Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb5570de-4e36-3803-9ca4-2cbd9c9903eb.roa
File:                     fb5570de-4e36-3803-9ca4-2cbd9c9903eb.roa (raw, json)
Hash identifier:          suR3QfzXhwrRPsTgHMUd1iJygd6FPdrDmQgVwywbU7U=
Subject key identifier:   63:DF:33:F0:7A:6B:1F:22:E6:E6:91:61:97:EB:21:C2:B3:75:70:7B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FC255ED97474EE7B3E4E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb5570de-4e36-3803-9ca4-2cbd9c9903eb.roa
Signing time:             Thu 21 Mar 2024 21:12:19 +0000
ROA not before:           Thu 21 Mar 2024 21:12:19 +0000
ROA not after:            Wed 19 Jun 2024 21:12:19 +0000
asID:                     396982
IP address blocks:        35.197.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fc:25:5e:d9:74:74:ee:7b:3e:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:12:19 2024 GMT
            Not After : Jun 19 21:12:19 2024 GMT
        Subject: CN=34091d89-6904-4656-9073-9f5da508b2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1a:b2:87:bf:ca:50:09:42:a6:30:76:4f:52:
                    97:bb:c3:6c:bf:76:f8:08:7d:c3:4d:fd:28:92:28:
                    2e:0f:37:b3:40:3e:00:1d:1b:58:67:bd:e4:1c:a0:
                    1c:37:e4:19:cc:cf:c6:86:e3:53:5f:3f:39:7a:a9:
                    06:7e:78:f0:67:e0:57:54:96:d1:07:bf:ef:71:48:
                    f6:c1:8a:e1:db:2f:00:79:b5:49:bd:54:cf:ae:3b:
                    10:c3:6d:8c:2a:2f:94:ba:d4:f1:c2:27:41:93:52:
                    67:f8:ae:68:04:5b:98:a5:6b:0b:6f:6b:b8:f1:bc:
                    64:76:36:5a:1e:b8:ce:df:8a:a2:19:5e:3c:b8:79:
                    62:16:2e:a1:dd:e9:06:2a:35:d3:93:78:f6:f1:4a:
                    59:0c:a9:e9:8f:4d:86:75:8b:50:38:6a:f1:29:a3:
                    85:94:03:c4:b8:87:9a:28:b1:fb:9a:34:71:74:84:
                    98:d6:4b:cd:b9:26:4d:da:43:1a:22:de:e1:44:0b:
                    96:5f:5f:19:29:4c:71:99:be:95:7b:54:48:78:df:
                    57:85:d6:ac:a4:35:68:cb:19:19:be:81:38:0e:f5:
                    b3:16:57:c2:65:53:d7:7c:62:35:c9:1c:b6:da:60:
                    75:46:f7:70:e4:41:df:42:04:b3:63:87:16:aa:0a:
                    4b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DF:33:F0:7A:6B:1F:22:E6:E6:91:61:97:EB:21:C2:B3:75:70:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb5570de-4e36-3803-9ca4-2cbd9c9903eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.197.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:28:46:3c:57:6b:a4:e4:8b:54:74:c1:1c:f0:33:1e:8c:b5:
         cd:35:0d:1d:92:15:1d:32:a8:92:42:fd:1e:68:44:54:21:bd:
         9b:7d:b0:ba:b7:7d:5c:4e:1d:67:86:bb:ef:1b:90:e3:f9:6a:
         0e:08:c3:81:ce:2c:4c:62:f0:b9:66:bc:df:f8:19:20:5e:01:
         75:25:17:21:db:f9:e3:12:87:22:15:0b:3a:a1:f9:ed:55:1b:
         28:54:e9:58:b9:16:10:5b:bc:b5:bf:8a:bd:01:76:b7:bc:e7:
         b8:77:3d:04:3b:ce:c7:c6:2b:c4:3b:55:d2:c0:9a:41:b1:6d:
         b8:9d:05:53:e3:66:a5:62:9b:f6:29:f8:9d:10:8b:ea:81:32:
         4a:7c:05:43:25:12:bb:48:30:f5:b4:2e:27:b3:83:9d:1a:03:
         a1:78:38:8a:9c:53:2d:9c:0d:8d:da:db:e2:a4:14:6d:5c:aa:
         5c:31:d3:58:e0:40:59:5a:b6:48:2f:f6:18:46:9a:d8:15:1f:
         04:58:f0:07:06:2a:6c:c5:f6:b9:07:c6:17:2d:bd:64:1c:a0:
         8a:1f:2d:f5:92:54:a8:f4:e7:63:38:8e:86:57:b0:15:4f:e3:
         1a:b2:89:bb:e3:44:66:db:23:f1:87:44:2c:5a:88:a7:06:3b:
         65:88:7e:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI/CVe2XR07ns+ToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxMTIxOVoXDTI0MDYxOTIxMTIxOVowLzEtMCsGA1UEAxMk
MzQwOTFkODktNjkwNC00NjU2LTkwNzMtOWY1ZGE1MDhiMmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBqyh7/KUAlCpjB2T1KXu8Nsv3b4CH3DTf0o
kiguDzezQD4AHRtYZ73kHKAcN+QZzM/GhuNTXz85eqkGfnjwZ+BXVJbRB7/vcUj2
wYrh2y8AebVJvVTPrjsQw22MKi+UutTxwidBk1Jn+K5oBFuYpWsLb2u48bxkdjZa
HrjO34qiGV48uHliFi6h3ekGKjXTk3j28UpZDKnpj02GdYtQOGrxKaOFlAPEuIea
KLH7mjRxdISY1kvNuSZN2kMaIt7hRAuWX18ZKUxxmb6Ve1RIeN9XhdaspDVoyxkZ
voE4DvWzFlfCZVPXfGI1yRy22mB1Rvdw5EHfQgSzY4cWqgpLyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPfM/B6ax8i5uaRYZfrIcKzdXB7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmI1NTcwZGUtNGUzNi0z
ODAzLTljYTQtMmNiZDljOTkwM2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8UwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8oRjxXa6Tki1R0wRzwMx6Mtc01DR2SFR0yqJJC/R5oRFQhvZt9sLq3
fVxOHWeGu+8bkOP5ag4Iw4HOLExi8LlmvN/4GSBeAXUlFyHb+eMShyIVCzqh+e1V
GyhU6Vi5FhBbvLW/ir0Bdre857h3PQQ7zsfGK8Q7VdLAmkGxbbidBVPjZqVim/Yp
+J0Qi+qBMkp8BUMlErtIMPW0Liezg50aA6F4OIqcUy2cDY3a2+KkFG1cqlwx01jg
QFlatkgv9hhGmtgVHwRY8AcGKmzF9rkHxhctvWQcoIofLfWSVKj052M4joZXsBVP
4xqyibvjRGbbI/GHRCxaiKcGO2WIfnc=
-----END CERTIFICATE-----
Generated at Mon May 6 01:58:25 2024 by rpki-client on console-ams.rpki-client.org