Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa
File:                     c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa (raw, json)
Hash identifier:          2acAZjPUtLLoX+4Ik250RxXAjdwUo+Xn3VQWVXn8KCQ=
Subject key identifier:   15:BC:60:C9:C9:F4:02:F6:55:8C:36:A4:58:7F:D1:A1:EB:C8:FE:6D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490FCC7BD587AF2A993F9400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa
Signing time:             Thu 21 Mar 2024 21:51:55 +0000
ROA not before:           Thu 21 Mar 2024 21:51:55 +0000
ROA not after:            Wed 19 Jun 2024 21:51:55 +0000
asID:                     396982
IP address blocks:        35.229.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0f:cc:7b:d5:87:af:2a:99:3f:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:51:55 2024 GMT
            Not After : Jun 19 21:51:55 2024 GMT
        Subject: CN=79aa5818-cf15-4510-836c-9feafbedd9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7c:bb:cb:99:80:10:67:2c:2f:37:5f:30:29:
                    f1:cc:56:2f:51:93:05:8d:67:a9:b5:de:a7:3e:72:
                    80:b0:9d:fe:ae:d9:be:99:22:67:aa:57:2c:d6:9a:
                    53:41:1c:a5:99:32:52:6b:d9:81:16:aa:5b:50:00:
                    93:46:0c:11:35:2c:f6:6f:08:57:c8:84:ff:c8:36:
                    ca:8c:00:81:9e:6a:8c:02:0e:e1:91:a5:b5:b9:bc:
                    f9:71:76:f8:bf:f5:eb:39:a2:38:30:8f:5e:b1:13:
                    bd:9b:9a:2f:5f:18:14:a0:8c:5e:22:1d:60:79:71:
                    53:0e:2d:24:37:40:55:f2:7b:28:95:cf:84:15:d8:
                    8f:50:fb:fc:1b:d8:6d:c2:00:b8:1b:2f:e6:d0:1c:
                    97:50:02:9f:b1:f2:cf:59:eb:a0:97:21:a1:46:f0:
                    b1:2a:9f:77:b2:1c:2b:28:38:8a:99:43:cb:8a:46:
                    aa:49:ae:48:88:a9:6a:8e:7b:e5:5b:02:f9:91:74:
                    56:13:88:51:54:25:60:ae:8c:74:93:8b:88:36:24:
                    ad:1d:7a:75:41:c7:97:73:3b:52:b7:49:3e:9e:31:
                    c6:9e:a2:4c:1e:fd:91:86:a6:a1:f7:f8:7e:54:48:
                    1c:25:3a:cf:37:fa:03:91:63:b9:15:d7:80:6b:49:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BC:60:C9:C9:F4:02:F6:55:8C:36:A4:58:7F:D1:A1:EB:C8:FE:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1cb40ed-bbff-302a-ac29-f0a4a1a58ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.229.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:24:45:c9:fb:e5:ea:14:30:01:65:40:63:5b:64:80:d7:02:
         64:19:ce:18:a0:90:f6:81:8c:85:4b:65:ea:89:15:43:2d:2d:
         02:ce:d6:39:4b:2c:ca:83:20:f4:ed:d1:6b:dd:a0:77:be:9d:
         a2:b4:d0:88:87:fc:ac:5e:58:a5:b0:09:8e:ff:ab:80:cd:3d:
         34:c5:7c:e3:06:e7:5e:9d:2d:f8:94:7f:c0:84:a8:c5:79:d5:
         0a:fe:44:5c:f8:8f:c6:40:cf:e6:9b:93:39:f4:c2:66:65:ee:
         e4:d7:e4:af:80:32:75:7a:00:7b:8a:53:d9:ed:0c:05:8a:ed:
         0d:d5:3b:64:6d:81:bf:a8:68:1e:8d:c4:e7:0a:ab:24:f4:96:
         dc:d3:69:45:e4:70:0c:a3:8e:58:86:a0:7a:f4:7b:13:2a:bb:
         32:fc:01:b6:96:e8:a1:17:d0:58:20:ba:90:34:7e:61:85:3d:
         46:95:50:aa:5d:a5:e8:03:2d:b2:0f:c1:cf:c4:18:dc:d6:80:
         8f:c9:6f:17:a4:97:c2:7a:da:ef:84:43:81:df:aa:bb:b1:67:
         ee:45:08:7b:f2:95:5b:79:db:c8:cc:8b:43:ad:b8:58:4e:23:
         b0:0c:87:06:3a:63:4e:d9:fb:ff:b7:19:1c:c0:69:53:e6:91:
         56:b3:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:08 2024 by rpki-client on console-ams.rpki-client.org