Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b524c6b0-be50-3c9f-b05a-3035b9c5310b.roa
File:                     b524c6b0-be50-3c9f-b05a-3035b9c5310b.roa (raw, json)
Hash identifier:          DrmtsQWjLaeR6icGWltFCz9HneUEWHl06Pwuo/2AOiU=
Subject key identifier:   A1:80:0E:8C:88:A0:E4:FF:E6:15:96:26:D3:5F:63:C7:A9:6C:F8:A1
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F432858479AABDC5CEA64125BE2F27240
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b524c6b0-be50-3c9f-b05a-3035b9c5310b.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     2914
IP address blocks:        174.35.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:dc:5c:ea:64:12:5b:e2:f2:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=79607876-dbb8-4e41-a2fd-aa45163806f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:de:1b:68:2e:d0:fd:bd:01:6a:60:37:e9:07:
                    2a:28:42:2b:26:1a:41:1b:e9:fc:97:da:15:b3:1e:
                    ca:e3:14:00:a6:18:8a:9a:3b:b9:c2:f6:e4:90:b6:
                    a4:25:81:58:1a:35:62:2b:d0:6f:74:de:b4:4e:4a:
                    22:35:f8:af:45:cf:c5:67:ff:db:8f:3b:01:5e:7d:
                    e6:c7:59:2e:a6:7f:4e:5d:8c:d5:e3:de:78:05:b8:
                    48:21:aa:35:32:bd:11:fa:92:89:69:fa:fb:91:c0:
                    e6:d0:dc:ee:bf:cf:e1:4c:62:c4:ea:4a:5b:25:99:
                    e6:3d:ca:3d:0a:62:23:95:65:86:8b:fe:b9:d6:c8:
                    44:2f:12:4a:7c:7a:fb:cc:24:fa:7c:25:e4:9e:4e:
                    bb:9a:8e:16:61:84:c8:5a:f5:4e:ea:fc:bd:05:50:
                    db:01:28:3b:83:b0:ad:3a:c4:4c:11:7e:7c:23:14:
                    cf:6e:c4:9a:35:e6:cb:f9:6a:96:fe:2e:cd:a3:a6:
                    28:cf:5b:e3:2a:93:dc:49:10:6e:c6:7a:28:f7:3a:
                    77:9a:10:79:8c:99:21:43:52:b0:01:02:5a:9f:1c:
                    2f:8f:85:ff:6a:6c:1d:e7:f7:00:b8:68:51:b6:50:
                    6c:94:53:e3:32:7e:35:37:1a:03:d1:c8:c9:61:dc:
                    41:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:80:0E:8C:88:A0:E4:FF:E6:15:96:26:D3:5F:63:C7:A9:6C:F8:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b524c6b0-be50-3c9f-b05a-3035b9c5310b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:66:94:af:b4:9a:33:36:a9:30:39:00:eb:46:9e:f1:26:c5:
         f9:66:d5:a4:17:82:ad:6d:da:ff:a3:d5:00:5f:26:5f:91:dd:
         53:da:2e:4e:74:6d:f1:c8:08:11:ae:36:6d:a0:96:a7:a5:4f:
         1c:89:18:9f:e4:c5:7d:c7:ea:45:52:58:b9:0d:7c:bb:ed:a6:
         12:90:af:ef:3a:02:1d:73:35:c8:d0:12:c7:87:33:ab:97:71:
         7b:c1:56:52:b0:3a:e6:35:9d:9e:fe:09:a3:32:73:48:20:f8:
         66:80:87:85:7f:b4:79:88:9d:e8:9a:75:df:43:13:08:73:0c:
         13:9e:74:5a:15:7c:21:40:59:d0:5a:71:77:19:16:de:41:4c:
         48:13:8d:2c:43:55:8d:57:73:8c:1c:31:89:53:f7:eb:9b:3f:
         ba:16:ad:2b:75:c7:60:e1:6f:bc:fb:82:66:9b:0e:b3:0b:19:
         82:38:1e:6b:71:65:29:ce:8c:8c:e3:71:3f:4f:f6:96:a8:c6:
         9f:37:f2:5e:ef:53:80:2f:03:4c:56:42:fa:14:ea:ee:f7:e0:
         1f:ce:6d:19:2d:bb:33:d4:a4:db:9c:df:13:6c:86:7d:3e:21:
         6e:72:ef:a4:d8:cc:7a:a6:0b:ee:9a:fe:ab:3b:62:0e:57:41:
         a7:a9:2a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:17 2024 by rpki-client on console-fra.rpki-client.org