Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff95d14d-5981-3f66-9067-ff76384595f8.roa
File:                     ff95d14d-5981-3f66-9067-ff76384595f8.roa (raw, json)
Hash identifier:          4iBSTx1a3F4gCunDBgRHpyUyM1qkomYTVfBfqH9o3YU=
Subject key identifier:   07:F6:30:33:C4:96:F2:B1:73:A3:8B:C3:0A:BD:6E:41:48:1D:1D:04
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584549065716EEF7F8ED7F77BF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff95d14d-5981-3f66-9067-ff76384595f8.roa
Signing time:             Thu 21 Mar 2024 21:32:52 +0000
ROA not before:           Thu 21 Mar 2024 21:32:52 +0000
ROA not after:            Wed 19 Jun 2024 21:32:52 +0000
asID:                     396982
IP address blocks:        35.228.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:06:57:16:ee:f7:f8:ed:7f:77:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:32:52 2024 GMT
            Not After : Jun 19 21:32:52 2024 GMT
        Subject: CN=ac89afbf-4780-44b8-8aa4-6d739c1fd158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2f:02:c3:f2:50:44:c3:53:3f:aa:f6:35:b0:
                    38:56:48:24:1c:3f:8d:11:d4:aa:6c:9a:88:89:b7:
                    2e:fd:a3:08:79:d4:d5:98:46:75:fe:49:bf:f6:70:
                    0c:0f:6a:3a:9c:b3:96:e2:75:b2:f3:e2:b7:41:f2:
                    f5:66:32:da:c6:46:00:2c:ac:79:2b:d7:f3:03:0a:
                    a8:7b:e6:2a:40:cc:14:a3:8e:1d:a8:f0:26:67:32:
                    a8:a3:7e:2e:12:74:32:24:e1:9b:bf:56:ee:82:bc:
                    51:ee:06:bc:36:a4:cb:60:19:ee:53:89:8a:dd:05:
                    b7:b7:3f:25:53:e3:e7:84:e0:c6:34:df:61:12:ab:
                    56:5d:0c:f7:68:17:3c:4a:3b:98:c4:05:99:41:4b:
                    48:8b:e8:58:64:bd:4f:ad:fe:75:4c:e3:cb:a1:1e:
                    98:8e:58:17:1a:5f:eb:cf:44:f7:de:00:9a:77:6c:
                    db:21:78:fa:c4:a4:cd:f6:25:f6:d7:ab:08:0b:b4:
                    d5:07:86:91:2d:a8:e2:0d:7d:41:c0:3e:09:8a:ea:
                    84:0b:f7:48:68:4d:de:d5:4e:29:a3:ed:21:2d:47:
                    c0:2f:a9:9b:f7:9e:52:c9:99:f1:2a:2f:e8:3c:a5:
                    e3:96:dd:85:bc:cc:2f:8b:54:e9:8c:0a:ab:0d:2e:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F6:30:33:C4:96:F2:B1:73:A3:8B:C3:0A:BD:6E:41:48:1D:1D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff95d14d-5981-3f66-9067-ff76384595f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.228.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6b:f2:4d:02:b9:44:fe:a8:c2:53:62:5c:bc:b7:f8:3d:56:
         64:0f:da:d1:66:1e:db:a9:77:33:bd:71:82:df:fe:11:6f:4a:
         c7:07:d2:38:7c:cf:ca:a6:be:fa:e6:99:89:bf:26:23:24:d2:
         3c:61:bf:74:57:12:c1:a7:99:6a:37:36:ad:06:9a:44:72:b4:
         33:2f:75:b9:84:7d:79:e8:6a:37:79:a4:6d:73:74:41:db:ef:
         9d:a6:72:31:41:82:57:16:a9:ac:e0:78:99:8b:d2:8f:2f:b4:
         c1:ff:3a:a8:7c:e7:7c:e0:95:f0:c2:52:6b:08:c1:b0:07:b2:
         94:00:45:71:b5:de:d5:05:37:65:c9:f3:f1:8c:49:56:44:b0:
         df:a8:30:0a:8d:90:0e:fc:ef:2e:4d:79:f9:47:ec:a7:d2:f7:
         c0:44:5e:ee:30:9f:97:4a:2a:1b:97:01:21:9a:84:24:fa:a0:
         ec:ed:c5:3e:ab:05:d2:2e:78:e9:20:5f:26:b3:7e:40:51:82:
         49:52:7e:2a:b4:d7:8e:4a:6c:8f:08:d6:1c:94:7f:51:ed:35:
         2d:44:62:12:6b:2a:2e:09:01:44:6b:15:85:ac:17:b4:52:6e:
         e7:51:76:e3:0c:bd:e8:fb:4a:37:e0:c4:f3:d9:4e:51:3b:87:
         df:dc:0d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:26 2024 by rpki-client on console-ams.rpki-client.org