Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9821199a-cf59-39eb-a0da-da0764bb5342.roa
File:                     9821199a-cf59-39eb-a0da-da0764bb5342.roa (raw, json)
Hash identifier:          aC5nJ43JT2soOK1xfpQSIQBALaE94p6t/KFGKBas8MI=
Subject key identifier:   4E:FC:E6:93:02:DF:2E:73:5C:60:9F:7D:AE:9A:AB:4E:7E:89:F5:41
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490B139A3760C77A69A48780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9821199a-cf59-39eb-a0da-da0764bb5342.roa
Signing time:             Thu 21 Mar 2024 21:42:24 +0000
ROA not before:           Thu 21 Mar 2024 21:42:24 +0000
ROA not after:            Wed 19 Jun 2024 21:42:24 +0000
asID:                     396982
IP address blocks:        35.235.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0b:13:9a:37:60:c7:7a:69:a4:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:42:24 2024 GMT
            Not After : Jun 19 21:42:24 2024 GMT
        Subject: CN=8330bb84-2aac-40c6-aff9-c06afeb280b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cb:b1:2f:71:09:fa:38:3b:f2:e0:8f:42:4f:
                    b5:72:e3:8a:7e:83:aa:2a:e9:24:01:6f:82:bb:69:
                    9a:5a:6e:43:48:d3:db:94:4d:56:71:cc:5b:4a:b3:
                    e5:b0:f2:cc:97:f4:e1:36:35:28:b8:3b:38:fe:05:
                    26:b2:dd:32:3f:ff:b4:53:b5:9c:39:fc:c7:fd:6a:
                    87:61:8c:33:8b:69:70:e9:70:23:25:1d:0d:c0:cc:
                    d7:83:2b:d3:fe:e9:37:50:a1:24:ac:89:36:47:b4:
                    ff:d7:03:f7:ae:86:30:8e:4f:41:e8:fd:a2:97:ab:
                    3c:7d:b9:09:ad:56:f7:60:b3:6c:bc:c9:a7:5a:9a:
                    c6:08:6f:7c:b6:71:73:33:4b:0c:29:1f:71:9f:dd:
                    67:cb:16:a2:ec:45:4d:18:2d:f9:95:3a:be:3f:d2:
                    74:2d:5a:65:3b:75:56:a7:01:39:4b:86:0a:ba:7f:
                    c3:dd:82:bf:30:d6:28:ea:3d:08:60:74:b8:66:d4:
                    c6:8c:74:1f:23:54:6f:78:85:c3:ee:7b:eb:da:4e:
                    da:df:2e:32:1b:3b:87:8d:a4:05:33:63:17:28:97:
                    3e:b3:5e:36:52:1a:ac:e5:e1:37:20:8f:1d:53:9c:
                    5b:75:66:23:21:b3:26:df:35:b6:e3:43:ca:89:36:
                    44:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FC:E6:93:02:DF:2E:73:5C:60:9F:7D:AE:9A:AB:4E:7E:89:F5:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9821199a-cf59-39eb-a0da-da0764bb5342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.235.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:45:bf:86:b1:51:c6:a0:26:67:04:53:05:ae:27:77:88:d5:
         d2:da:63:c0:10:88:41:0e:c7:cd:d5:8f:4b:fc:d0:74:e9:a2:
         37:d4:bc:b3:b5:0e:af:59:f3:4f:e6:5c:54:bb:54:8a:fa:4d:
         b1:62:ce:1b:7d:6c:74:58:c0:69:45:f1:52:44:a2:5b:a5:4c:
         70:5f:78:4e:7d:8b:fe:8e:a1:13:ff:c6:d1:0e:ff:70:d0:7e:
         db:74:12:f1:45:25:d0:4b:f2:58:ad:05:a4:e3:08:c0:c6:30:
         8c:e2:51:5f:67:a9:5a:49:e0:72:fa:b8:52:60:cb:70:1f:02:
         e3:47:b8:fc:8a:9f:b2:14:26:47:4a:3c:b0:be:e8:89:9d:fe:
         db:04:6e:84:cf:84:11:10:a7:e1:8b:87:04:a4:2b:b8:33:4f:
         d7:11:42:2e:fa:5d:41:59:3a:48:5a:b8:37:27:cb:a1:de:43:
         82:1e:c1:a9:a3:cb:ed:d5:eb:2f:3c:81:b3:42:3d:2f:d7:b2:
         79:1a:df:3b:47:dc:68:a1:a2:15:31:bb:a5:4f:74:f7:d6:24:
         77:97:e0:5b:9f:b1:1d:a0:0a:2b:4f:ee:3e:15:84:9a:a7:1e:
         e2:4d:cf:39:64:92:20:23:bb:4b:dc:9a:42:27:a6:43:5a:08:
         7b:31:97:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:49:39 2024 by rpki-client on console-ams.rpki-client.org