Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/968895c3-6205-30ad-9bba-64e9409bb93d.roa
File:                     968895c3-6205-30ad-9bba-64e9409bb93d.roa (raw, json)
Hash identifier:          lIBnLhnOJJu7r4mEl4vrGDMUiUr5Bit7GWSzaxpNtAQ=
Subject key identifier:   A9:BF:F3:31:75:0A:09:95:2E:B6:18:0A:84:92:E9:B8:9B:44:C2:04
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F012FD3FE54F34757E2BB40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/968895c3-6205-30ad-9bba-64e9409bb93d.roa
Signing time:             Fri 29 Mar 2024 18:30:16 +0000
ROA not before:           Fri 29 Mar 2024 18:30:16 +0000
ROA not after:            Thu 27 Jun 2024 18:30:16 +0000
asID:                     396982
IP address blocks:        35.189.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:01:2f:d3:fe:54:f3:47:57:e2:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:30:16 2024 GMT
            Not After : Jun 27 18:30:16 2024 GMT
        Subject: CN=f21bd6f4-d6df-47cd-a5ab-eeb3e31f9f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:02:c8:25:28:21:8e:14:e3:94:f1:7f:fd:
                    41:3b:fc:e8:08:71:c1:1d:5f:f4:ce:68:2d:5f:a7:
                    01:48:5d:dc:02:3b:03:eb:ae:97:d7:b2:2f:86:71:
                    18:ce:1c:d2:1f:27:02:85:de:e6:5a:95:48:2c:e8:
                    7f:8f:5c:62:26:6f:e6:9f:61:0a:d9:92:b7:d9:35:
                    96:9c:ce:d7:40:84:28:36:99:32:0d:be:4a:92:32:
                    97:2f:f2:09:15:84:cb:55:57:06:4e:3a:ee:71:96:
                    38:e0:b8:68:02:31:7b:b6:98:dd:b6:0f:32:20:d4:
                    98:df:96:e9:7c:ce:42:35:3f:db:e1:17:2c:f2:89:
                    a4:04:8b:cf:26:ec:af:34:c1:22:d3:cc:a0:2c:c0:
                    8e:78:4b:fd:61:08:c3:1b:58:55:83:72:a0:f8:54:
                    a2:af:70:1d:24:6c:09:e1:c3:67:93:7d:81:eb:1e:
                    6d:f9:7f:10:1e:a2:d9:53:c1:4a:b8:c0:78:34:ab:
                    d8:ea:6c:82:68:8f:05:d5:a0:67:cc:6b:ac:56:5c:
                    8a:e4:bf:c3:96:4c:d1:bf:b0:5e:cd:06:3d:86:01:
                    99:22:0c:31:89:bc:96:88:5e:95:59:23:ae:2f:ab:
                    42:2b:71:e7:1f:43:44:71:8c:9b:ec:05:db:3a:f2:
                    76:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BF:F3:31:75:0A:09:95:2E:B6:18:0A:84:92:E9:B8:9B:44:C2:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/968895c3-6205-30ad-9bba-64e9409bb93d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.189.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:2b:cb:a0:d8:99:7b:ef:26:92:97:1e:81:59:33:63:16:18:
         e6:44:b6:cf:aa:10:24:4d:c4:31:88:e5:ba:c3:64:61:9f:b9:
         78:77:2f:d9:02:52:77:1e:f6:5c:dd:ca:53:f0:e4:74:61:ab:
         87:40:d8:f6:b9:9f:53:74:96:7c:be:6d:04:79:9c:95:27:fa:
         52:d7:ff:e7:c6:d6:fb:f3:c9:9d:00:0f:58:c4:0d:6e:7a:af:
         59:0b:7d:75:8b:24:e0:a9:19:75:56:08:1c:27:83:6c:e0:36:
         c2:fb:a7:77:b4:d2:6f:55:f4:cd:85:2a:ca:ed:ed:cb:c7:19:
         04:23:13:d6:a7:81:b8:19:8e:e3:b4:76:87:fd:d9:9a:e4:e9:
         5a:fc:47:6a:16:ff:a8:92:ab:21:32:ca:64:7e:f4:a7:13:09:
         09:42:00:44:d8:11:71:92:01:5f:f7:c0:6a:7d:18:dd:59:0f:
         a0:a3:11:fe:40:eb:97:8d:f5:42:c9:ea:b2:36:04:5c:40:28:
         e2:58:9f:fa:1f:e5:04:77:38:06:69:58:38:77:91:85:b4:96:
         f2:3c:f8:d1:c3:b2:4d:99:7d:31:3b:a8:b5:30:47:bf:76:ef:
         62:da:46:d0:2d:78:73:c7:91:cd:07:6b:dc:a7:f1:1c:cd:93:
         44:f1:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:57:52 2024 by rpki-client on console-ams.rpki-client.org