Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd3bd6fc-6b22-3f16-a20c-a3e909d1f2fa.roa
File:                     bd3bd6fc-6b22-3f16-a20c-a3e909d1f2fa.roa (raw, json)
Hash identifier:          AAVD+32n9zDBL63lpCkjhjMB7VS77qtglO5VGjmACpA=
Subject key identifier:   8F:39:AB:17:37:CB:D9:0C:1F:35:33:E8:AC:95:D3:42:9B:22:66:59
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490FCA58D72CEFE700243C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd3bd6fc-6b22-3f16-a20c-a3e909d1f2fa.roa
Signing time:             Thu 21 Mar 2024 21:51:54 +0000
ROA not before:           Thu 21 Mar 2024 21:51:54 +0000
ROA not after:            Wed 19 Jun 2024 21:51:54 +0000
asID:                     396982
IP address blocks:        35.226.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0f:ca:58:d7:2c:ef:e7:00:24:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:51:54 2024 GMT
            Not After : Jun 19 21:51:54 2024 GMT
        Subject: CN=3259ec75-d861-49a9-948f-e6413c3a86c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:23:1a:ac:10:47:07:07:16:8b:9b:0e:cc:0d:
                    ed:76:3f:e3:02:22:a0:a9:39:37:9a:c0:cb:9d:ea:
                    41:e1:4a:45:e6:4b:f2:f9:25:61:56:f4:f2:61:db:
                    da:7b:83:31:80:b9:f9:63:5b:7e:9d:86:37:23:65:
                    8f:3f:38:f6:98:9c:62:44:1c:31:03:b9:df:da:94:
                    5b:0a:2e:dd:49:dc:cd:f9:17:0d:b4:12:f6:d9:d8:
                    76:9c:ef:56:7e:03:57:45:55:01:7c:60:5a:e8:dd:
                    e3:26:0a:ac:a3:17:09:f5:35:ab:c5:59:2b:12:3f:
                    87:1c:11:51:1e:50:d7:77:bd:e6:d6:76:aa:f9:ba:
                    21:35:44:d1:ad:1c:7e:c9:22:9c:b5:12:23:ca:cb:
                    1f:51:4b:d2:fb:47:39:f5:14:97:13:ca:0d:03:ce:
                    2b:2b:8c:d8:f6:38:b3:08:5a:ce:69:8e:25:32:56:
                    9e:f3:7d:a1:15:f2:84:46:eb:40:82:65:c7:36:c2:
                    f0:76:10:2f:4e:00:48:e3:61:99:13:7f:ac:23:e8:
                    f8:d5:87:80:8f:7b:a1:e0:61:8d:d5:74:93:69:7b:
                    57:5f:29:86:9b:10:05:94:b6:fa:ad:3f:ce:a9:dd:
                    ea:cf:02:48:81:1b:dd:f3:f9:04:7d:2d:7b:9c:a7:
                    62:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:39:AB:17:37:CB:D9:0C:1F:35:33:E8:AC:95:D3:42:9B:22:66:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd3bd6fc-6b22-3f16-a20c-a3e909d1f2fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.226.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:5b:29:49:6e:b7:c0:1e:ff:73:1a:51:08:d4:3d:14:5f:4f:
         2f:eb:ff:da:32:71:29:ee:f1:ee:86:4d:0f:a3:34:99:95:61:
         ef:13:da:6e:cd:83:0c:59:3c:aa:6e:5b:ba:35:1a:66:1c:c4:
         19:5b:03:07:7c:df:f2:1c:44:43:c5:17:f4:aa:b7:5e:74:9f:
         e5:34:f0:10:7f:28:dc:97:c8:f5:75:6d:d3:c6:72:ac:b4:1e:
         42:90:20:13:c4:5c:29:23:69:f9:36:87:b3:b7:a2:84:c8:28:
         8f:3b:1f:a8:4d:c7:90:0b:40:c8:d0:03:0f:19:20:35:c9:9e:
         b5:06:ac:40:92:56:26:bf:6c:6c:b2:72:74:dd:c4:ee:fc:5d:
         f8:93:ba:ec:71:f1:5b:94:78:3a:93:2a:50:1e:68:30:09:3e:
         0b:5b:62:91:cc:5b:ce:57:16:d5:cd:13:e7:8b:6d:47:73:bb:
         6b:59:bd:e1:18:69:a8:60:ed:16:5b:34:3b:a2:62:28:2d:89:
         b5:5c:56:3b:1b:fd:d5:d9:eb:9c:48:d6:b9:a2:66:fa:24:a7:
         83:cf:38:5a:ed:36:81:62:f1:b2:01:77:3a:de:1f:5a:ec:bc:
         21:b3:74:7b:0c:9c:bb:12:df:f1:76:ea:0e:96:df:c9:39:f2:
         6e:83:1e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:00:06 2024 by rpki-client on console-fra.rpki-client.org