Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa
File:                     d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa (raw, json)
Hash identifier:          gVABkQh+xFGRPgyEwOEdWxRc/FZQHzYUE2V8WuPIkb8=
Subject key identifier:   2F:01:8B:3C:E3:78:81:06:E1:3E:11:4F:5C:56:6E:DB:A0:9E:D2:0C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FCF47D3B907A110AA62D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa
Signing time:             Thu 21 Mar 2024 21:13:57 +0000
ROA not before:           Thu 21 Mar 2024 21:13:57 +0000
ROA not after:            Wed 19 Jun 2024 21:13:57 +0000
asID:                     396982
IP address blocks:        35.240.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fc:f4:7d:3b:90:7a:11:0a:a6:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:13:57 2024 GMT
            Not After : Jun 19 21:13:57 2024 GMT
        Subject: CN=429f5b4b-fa72-4051-b6a2-9c0cf23090e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b8:13:aa:53:71:db:66:c7:09:72:41:96:6b:
                    e5:04:5f:a6:d7:64:03:d4:f6:42:66:ba:83:b1:15:
                    9f:c3:b3:fb:ad:13:82:0d:c3:92:b3:bf:e3:d2:a0:
                    ae:d5:0b:ff:55:23:94:86:0a:b0:47:d3:0c:0c:7a:
                    6a:00:94:cb:25:11:27:f8:87:96:02:36:36:17:d1:
                    36:f8:0b:0c:8c:db:89:2e:84:33:02:96:b8:a2:7b:
                    47:fd:4b:9c:81:ff:1d:0a:66:59:b8:c9:75:fe:bb:
                    fe:29:ab:45:a7:64:71:99:23:6d:4d:c5:b4:12:58:
                    1f:62:0d:de:34:97:c6:f1:90:fd:0e:33:be:7a:9e:
                    ec:ac:13:ce:8c:26:19:20:85:09:13:af:8b:a6:01:
                    d1:03:fa:d1:c1:0e:d4:36:17:98:4e:94:6e:d6:de:
                    ee:76:f2:6e:a0:20:75:64:bf:f7:74:71:c5:88:22:
                    7d:06:a3:fa:57:c7:d7:52:db:01:d2:47:e9:83:16:
                    90:97:cb:fa:54:e6:92:af:84:49:3e:0f:89:53:07:
                    f9:b6:df:cc:f7:c3:07:69:51:38:c5:98:8c:94:2d:
                    db:d7:83:7f:21:57:e8:ed:23:1f:98:1e:da:74:47:
                    fc:b1:cf:d2:1e:99:e8:35:2c:f9:3f:ae:c8:bb:25:
                    5f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:01:8B:3C:E3:78:81:06:E1:3E:11:4F:5C:56:6E:DB:A0:9E:D2:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.240.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e5:24:67:8d:a0:c0:f3:7c:3e:a4:a1:26:81:a3:05:07:71:
         d0:3d:7b:a7:0c:69:62:cc:fe:7c:ab:ad:3c:b1:55:ea:27:d4:
         b3:0f:0a:cc:6f:6b:40:a3:90:9f:5b:32:67:d5:7e:0a:1f:39:
         90:80:09:45:92:b4:71:28:f1:33:b0:73:74:dd:c7:9b:4f:3a:
         17:7b:ca:16:be:f8:48:0b:59:e6:dc:0a:8f:f7:56:e3:c4:92:
         1b:7f:0d:de:18:3a:4f:23:95:69:c5:4b:2d:7a:d2:1e:dc:6d:
         3d:a5:c6:5e:17:01:11:d8:c4:4d:80:fb:48:e4:b8:cd:81:80:
         0e:73:2b:83:dd:62:b2:d2:32:0f:43:0c:81:27:61:33:6c:d8:
         be:fb:d9:96:37:a6:bd:eb:e3:1c:a7:3d:27:fc:89:3c:6b:b4:
         f0:22:2f:5d:1f:e2:ea:06:85:66:74:a6:56:93:64:45:16:74:
         78:91:f0:5c:7c:b6:4c:57:c8:4a:ae:48:f4:1a:57:27:93:68:
         b7:19:04:c9:2f:74:59:9b:bb:44:2c:de:1d:dc:44:35:b8:69:
         d0:29:65:1d:23:7f:49:c6:ff:e6:81:97:e2:b8:75:ce:33:7c:
         70:fd:2e:c0:a0:c1:06:62:d2:15:40:9e:d9:17:e9:a8:d7:5b:
         a5:6b:2f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:13 2024 by rpki-client on console-ams.rpki-client.org