Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a58a067f-d86a-3e74-bc38-68bade88706a.roa
File:                     a58a067f-d86a-3e74-bc38-68bade88706a.roa (raw, json)
Hash identifier:          JJtn9xr9k04i+b7VySwe71P1P+8LQmy7UVnZfE2Zxwg=
Subject key identifier:   88:12:63:95:6C:73:02:E8:39:CE:D8:FC:C1:F1:80:1A:FA:60:D1:F6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FE1AED2274F95BAC16FD00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a58a067f-d86a-3e74-bc38-68bade88706a.roa
Signing time:             Thu 21 Mar 2024 21:16:16 +0000
ROA not before:           Thu 21 Mar 2024 21:16:16 +0000
ROA not after:            Wed 19 Jun 2024 21:16:16 +0000
asID:                     396982
IP address blocks:        35.201.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fe:1a:ed:22:74:f9:5b:ac:16:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:16:16 2024 GMT
            Not After : Jun 19 21:16:16 2024 GMT
        Subject: CN=cfb3a065-17fa-4c4b-afa2-c6436846daab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:c7:b5:8d:35:0d:9e:db:3d:04:c5:f5:26:
                    2f:0a:d2:17:27:ca:4a:a1:0d:98:97:23:bc:78:27:
                    eb:b7:92:ce:65:d9:b1:62:0c:33:a7:bc:1c:d9:99:
                    52:dc:22:9f:11:e8:eb:75:5b:ff:2a:d3:eb:f2:15:
                    d5:7a:27:e0:1b:97:b4:bc:63:12:81:89:91:b7:fe:
                    d0:0f:46:4b:23:89:4c:12:5e:8d:d1:db:7a:5b:29:
                    27:7f:e3:89:9f:80:1f:f7:ee:2e:71:58:cc:95:c3:
                    5d:ac:32:80:3e:7e:e8:c0:a9:94:07:02:f0:fa:7f:
                    77:96:ad:8a:e8:1a:76:54:49:b7:2d:92:86:33:5c:
                    15:ab:af:55:13:8b:32:28:96:c3:52:69:55:25:ce:
                    5b:48:d6:37:c5:3e:a7:79:b3:9b:27:cd:d2:37:d4:
                    f3:57:c5:c9:f4:67:fc:ad:af:8f:85:19:ad:a1:e6:
                    fa:d4:bf:06:ca:71:fe:00:de:ad:2f:94:d6:d6:14:
                    2c:6d:d4:73:30:90:d7:98:95:09:6f:ba:25:dd:16:
                    18:bb:e1:17:cb:5f:7e:3b:ba:cf:de:53:89:68:a9:
                    47:b1:12:8a:99:04:4e:59:1e:78:66:39:1d:e2:5b:
                    87:12:e7:be:4b:a5:bf:75:c9:9f:02:b5:55:30:79:
                    a8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:12:63:95:6C:73:02:E8:39:CE:D8:FC:C1:F1:80:1A:FA:60:D1:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a58a067f-d86a-3e74-bc38-68bade88706a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.201.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3a:6f:5b:f1:e2:8c:2a:bf:e9:ab:2c:19:a2:0b:df:93:8c:
         78:6d:a0:5b:41:97:9e:50:17:31:e6:8b:d4:9a:02:82:8d:3d:
         52:67:94:df:93:b8:73:b3:92:8f:54:cb:60:2a:ff:56:76:ca:
         a4:28:1c:69:7e:f9:48:a5:a3:ce:42:0f:fb:3f:05:85:64:33:
         f1:86:61:e9:36:90:f4:47:8e:ab:bb:3d:27:d4:4c:40:ac:92:
         72:5a:2e:54:f3:5c:69:9e:eb:e3:33:f9:00:da:e9:b9:db:e2:
         d9:d6:8c:2f:5d:5e:77:7e:c6:d7:d6:71:af:bf:d8:87:61:06:
         eb:12:de:9b:6d:09:97:32:25:89:e3:a2:d5:4b:c3:ec:3d:1a:
         5c:c0:fe:7e:f6:3f:89:ff:81:2f:c3:64:4c:2c:e5:25:0f:a8:
         40:fc:cc:ec:d7:bf:c7:b3:09:29:89:32:8c:db:d8:3c:0a:56:
         49:ba:d0:a8:c6:48:c9:4d:70:10:9e:51:a5:2c:dd:c3:d7:6b:
         7f:a8:26:89:74:b7:3d:cc:f6:f3:27:d5:6e:57:36:2d:3a:eb:
         da:b7:26:7d:87:95:4e:7d:bf:58:84:a2:81:ca:c3:5c:7e:35:
         60:be:8f:44:bf:18:44:ad:63:58:b3:4d:2a:eb:a3:5c:ff:86:
         b0:b0:f2:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/hrtInT5W6wW/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxMTYxNloXDTI0MDYxOTIxMTYxNlowLzEtMCsGA1UEAxMk
Y2ZiM2EwNjUtMTdmYS00YzRiLWFmYTItYzY0MzY4NDZkYWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc7HtY01DZ7bPQTF9SYvCtIXJ8pKoQ2YlyO8
eCfrt5LOZdmxYgwzp7wc2ZlS3CKfEejrdVv/KtPr8hXVeifgG5e0vGMSgYmRt/7Q
D0ZLI4lMEl6N0dt6Wyknf+OJn4Af9+4ucVjMlcNdrDKAPn7owKmUBwLw+n93lq2K
6Bp2VEm3LZKGM1wVq69VE4syKJbDUmlVJc5bSNY3xT6nebObJ83SN9TzV8XJ9Gf8
ra+PhRmtoeb61L8GynH+AN6tL5TW1hQsbdRzMJDXmJUJb7ol3RYYu+EXy19+O7rP
3lOJaKlHsRKKmQROWR54Zjkd4luHEue+S6W/dcmfArVVMHmo0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIgSY5VscwLoOc7Y/MHxgBr6YNH2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTU4YTA2N2YtZDg2YS0z
ZTc0LWJjMzgtNjhiYWRlODg3MDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8klMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEU6b1vx4owqv+mrLBmiC9+TjHhtoFtBl55QFzHmi9SaAoKNPVJnlN+T
uHOzko9Uy2Aq/1Z2yqQoHGl++Uilo85CD/s/BYVkM/GGYek2kPRHjqu7PSfUTECs
knJaLlTzXGme6+Mz+QDa6bnb4tnWjC9dXnd+xtfWca+/2IdhBusS3pttCZcyJYnj
otVLw+w9GlzA/n72P4n/gS/DZEws5SUPqED8zOzXv8ezCSmJMozb2DwKVkm60KjG
SMlNcBCeUaUs3cPXa3+oJol0tz3M9vMn1W5XNi0669q3Jn2HlU59v1iEooHKw1x+
NWC+j0S/GEStY1izTSrro1z/hrCw8mQ=
-----END CERTIFICATE-----
Generated at Sun May 5 15:49:46 2024 by rpki-client on console-ams.rpki-client.org