Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8ad1a2a-df99-314b-a8e9-eb6994c3ce9f.roa
File:                     a8ad1a2a-df99-314b-a8e9-eb6994c3ce9f.roa (raw, json)
Hash identifier:          9Igj452y/4bHM3oZD7Wwaz56+NUh6oKgzF+OB9cyz/k=
Subject key identifier:   54:0C:A2:42:8C:4B:FD:71:A9:A0:CD:86:66:C2:BA:B2:CC:5B:52:1C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454903977EC6D661F33071CBA9
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8ad1a2a-df99-314b-a8e9-eb6994c3ce9f.roa
Signing time:             Thu 21 Mar 2024 21:27:19 +0000
ROA not before:           Thu 21 Mar 2024 21:27:19 +0000
ROA not after:            Wed 19 Jun 2024 21:27:19 +0000
asID:                     396982
IP address blocks:        35.225.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:03:97:7e:c6:d6:61:f3:30:71:cb:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:27:19 2024 GMT
            Not After : Jun 19 21:27:19 2024 GMT
        Subject: CN=15b71af3-1383-488d-8fc2-5afcabe1cc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:1b:b9:70:cb:47:2c:ba:e9:b2:64:cb:09:
                    35:e3:cd:f4:e9:74:ba:76:74:62:ae:7b:b6:dd:fc:
                    bd:a2:4c:9a:6b:f8:be:27:4e:a6:0e:fc:7c:d9:0f:
                    2f:6f:ee:01:48:97:8b:fe:46:a9:13:3c:4f:98:c6:
                    6f:da:92:46:59:dc:97:db:3b:dc:23:e7:ad:8f:3c:
                    60:ec:f8:bd:e5:8f:8c:f9:d8:ad:9a:95:ad:89:d4:
                    2c:f4:74:7f:e7:8a:cb:48:4e:8d:df:b4:48:37:13:
                    fc:65:18:e3:5c:7b:6b:b1:cc:82:19:e7:db:cf:6a:
                    30:00:84:30:f3:dc:fb:8b:fc:a4:58:86:88:50:46:
                    c4:1a:9f:af:3c:bf:33:12:9c:ef:74:9b:f9:db:8c:
                    d4:f7:fd:05:66:94:8b:29:79:93:a4:b3:bc:20:1a:
                    bd:2e:68:fa:b7:e0:cb:15:81:d6:7e:89:86:ea:41:
                    72:96:65:0e:0a:ae:16:30:0b:e7:81:1d:19:a5:be:
                    86:4f:3a:b8:2a:76:ad:ec:27:d6:d6:db:7d:16:71:
                    8d:c6:04:f6:af:0a:08:fd:fa:ea:a4:a5:1c:c9:88:
                    7c:56:e0:75:64:35:5a:39:c8:a8:3a:d7:2e:19:7b:
                    24:b3:f7:ff:3e:91:78:b5:bb:f3:ad:2c:30:92:10:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0C:A2:42:8C:4B:FD:71:A9:A0:CD:86:66:C2:BA:B2:CC:5B:52:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8ad1a2a-df99-314b-a8e9-eb6994c3ce9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.225.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a9:f5:c4:b8:de:b3:04:34:e7:0b:a3:91:b4:14:d1:73:b3:
         e8:fb:74:1b:4b:4e:de:23:b4:67:2c:07:52:90:00:6c:55:10:
         66:79:d2:4d:8f:4f:d7:69:a8:90:48:0d:0c:80:9f:7b:d3:f7:
         84:df:ce:e9:e2:38:e1:67:0c:fc:cc:f1:26:87:3c:43:f5:8d:
         02:4f:68:81:21:ac:ea:a7:9c:a5:2d:11:9b:bf:9a:54:fe:aa:
         d5:f4:9d:99:2f:74:19:de:69:c4:15:3b:31:1d:7a:1e:8a:99:
         e7:a5:1e:21:02:e2:26:5b:4f:9e:c9:a6:3a:b3:33:21:83:09:
         b9:be:bc:2d:13:ee:9c:f3:bb:cb:d7:43:3b:02:97:f0:29:8c:
         4e:4b:58:8c:87:42:55:c6:d4:4d:75:24:97:f1:56:d1:90:4f:
         30:bb:42:a8:65:af:02:79:c8:72:53:91:37:fc:e8:52:c9:f3:
         ad:53:29:f2:23:4c:88:56:3f:2a:91:41:c0:b5:cc:3e:11:ab:
         5b:59:43:cf:06:f0:3c:fc:d5:a5:08:df:cd:fb:65:14:48:f0:
         10:bb:0d:23:01:d2:35:d9:35:15:8e:fd:4e:e6:d5:6d:6f:ac:
         d0:2b:b5:25:9c:1f:fb:24:cd:43:b8:28:6e:57:7b:21:e8:a0:
         cc:be:28:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:57:58 2024 by rpki-client on console-ams.rpki-client.org