Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/753a026b-12a7-38da-b975-57a4db1f16d6.roa
File:                     753a026b-12a7-38da-b975-57a4db1f16d6.roa (raw, json)
Hash identifier:          bdwGIz4gsvL9RIc3f0ZHnWv0Z78JF2G4SFTa/cZYlXU=
Subject key identifier:   08:F6:DE:CE:72:52:CA:51:19:9A:CF:A5:FD:CB:2C:91:6B:E3:06:9D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F05BD10E301456B9372AE00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/753a026b-12a7-38da-b975-57a4db1f16d6.roa
Signing time:             Fri 29 Mar 2024 18:39:26 +0000
ROA not before:           Fri 29 Mar 2024 18:39:26 +0000
ROA not after:            Thu 27 Jun 2024 18:39:26 +0000
asID:                     396982
IP address blocks:        35.243.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:05:bd:10:e3:01:45:6b:93:72:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:39:26 2024 GMT
            Not After : Jun 27 18:39:26 2024 GMT
        Subject: CN=67bae7ea-d2f2-4fea-8834-27ca4a4b6313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e1:95:5f:84:78:0f:cb:ae:a6:d0:9b:e1:1b:
                    8a:2e:5c:cc:0a:28:3a:e4:d7:b7:c9:a8:85:55:c5:
                    65:9e:d7:3f:17:eb:f7:ce:94:0e:ab:2a:5e:dd:71:
                    98:f4:f9:79:a6:39:ba:cb:2b:1e:96:18:e9:9b:49:
                    0b:e0:32:4b:e5:da:7d:22:f1:fc:33:ef:47:99:0d:
                    d0:bb:9d:10:45:dc:da:17:bd:b6:26:fd:d2:1a:35:
                    5e:0f:3f:23:71:6e:1b:22:52:b9:89:67:dd:a7:d4:
                    3b:0f:5f:aa:dd:f6:92:2d:7d:fd:e3:e4:06:40:1e:
                    40:80:5f:2e:37:93:84:32:7b:bc:7f:d7:32:96:9c:
                    64:fc:be:ae:56:09:b7:23:b2:47:1d:46:57:cc:2c:
                    ba:ca:67:ae:4c:36:d6:70:c8:22:15:93:2f:98:4a:
                    ad:56:55:6a:0f:61:9a:36:32:1e:1b:72:94:c2:5e:
                    53:08:34:b0:7b:a0:a2:cb:70:1a:90:dc:8f:cc:77:
                    92:fb:51:81:e5:21:64:11:dc:a3:14:13:05:18:0b:
                    29:7f:a8:1e:8a:4b:c7:e0:26:77:4f:d4:3f:3a:10:
                    1d:50:87:ca:f7:0d:33:0d:d0:bb:0b:c2:be:2c:86:
                    f9:bb:38:18:d0:19:98:84:74:6f:ef:65:03:58:06:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F6:DE:CE:72:52:CA:51:19:9A:CF:A5:FD:CB:2C:91:6B:E3:06:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/753a026b-12a7-38da-b975-57a4db1f16d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.243.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:86:7c:1a:89:49:63:8e:ec:d4:3c:09:c7:2f:79:d1:d1:03:
         07:4c:1f:48:08:eb:8e:fd:10:93:57:24:9c:0e:8a:9c:f7:82:
         14:25:8d:b9:74:9c:ae:0c:23:ad:c4:7e:cb:74:48:85:dd:1f:
         4d:d8:3c:f4:f0:8a:a3:d4:01:33:3c:86:ba:a1:0f:74:92:6b:
         ce:40:6e:1b:df:82:fd:62:d5:11:b3:ed:39:78:43:69:be:19:
         a0:96:15:64:9c:64:47:35:43:e4:38:93:5d:31:b8:49:57:5c:
         8c:e8:c9:b8:fd:f2:30:11:6c:3e:93:73:12:f2:c8:bf:05:09:
         ad:1a:cd:fb:7c:6a:e2:67:64:69:c6:9a:01:54:f4:2d:3b:12:
         18:f3:f9:c9:e8:41:73:35:d8:bb:96:a3:3f:1a:ad:65:d7:ef:
         ff:6c:88:87:1b:1e:21:9b:02:5d:17:16:64:de:b0:dc:55:be:
         24:9c:a3:ee:47:3b:61:b4:d4:08:69:ea:c8:d3:c1:1e:35:bf:
         a5:ef:1a:b9:11:03:35:28:59:f0:f9:39:55:a9:9b:7d:bb:11:
         be:9d:86:3f:54:e5:f9:95:ce:46:35:5c:51:c7:fb:81:ec:92:
         24:5b:69:ff:cc:bb:46:ae:67:e1:30:6d:44:74:fb:96:82:8b:
         83:95:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:57:43 2024 by rpki-client on console-ams.rpki-client.org