Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4705013-fea2-3c11-8973-e4b65b58ffdd.roa
File:                     d4705013-fea2-3c11-8973-e4b65b58ffdd.roa (raw, json)
Hash identifier:          77ehEhPxw5j8cRES71tg/n3095fNDmDiJ6qy1tO/OgA=
Subject key identifier:   71:3E:91:85:91:FD:99:6D:4B:3E:59:AD:9C:D7:6C:72:63:68:E9:1E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FE0BE319DED1389F42D1E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4705013-fea2-3c11-8973-e4b65b58ffdd.roa
Signing time:             Thu 21 Mar 2024 21:16:09 +0000
ROA not before:           Thu 21 Mar 2024 21:16:09 +0000
ROA not after:            Wed 19 Jun 2024 21:16:09 +0000
asID:                     396982
IP address blocks:        35.194.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fe:0b:e3:19:de:d1:38:9f:42:d1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:16:09 2024 GMT
            Not After : Jun 19 21:16:09 2024 GMT
        Subject: CN=47003797-b460-4d32-995e-c8fb29f1224f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:3d:8e:18:9d:30:05:06:e6:c6:0e:1e:32:
                    0a:03:af:98:be:77:72:44:a5:01:6e:79:92:23:a0:
                    bf:3a:49:2b:d5:6a:c0:4e:42:7e:1d:31:cb:1a:e1:
                    96:18:e9:6c:02:57:71:51:e8:d0:a7:49:91:cf:48:
                    50:6c:85:aa:16:49:c9:db:42:a3:d5:6f:5a:30:7e:
                    ce:e3:dc:f9:10:94:69:9f:d5:1a:aa:11:0f:06:75:
                    19:3b:9b:73:77:b6:c0:b5:3c:a0:c9:4a:75:12:7e:
                    d4:0f:92:54:03:3b:0e:c3:94:9a:14:1d:b8:c6:11:
                    47:cd:26:b4:94:7d:9e:be:e9:31:d2:64:ba:e7:7d:
                    f0:27:da:90:3d:cb:db:f9:96:04:a5:7e:86:be:ab:
                    b3:ac:ec:27:f8:5d:05:29:f5:c9:fe:30:39:bb:5c:
                    c8:f8:fd:96:b1:2f:bc:5b:48:f9:c9:3d:cf:f5:7d:
                    1c:35:b5:32:3d:5b:b3:c2:62:0f:a9:52:07:94:a1:
                    94:9b:63:0a:a6:d8:d6:f1:ff:ee:04:8b:14:9d:ab:
                    ba:80:5a:cc:04:6b:a1:ff:6c:65:b2:ca:f0:9d:0b:
                    41:3e:4f:3d:0e:14:7a:b4:0b:c7:13:e9:fc:6b:b5:
                    ef:9e:67:34:a6:50:2d:e3:c5:f4:7c:31:9e:f1:fd:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3E:91:85:91:FD:99:6D:4B:3E:59:AD:9C:D7:6C:72:63:68:E9:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4705013-fea2-3c11-8973-e4b65b58ffdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.194.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:18:66:17:40:f3:7a:ad:f0:0b:ff:7d:39:d7:1c:74:f9:
         65:08:2e:3e:40:e3:01:73:10:1a:d9:38:50:02:a6:8c:8d:57:
         7e:3e:17:60:5c:62:be:55:3f:ce:c0:15:dc:22:a0:fd:62:d9:
         21:33:50:d9:73:f8:09:22:da:60:f2:b4:7f:76:ba:ab:cf:f6:
         aa:fa:77:96:13:9a:4d:52:3c:3c:af:69:40:2c:2e:ae:a4:8a:
         16:ba:33:3f:f6:1e:f1:73:4e:63:16:d9:cd:59:5b:72:54:af:
         20:3f:91:69:94:4e:98:53:a9:ca:ac:9c:8b:04:43:e5:2f:b2:
         18:ba:5f:f5:42:1a:05:04:d8:a4:64:cc:ed:5d:e4:6f:17:94:
         09:24:1c:12:7f:9c:73:e9:3d:6e:58:f2:2c:b2:c2:84:5b:fb:
         c6:dc:89:63:0d:a4:b7:c1:9c:f7:88:56:4e:a7:e2:15:8c:c3:
         30:1e:f8:79:28:fd:3b:29:f1:ad:c9:4a:ba:f2:23:60:46:48:
         95:4f:a0:b4:00:5c:40:2b:a7:63:55:b0:50:be:90:ea:35:61:
         d7:8b:6f:94:e0:db:b3:54:2b:0e:39:13:b7:eb:80:57:ec:50:
         35:d7:58:ca:25:19:a3:02:fb:39:6f:6d:81:5f:d3:c1:47:b7:
         9b:c7:ec:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/gvjGd7ROJ9C0eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxMTYwOVoXDTI0MDYxOTIxMTYwOVowLzEtMCsGA1UEAxMk
NDcwMDM3OTctYjQ2MC00ZDMyLTk5NWUtYzhmYjI5ZjEyMjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+c9jhidMAUG5sYOHjIKA6+YvndyRKUBbnmS
I6C/Okkr1WrATkJ+HTHLGuGWGOlsAldxUejQp0mRz0hQbIWqFknJ20Kj1W9aMH7O
49z5EJRpn9UaqhEPBnUZO5tzd7bAtTygyUp1En7UD5JUAzsOw5SaFB24xhFHzSa0
lH2evukx0mS6533wJ9qQPcvb+ZYEpX6GvquzrOwn+F0FKfXJ/jA5u1zI+P2WsS+8
W0j5yT3P9X0cNbUyPVuzwmIPqVIHlKGUm2MKptjW8f/uBIsUnau6gFrMBGuh/2xl
ssrwnQtBPk89DhR6tAvHE+n8a7Xvnmc0plAt48X0fDGe8f3rbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHE+kYWR/ZltSz5ZrZzXbHJjaOkeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDQ3MDUwMTMtZmVhMi0z
YzExLTg5NzMtZTRiNjViNThmZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8KgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ3qGGYXQPN6rfAL/3051xx0+WUILj5A4wFzEBrZOFACpoyNV34+F2Bc
Yr5VP87AFdwioP1i2SEzUNlz+Aki2mDytH92uqvP9qr6d5YTmk1SPDyvaUAsLq6k
iha6Mz/2HvFzTmMW2c1ZW3JUryA/kWmUTphTqcqsnIsEQ+Uvshi6X/VCGgUE2KRk
zO1d5G8XlAkkHBJ/nHPpPW5Y8iyywoRb+8bciWMNpLfBnPeIVk6n4hWMwzAe+Hko
/Tsp8a3JSrryI2BGSJVPoLQAXEArp2NVsFC+kOo1YdeLb5Tg27NUKw45E7frgFfs
UDXXWMolGaMC+zlvbYFf08FHt5vH7LI=
-----END CERTIFICATE-----
Generated at Sun May 5 15:36:03 2024 by rpki-client on console-fra.rpki-client.org