Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6bca7f75-e840-310c-bfd1-002c54fe7c55.roa
File:                     6bca7f75-e840-310c-bfd1-002c54fe7c55.roa (raw, json)
Hash identifier:          Qfhkf0aOLEFG8Pjc71xsX+1FTtaT8Zons2CQLgL7UB8=
Subject key identifier:   44:91:D7:7E:DB:52:BE:03:FE:2F:9A:F3:D1:C4:C3:24:CB:C7:C3:BE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F06BB7FF59965F16B7A6E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6bca7f75-e840-310c-bfd1-002c54fe7c55.roa
Signing time:             Fri 29 Mar 2024 18:41:26 +0000
ROA not before:           Fri 29 Mar 2024 18:41:26 +0000
ROA not after:            Thu 27 Jun 2024 18:41:26 +0000
asID:                     396982
IP address blocks:        35.220.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:06:bb:7f:f5:99:65:f1:6b:7a:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:41:26 2024 GMT
            Not After : Jun 27 18:41:26 2024 GMT
        Subject: CN=3dd502c1-ceff-4412-9a96-65ad93bae5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:10:b1:55:d0:7b:19:97:72:dd:cc:32:32:ce:
                    aa:c1:87:5b:fc:fb:ba:f9:dc:28:03:36:f0:e9:06:
                    eb:f5:90:62:93:21:e0:d7:00:aa:09:6d:8e:94:cf:
                    03:14:ab:7f:0a:32:c9:14:76:5e:a4:2d:91:8a:1d:
                    59:bd:1c:6d:d4:fd:89:a2:69:19:98:28:e7:8b:05:
                    02:0f:83:81:71:dc:66:10:8f:d0:5f:01:95:24:87:
                    6b:b1:d0:8d:bc:01:f4:49:7b:78:92:16:71:1a:ab:
                    3a:60:40:64:e2:1c:5e:9a:2e:2b:13:5b:f7:e7:6d:
                    ee:45:49:5a:fb:b1:2e:62:eb:dd:6d:85:a8:c8:2e:
                    43:1b:84:c4:a5:f2:9c:c7:bd:b0:e0:39:24:67:fe:
                    43:68:cd:ff:d5:a6:10:a2:f8:d2:35:88:d0:ba:2b:
                    d4:11:8b:e5:24:1d:4b:73:72:5f:76:59:63:a6:1f:
                    75:56:96:cf:c3:0f:6d:8d:8f:47:00:e2:04:84:5b:
                    03:1c:f6:09:ca:6e:4f:e2:dc:fe:fc:3a:58:88:19:
                    67:06:2b:ed:96:3f:59:70:7b:14:e3:fc:48:f4:c3:
                    47:45:c4:cb:db:e4:05:23:89:00:47:e8:02:50:8a:
                    7c:2b:fb:3c:b3:a2:31:ec:b6:e5:e4:23:0f:07:3a:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:91:D7:7E:DB:52:BE:03:FE:2F:9A:F3:D1:C4:C3:24:CB:C7:C3:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6bca7f75-e840-310c-bfd1-002c54fe7c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.220.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:43:8f:5c:10:6b:3f:a9:4a:e0:86:15:fa:7a:09:82:c3:f8:
         42:0b:3f:d9:84:e3:cf:37:08:34:be:f9:52:16:80:37:9f:fa:
         77:79:77:e4:d6:47:04:ec:ff:08:9c:52:4c:a8:68:c0:6a:75:
         76:38:c8:05:fb:8d:24:0f:d0:db:8f:a6:c7:45:0f:85:d6:88:
         77:a1:5c:c6:8c:f4:67:32:09:8d:40:14:60:49:e7:02:79:cb:
         b4:6a:68:d7:ac:0b:32:4b:eb:fb:ad:ac:1f:cf:b0:b1:74:95:
         eb:7a:4d:0d:70:3a:96:fa:e2:24:0c:94:06:f8:b8:0a:8f:0f:
         2f:8e:4b:a6:5c:59:21:e5:d0:ab:3d:8c:52:fa:fc:7f:38:eb:
         c8:85:36:24:de:61:c6:5c:6b:b0:c9:2b:e8:3a:4b:6e:03:60:
         b3:18:fe:a6:a4:89:ad:61:4a:18:75:75:a1:4c:23:ab:2c:d1:
         d8:ec:c7:bc:fb:26:c5:92:c4:46:17:f5:fc:b7:25:39:5a:61:
         45:1d:db:f8:45:1b:45:39:53:87:41:27:59:ed:03:b1:41:89:
         89:a8:26:27:eb:2e:eb:15:1d:07:f1:75:24:2f:f3:21:58:e2:
         f5:4f:c5:f8:35:17:fb:f8:62:ed:b0:96:6c:f5:a7:e8:b7:5f:
         f4:60:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:59:30 2024 by rpki-client on console-fra.rpki-client.org