Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b51b17aa-2c1b-377e-8fdf-8f6a26383d76.roa
File:                     b51b17aa-2c1b-377e-8fdf-8f6a26383d76.roa (raw, json)
Hash identifier:          mibOhOeT9K5u9nJ6wqBPmLaoAc+baeKhjM0XW4/hJ2c=
Subject key identifier:   7C:CE:C8:F7:DB:99:7A:66:A7:0D:40:17:25:37:A8:57:CD:65:AF:C8
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F432858479AABDC45178A1581E28FB580
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b51b17aa-2c1b-377e-8fdf-8f6a26383d76.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     2914
IP address blocks:        174.35.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:dc:45:17:8a:15:81:e2:8f:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=cba62794-4930-435f-8b2d-128201e6b69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bb:6c:14:aa:6f:2f:df:07:f4:25:3c:bf:c0:
                    f9:73:38:dc:cd:9b:1c:fd:9b:ac:6b:fa:51:af:7d:
                    ea:c2:ba:0a:43:91:6e:43:2d:39:e8:cb:0d:44:57:
                    7d:93:d5:16:b8:e9:9a:9c:0f:e1:71:59:5c:db:05:
                    0e:a8:ca:07:45:cf:08:1f:fc:63:9c:8a:9c:05:29:
                    66:73:15:e4:19:05:6c:b7:89:bb:e5:18:07:a7:aa:
                    eb:11:7b:ac:cb:9b:f4:f5:c9:49:d0:2c:6b:3d:3c:
                    da:c3:b8:49:62:ed:97:2a:54:33:c5:a7:ff:9b:d5:
                    2c:5a:60:f1:18:a5:3d:7e:29:b6:52:f8:e8:80:14:
                    25:67:e1:e0:c8:c5:4c:e1:c9:dc:97:a8:d4:33:11:
                    17:ee:d1:6a:94:10:b1:d3:06:a1:f9:29:57:a3:34:
                    c0:32:37:e5:f5:e1:be:ea:3a:a9:e4:dd:03:31:49:
                    b4:3b:6c:24:ae:2e:8a:20:4b:40:46:d3:5b:25:02:
                    cd:b3:ee:9a:6a:20:e9:54:6d:92:1c:e6:bf:b7:1e:
                    1f:c7:02:13:e0:71:34:56:54:15:93:dd:19:a3:6f:
                    0e:42:1c:f1:eb:e1:58:f4:a6:f1:4a:84:06:bb:2a:
                    f8:ce:b0:d3:77:7d:d0:c5:72:3f:e0:16:0d:6c:16:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CE:C8:F7:DB:99:7A:66:A7:0D:40:17:25:37:A8:57:CD:65:AF:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b51b17aa-2c1b-377e-8fdf-8f6a26383d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:52:1a:b8:c9:31:85:45:e3:67:76:89:6e:2c:fe:69:6b:43:
         bf:20:a5:7e:84:1d:9b:e2:b9:5d:33:56:30:77:46:da:98:92:
         ad:8f:6c:04:96:11:4c:53:50:27:c9:ff:b1:a6:eb:8b:de:69:
         29:76:bd:c3:0b:4c:95:0e:ef:fd:15:e5:6f:76:fe:05:83:10:
         bb:fa:c4:dd:ff:bf:01:86:ed:c1:0a:e2:0e:63:33:c8:88:6b:
         47:32:d2:3a:34:96:71:44:7f:97:de:53:72:7d:01:0b:2e:47:
         27:76:64:f5:bc:63:a5:14:ff:96:33:d3:7b:29:cc:c7:1e:b3:
         61:a3:f3:bf:49:ae:1c:bd:23:d0:97:80:6f:bf:57:66:37:75:
         1e:46:0b:fb:fb:4b:33:d9:8b:f8:cc:8b:76:55:8e:02:fe:16:
         30:f6:f2:68:d3:bb:c1:2f:0f:95:54:84:cf:be:7f:3d:58:99:
         d1:40:af:91:1d:6f:e6:f0:c9:07:29:68:7e:2c:fa:01:16:3c:
         67:da:63:04:c9:32:04:c9:37:99:35:96:fc:41:6a:df:97:f9:
         f9:8e:3f:da:61:4a:d8:9c:98:44:e1:1c:ff:db:33:21:25:2b:
         03:52:fa:d8:ef:bf:1f:9c:67:e2:3b:3d:4c:d7:f3:83:56:a6:
         67:b0:b8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:00 2024 by rpki-client on console-ams.rpki-client.org