Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/c1a8ba33-157b-3dce-ab53-ae84d26a21b5.roa
File:                     c1a8ba33-157b-3dce-ab53-ae84d26a21b5.roa (raw, json)
Hash identifier:          3FK7gSujnqyNCc73ttCS8O1cVE+aOei3I5+2wjFie0g=
Subject key identifier:   C6:57:99:A3:33:0A:7B:96:BF:2F:5E:7D:C1:D3:1D:0F:B4:71:D2:D5
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F432858472405D1415236F7EB85CDEE00
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/c1a8ba33-157b-3dce-ab53-ae84d26a21b5.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     2914
IP address blocks:        174.35.64.0/24 maxlen: 24
                          174.35.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:d1:41:52:36:f7:eb:85:cd:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=9ba0da26-c3ef-48cf-ba33-9ba249517936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:41:96:40:18:54:48:f8:31:81:ad:75:55:
                    ff:bf:df:2d:d6:b2:9e:b2:ac:27:50:3d:e4:95:83:
                    72:8f:84:82:8a:bd:4b:a8:3d:38:d3:c3:0b:e9:b9:
                    87:76:1e:c9:5c:56:f9:55:48:be:2c:33:64:e4:aa:
                    82:05:c0:69:f8:2b:3e:8d:c9:67:f7:18:e7:00:d6:
                    6a:5b:3f:e9:45:2e:21:e5:e6:96:e5:2e:69:af:48:
                    e2:0a:e9:2e:7e:38:98:de:e6:8d:aa:55:89:58:4d:
                    f5:d4:ff:10:16:90:59:7a:21:de:bc:a0:04:9c:a0:
                    64:74:fc:67:51:cc:9c:99:b6:83:cd:74:2c:75:08:
                    d0:3c:84:92:8b:df:eb:c2:a1:e9:fa:e9:62:e0:fa:
                    6b:d3:05:85:16:d2:27:0f:e5:e9:b2:56:79:0b:ea:
                    8a:c5:85:33:59:8a:b8:52:77:64:4d:53:77:bd:94:
                    a9:ee:55:59:e8:47:a9:d9:45:dc:a5:93:fe:ab:76:
                    f2:fb:bf:5a:0a:db:34:8a:0d:33:5e:f9:de:54:e6:
                    d0:38:17:8a:49:10:75:c5:dc:c7:3a:94:42:b5:7f:
                    4a:c7:9d:c8:13:c1:08:ec:be:1a:7d:5c:3e:6c:8c:
                    ec:fe:9a:4a:29:0c:97:3f:cb:84:45:a7:ea:9b:8b:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:57:99:A3:33:0A:7B:96:BF:2F:5E:7D:C1:D3:1D:0F:B4:71:D2:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/c1a8ba33-157b-3dce-ab53-ae84d26a21b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:64:a4:aa:a3:35:4d:1c:3f:53:88:65:bd:64:a7:30:c7:6b:
         ee:3b:d4:e3:78:11:7a:a7:64:10:b5:94:4a:7a:70:93:b1:ed:
         6e:62:1a:b4:60:10:ef:83:e7:19:0b:9e:8c:1d:3e:bb:bf:16:
         00:ee:47:ab:5e:1d:be:7d:c2:58:8f:cb:3b:2e:9f:c6:3f:53:
         b3:b7:62:16:98:27:23:ca:e2:20:f3:7a:93:cc:cd:03:56:5f:
         71:91:5b:2e:be:43:28:88:fc:f3:f9:5b:c8:51:0f:27:85:e5:
         ca:50:05:5e:29:83:63:2d:de:50:5e:d3:60:6a:6d:46:ab:79:
         4b:21:82:74:ce:15:88:f7:af:c3:fb:7d:dc:91:d0:5f:67:ef:
         a5:f5:62:74:dd:22:8e:a5:25:8e:92:08:12:ca:95:b3:48:08:
         5e:ca:77:65:6f:30:aa:29:ea:27:b7:7c:36:a6:8c:48:b2:f8:
         43:e5:e7:51:d0:41:ea:7a:59:94:29:12:47:2c:4a:78:a6:08:
         69:4f:c2:57:2f:11:a7:63:7b:a6:73:64:b0:d7:61:cd:45:1a:
         00:89:2e:21:04:74:dd:4e:8f:58:d3:49:0a:d1:e9:f6:45:96:
         b4:22:ed:e4:d2:c3:7b:2c:19:e5:c4:63:11:ed:b2:83:4a:98:
         cc:8c:04:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEckBdFBUjb364XN7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI0MDkwODAxMDAzMVoXDTI0MTIwNzAyMDAzMVowLzEtMCsGA1UEAxMk
OWJhMGRhMjYtYzNlZi00OGNmLWJhMzMtOWJhMjQ5NTE3OTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuptBlkAYVEj4MYGtdVX/v98t1rKesqwnUD3k
lYNyj4SCir1LqD0408ML6bmHdh7JXFb5VUi+LDNk5KqCBcBp+Cs+jcln9xjnANZq
Wz/pRS4h5eaW5S5pr0jiCukufjiY3uaNqlWJWE311P8QFpBZeiHevKAEnKBkdPxn
UcycmbaDzXQsdQjQPISSi9/rwqHp+uli4Ppr0wWFFtInD+XpslZ5C+qKxYUzWYq4
UndkTVN3vZSp7lVZ6Eep2UXcpZP+q3by+79aCts0ig0zXvneVObQOBeKSRB1xdzH
OpRCtX9Kx53IE8EI7L4afVw+bIzs/ppKKQyXP8uERafqm4uwMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZXmaMzCnuWvy9efcHTHQ+0cdLVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvYzFhOGJhMzMtMTU3Yi0z
ZGNlLWFiNTMtYWU4NGQyNmEyMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBriNAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFkpKqjNU0cP1OIZb1kpzDHa+471ON4EXqnZBC1lEp6cJOx7W5iGrRg
EO+D5xkLnowdPru/FgDuR6teHb59wliPyzsun8Y/U7O3YhaYJyPK4iDzepPMzQNW
X3GRWy6+QyiI/PP5W8hRDyeF5cpQBV4pg2Mt3lBe02BqbUareUshgnTOFYj3r8P7
fdyR0F9n76X1YnTdIo6lJY6SCBLKlbNICF7Kd2VvMKop6ie3fDamjEiy+EPl51HQ
Qep6WZQpEkcsSnimCGlPwlcvEadje6ZzZLDXYc1FGgCJLiEEdN1Oj1jTSQrR6fZF
lrQi7eTSw3ssGeXEYxHtsoNKmMyMBC8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:00 2024 by rpki-client on console-ams.rpki-client.org