75:4c:13:a2:ac:f0:48:86:60:69:04:65:
                    4c:ff:ea:98:a1:79:30:30:ab:06:ae:4e:17:94:f8:
                    14:0a:1e:7b:2f:19:19:06:10:c2:e6:40:7f:22:bf:
                    7a:b6:51:e0:56:1c:2c:cb:c0:1f:5d:8c:bc:53:8d:
                    b4:81:4f:4b:de:5f:9c:cf:36:6f:98:5d:e2:e1:65:
                    08:4b:a1:fe:49:ad:bc:6d:4b:7c:e4:09:59:e1:d1:
                    2c:31:4f:62:6b:5b:39:62:b7:18:28:61:4c:72:ff:
                    f7:24:b6:aa:31:a0:59:a1:eb:c2:89:8f:2c:b8:ba:
                    d0:6b:84:8c:fc:5b:7d:34:c4:82:d6:19:41:43:2d:
                    27:c5:f0:15:91:50:2d:59:25:e1:1d:ec:bf:08:f3:
                    c8:91:57:e0:80:01:ca:32:c3:6b:4d:29:05:50:4d:
                    36:48:0f:16:10:83:5b:0c:79:13:a1:a0:bd:14:60:
                    e8:0a:c0:3f:e1:2c:6f:30:ad:67:95:f3:d5:06:b5:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:67:FE:F6:57:A8:F5:B2:13:5C:E3:AC:1D:DA:27:9A:2D:C7:34:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64843a99-637f-3b90-b32c-77f6cdcea810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.238.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:40:b5:22:54:91:39:8f:3a:45:fa:82:0f:b3:90:63:60:7d:
         dc:33:d5:85:28:3c:3c:e1:87:bc:eb:07:e7:49:53:15:ff:69:
         f9:44:35:1f:dd:e8:36:d8:4b:7c:94:ee:8b:0b:b8:81:e9:9a:
         33:3f:c4:aa:82:ba:70:92:5b:cd:c0:94:8f:37:4e:1a:48:16:
         4a:c5:fc:e6:cd:b9:fe:6c:39:0f:bb:f2:d0:b4:5e:f0:0e:0b:
         53:3f:d2:65:7b:51:2a:d0:94:9e:a3:1f:72:75:4e:63:42:cf:
         53:d1:db:ce:84:ac:0c:d0:dd:d6:2e:ce:0b:42:9f:ae:6b:e7:
         12:4d:3f:de:84:c8:27:d2:13:f6:ed:00:95:00:e0:33:e9:75:
         5c:5d:44:4f:b5:a4:eb:d7:01:cc:20:02:e9:8d:32:ea:9b:c2:
         af:9e:01:49:03:00:ea:ad:3a:16:e5:d2:9a:de:fc:40:9a:b2:
         57:8c:28:f9:05:c5:2b:9d:21:40:f4:22:62:3d:f0:ee:ae:98:
         aa:d0:50:fa:f5:d7:b2:06:52:a2:f9:12:9b:e8:3b:c6:e1:da:
         4b:3b:de:d5:4f:86:b5:47:69:01:fb:e4:b4:11:99:8f:c8:a5:
         0d:ed:01:ab:b4:7f:a6:3d:cc:9b:b2:78:94:9e:70:f9:6a:54:
         e0:b3:39:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:27 2024 by rpki-client on console-fra.rpki-client.org