Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e765533f-3ede-3c46-91ef-06cb68f9be27.roa
File:                     e765533f-3ede-3c46-91ef-06cb68f9be27.roa (raw, json)
Hash identifier:          Mvh1IB7Mn9Bi+NM/Teyk4heFRCdGuUXAyS3yEA/298E=
Subject key identifier:   39:BC:9F:A6:8D:FA:66:97:77:C1:2D:B3:EA:B7:30:B4:37:68:AC:DE
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490081A204DDB5B288F68F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e765533f-3ede-3c46-91ef-06cb68f9be27.roa
Signing time:             Thu 21 Mar 2024 21:21:06 +0000
ROA not before:           Thu 21 Mar 2024 21:21:06 +0000
ROA not after:            Wed 19 Jun 2024 21:21:06 +0000
asID:                     396982
IP address blocks:        35.185.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:00:81:a2:04:dd:b5:b2:88:f6:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:21:06 2024 GMT
            Not After : Jun 19 21:21:06 2024 GMT
        Subject: CN=472aff73-977a-4c75-937e-0556ce0ea21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:43:9e:83:59:15:a7:9f:78:5a:cf:9f:24:
                    e6:5c:9c:7a:c6:79:7a:43:3a:d1:6b:b1:37:77:67:
                    d2:68:aa:b5:4f:3a:7f:e3:45:7e:e8:36:a5:b0:53:
                    f7:10:d6:7e:3c:8d:d7:2c:a7:53:c7:98:ff:a0:08:
                    2e:83:8d:46:79:cb:6a:86:0c:1e:43:f0:da:56:ef:
                    53:0a:d2:b3:a2:33:98:40:2a:63:8f:95:bd:e9:20:
                    67:53:2b:39:4e:92:70:46:80:2f:d9:7a:15:bd:be:
                    64:d5:e7:33:86:18:88:0f:0c:48:f7:14:7a:4e:fb:
                    2d:1f:26:2e:f3:32:80:e4:33:66:4a:d6:36:88:5e:
                    36:e1:8a:37:bc:8d:81:ed:a7:fc:7e:a6:5f:00:e5:
                    a2:6c:48:73:db:58:d3:b9:c4:5c:aa:3e:20:86:5e:
                    63:9c:de:a6:17:75:d2:b8:a3:82:e0:4c:bb:0a:6a:
                    65:4c:4d:57:3c:c7:dc:0e:07:77:fd:8b:9d:4c:cf:
                    8b:e7:07:f1:da:2a:ba:62:88:a2:99:82:75:fe:63:
                    8a:dc:88:4b:c6:ed:45:51:f5:42:fe:04:fd:1f:69:
                    47:35:f5:61:d6:66:78:88:31:aa:d0:6c:fb:5d:68:
                    77:cc:47:af:df:3d:f5:8f:ef:a2:03:c3:f7:9c:94:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BC:9F:A6:8D:FA:66:97:77:C1:2D:B3:EA:B7:30:B4:37:68:AC:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e765533f-3ede-3c46-91ef-06cb68f9be27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.185.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:42:87:61:69:77:1a:84:f9:f6:ef:0b:ba:3f:3b:8b:69:15:
         32:9e:2c:3e:07:a8:a5:2c:5a:0e:19:cb:ae:25:23:1b:22:2a:
         0b:7f:fc:d0:ac:98:81:d7:86:aa:33:f2:27:77:ed:19:3d:01:
         c7:a3:40:27:bd:b2:aa:da:9d:9e:1f:ce:62:a8:30:68:70:65:
         1f:a5:54:e7:f8:51:cb:2e:66:7d:38:af:14:e9:e5:b5:bf:a0:
         1e:bf:91:67:13:45:6e:8a:b3:f2:55:cc:2f:23:fd:b6:3d:79:
         33:3a:e6:77:3f:37:57:2f:9c:08:3f:9e:18:4b:9b:67:98:f0:
         b7:12:c3:b9:db:62:b2:3c:c7:a4:35:64:f2:89:c2:36:89:97:
         bb:c6:c1:ff:a9:b3:03:aa:b7:fc:6e:d0:0b:ac:93:ec:7d:7c:
         5b:7a:eb:5a:1f:ce:24:19:15:ae:67:98:2f:cc:bb:a2:ea:ab:
         d0:9a:9b:ed:20:96:e4:d5:d6:ec:f9:0d:71:77:73:d1:2d:54:
         f6:5a:eb:87:d6:0f:be:a7:f5:21:c3:14:76:27:56:54:33:67:
         e2:4b:d1:46:fa:a4:6c:8f:4b:73:7a:45:10:81:5c:62:ce:35:
         92:05:9e:88:49:21:a6:72:23:b2:d1:6d:42:07:a2:0e:e4:39:
         65:c4:85:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJAIGiBN21soj2jwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxMjEwNloXDTI0MDYxOTIxMjEwNlowLzEtMCsGA1UEAxMk
NDcyYWZmNzMtOTc3YS00Yzc1LTkzN2UtMDU1NmNlMGVhMjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPpDnoNZFaefeFrPnyTmXJx6xnl6QzrRa7E3
d2fSaKq1Tzp/40V+6DalsFP3ENZ+PI3XLKdTx5j/oAgug41GectqhgweQ/DaVu9T
CtKzojOYQCpjj5W96SBnUys5TpJwRoAv2XoVvb5k1eczhhiIDwxI9xR6TvstHyYu
8zKA5DNmStY2iF424Yo3vI2B7af8fqZfAOWibEhz21jTucRcqj4ghl5jnN6mF3XS
uKOC4Ey7CmplTE1XPMfcDgd3/YudTM+L5wfx2iq6YoiimYJ1/mOK3IhLxu1FUfVC
/gT9H2lHNfVh1mZ4iDGq0Gz7XWh3zEev3z31j++iA8P3nJSAXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDm8n6aN+maXd8Ets+q3MLQ3aKzeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTc2NTUzM2YtM2VkZS0z
YzQ2LTkxZWYtMDZjYjY4ZjliZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7kgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKNCh2FpdxqE+fbvC7o/O4tpFTKeLD4HqKUsWg4Zy64lIxsiKgt//NCs
mIHXhqoz8id37Rk9AcejQCe9sqranZ4fzmKoMGhwZR+lVOf4UcsuZn04rxTp5bW/
oB6/kWcTRW6Ks/JVzC8j/bY9eTM65nc/N1cvnAg/nhhLm2eY8LcSw7nbYrI8x6Q1
ZPKJwjaJl7vGwf+pswOqt/xu0Ausk+x9fFt661ofziQZFa5nmC/Mu6Lqq9Cam+0g
luTV1uz5DXF3c9EtVPZa64fWD76n9SHDFHYnVlQzZ+JL0Ub6pGyPS3N6RRCBXGLO
NZIFnohJIaZyI7LRbUIHog7kOWXEhYM=
-----END CERTIFICATE-----
Generated at Sun May 5 15:36:12 2024 by rpki-client on console-fra.rpki-client.org