Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d014fc-32be-31c7-8253-b63b7ee849c6.roa
File:                     d2d014fc-32be-31c7-8253-b63b7ee849c6.roa (raw, json)
Hash identifier:          4SHpLvq/7U3eBdpPwYsVN2AmJafHoOHpkPsgDvMsNi4=
Subject key identifier:   FC:86:22:BB:63:F5:62:E2:90:A3:FA:2F:DF:8F:8A:9C:91:7C:55:F1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FD296D3872E3E2C595EB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d014fc-32be-31c7-8253-b63b7ee849c6.roa
Signing time:             Thu 21 Mar 2024 21:14:22 +0000
ROA not before:           Thu 21 Mar 2024 21:14:22 +0000
ROA not after:            Wed 19 Jun 2024 21:14:22 +0000
asID:                     396982
IP address blocks:        35.196.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fd:29:6d:38:72:e3:e2:c5:95:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:14:22 2024 GMT
            Not After : Jun 19 21:14:22 2024 GMT
        Subject: CN=aeda983b-6f18-49a4-8df8-42de7f983c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7e:d7:50:76:e6:e0:6b:72:81:8f:43:e5:3a:
                    eb:34:81:b9:0c:0e:dd:bc:04:51:68:c0:87:66:92:
                    39:49:be:03:4a:7a:97:06:21:b4:bf:fa:21:53:2b:
                    a8:25:5c:f1:fa:85:35:67:4b:cf:8d:07:3b:bd:56:
                    0c:a5:41:fd:5c:41:54:30:78:d7:a9:27:58:56:1f:
                    c6:fc:17:ab:46:18:83:5c:9d:b1:b0:76:68:c4:ed:
                    7b:3a:fd:91:87:a6:f8:99:97:fc:9a:9c:2f:71:d9:
                    c1:0b:8c:f9:ab:0b:ea:14:78:25:d6:56:9b:c9:7a:
                    a9:b6:f5:54:b3:bc:b7:ef:0f:37:26:97:f2:81:7b:
                    91:b5:e4:57:91:c4:b9:ca:47:2a:3e:84:ad:13:7d:
                    0f:ce:c7:b3:67:81:fc:5f:da:ba:a2:4a:0d:43:0a:
                    0a:78:bc:01:25:00:94:9d:49:27:11:0e:74:7e:c7:
                    1b:a5:af:c2:ab:21:d3:9b:d0:24:93:2b:1d:c4:6d:
                    24:25:ff:cd:a3:a5:82:20:7f:e8:14:3c:6b:b6:4e:
                    49:9f:eb:0e:4f:38:07:04:66:e3:4f:c1:2e:11:49:
                    af:59:fb:d8:6f:46:f1:7f:6b:4f:57:76:29:69:f4:
                    45:f5:1d:17:af:61:9a:f6:fc:88:a6:15:a9:d3:db:
                    b5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:86:22:BB:63:F5:62:E2:90:A3:FA:2F:DF:8F:8A:9C:91:7C:55:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d014fc-32be-31c7-8253-b63b7ee849c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.196.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:88:b4:ad:7e:e2:a2:a0:04:46:ff:61:4b:26:05:42:97:e3:
         3f:75:aa:a8:48:d4:c8:ce:f9:54:a8:d8:0d:52:d6:85:8d:44:
         ef:f7:08:15:fe:bb:52:26:04:91:50:de:0f:82:58:8e:bc:25:
         4b:eb:3f:8c:af:84:4e:72:48:b6:75:c3:b0:aa:74:f3:8a:84:
         ee:02:7b:44:8d:c0:ed:c0:a1:c5:f4:4f:6e:c1:fa:05:5d:97:
         ae:a3:cd:e9:15:74:32:42:2b:d5:ce:05:d0:94:49:4c:02:1e:
         18:d8:58:9d:70:7d:66:6b:96:fe:ab:dd:50:6f:b3:70:8c:cd:
         6f:00:aa:bb:c7:db:6f:81:49:34:01:73:5e:e7:c3:3e:e6:63:
         d9:ca:20:9f:37:07:d0:79:bd:07:9c:70:ba:66:81:68:1a:c4:
         4f:b2:e2:54:1d:b8:53:80:d1:78:d5:29:29:49:52:4a:4f:65:
         95:b7:93:94:f4:73:75:dc:52:89:3b:10:8e:d7:aa:2a:06:03:
         a2:50:7a:77:66:75:09:3a:b5:2b:a3:06:ce:a2:d1:ef:2f:de:
         4d:ad:42:ce:eb:ec:91:08:e8:86:4a:12:eb:0c:b7:28:af:28:
         ab:d5:9d:e4:8d:ce:b0:c8:f6:1b:11:21:bf:b8:9e:a0:95:99:
         55:89:94:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:00:16 2024 by rpki-client on console-fra.rpki-client.org