Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3e60b64-921d-39b5-a187-60e30eb31ea7.roa
File:                     d3e60b64-921d-39b5-a187-60e30eb31ea7.roa (raw, json)
Hash identifier:          qZsNym1aTZCA8RV+jt9seFL648Inz9D0Xxc5CUJ4ioM=
Subject key identifier:   A2:EE:82:48:CF:FE:D2:73:29:4C:9A:AF:6A:2E:3C:82:A7:60:37:96
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858455F06AA45F8A4BF147DAEDF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3e60b64-921d-39b5-a187-60e30eb31ea7.roa
Signing time:             Fri 29 Mar 2024 18:41:18 +0000
ROA not before:           Fri 29 Mar 2024 18:41:18 +0000
ROA not after:            Thu 27 Jun 2024 18:41:18 +0000
asID:                     396982
IP address blocks:        35.198.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:06:aa:45:f8:a4:bf:14:7d:ae:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 29 18:41:18 2024 GMT
            Not After : Jun 27 18:41:18 2024 GMT
        Subject: CN=94643265-4516-4ae7-9146-48a81bd60103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dc:54:c7:87:8a:ed:ac:e9:38:2c:d1:ca:94:
                    b9:87:10:fc:53:a1:ed:8c:1a:03:86:0e:55:aa:6f:
                    d9:a6:46:83:95:49:db:b4:56:41:f8:16:35:63:1d:
                    d7:82:5a:d2:52:f8:5b:5e:5e:27:a7:ad:79:03:79:
                    9e:2f:be:67:c0:d8:17:84:a9:bf:83:36:85:3d:05:
                    35:10:2b:f9:04:18:5d:4e:aa:c0:c0:3d:0d:74:b8:
                    22:1d:23:cf:ae:33:65:20:12:f3:fa:10:38:77:4b:
                    49:ac:c8:69:28:48:ac:e2:90:06:0c:54:ca:63:a4:
                    30:c0:fc:61:7c:68:c5:37:52:c9:3f:07:06:1c:da:
                    7d:0b:c7:46:95:a4:26:92:3e:56:fc:2c:1b:f1:a0:
                    c2:2d:1a:79:b3:05:cf:86:65:43:28:68:df:cc:47:
                    de:c5:2a:7f:c9:13:c1:6c:d9:ad:6b:0e:f1:00:be:
                    2c:4e:bb:7c:6c:49:cd:64:63:a0:05:e6:5b:db:96:
                    46:7d:a7:32:b3:f1:73:73:f1:b4:82:b5:e7:06:04:
                    8e:3d:ca:9a:41:47:b8:71:ee:38:cc:5b:1e:6f:28:
                    23:2a:8d:67:3a:96:ac:3d:60:18:0e:11:b0:9c:0b:
                    3f:fe:20:60:a8:51:fc:3c:b8:5a:78:f1:10:ed:40:
                    e5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EE:82:48:CF:FE:D2:73:29:4C:9A:AF:6A:2E:3C:82:A7:60:37:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3e60b64-921d-39b5-a187-60e30eb31ea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.198.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e4:cf:5e:dd:37:00:5b:e0:1e:33:0d:4d:8a:47:6a:de:18:
         47:05:d5:5e:09:7b:e2:6d:5f:3f:20:38:57:78:49:09:af:aa:
         83:95:44:03:fc:ff:da:ee:75:bb:0f:de:fa:3b:e5:ff:e5:0f:
         eb:21:0a:b4:e6:f4:73:d1:7b:a2:a2:20:c6:9c:0d:01:f0:e4:
         9e:69:a6:ff:ec:df:ae:cd:69:00:7a:56:42:54:2c:d0:de:8e:
         6e:c1:ae:66:50:40:1c:c2:58:4f:e4:d5:ad:61:a9:40:e7:72:
         9a:42:0e:96:e7:b7:a0:73:46:3a:cb:25:58:33:81:2f:f1:53:
         51:76:f1:c7:2f:19:f5:17:26:23:77:06:11:da:a3:bd:53:63:
         de:f5:50:73:c5:a8:c5:36:a4:4d:70:50:6a:d6:b4:2e:bf:73:
         87:32:b6:ca:1a:11:86:dd:90:75:6e:d2:a7:7d:26:9a:e0:9e:
         f4:f7:fa:43:6e:da:42:f9:ae:05:61:3b:07:f9:d9:6a:6d:96:
         2f:0c:6f:da:fb:62:0c:b1:fb:9b:65:65:3e:fb:f2:3a:c4:fb:
         34:13:0b:ff:42:31:ab:14:de:15:1f:68:f6:a6:c5:2d:c3:fd:
         21:8e:97:e7:88:2a:64:34:23:2a:15:96:7d:16:f8:06:94:91:
         7c:f3:ea:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:00:16 2024 by rpki-client on console-fra.rpki-client.org