Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0d255eec-86a4-30ef-a29e-f9ed7c9a2572.roa
File:                     0d255eec-86a4-30ef-a29e-f9ed7c9a2572.roa (raw, json)
Hash identifier:          goiWJZfAPtUrhCx6OhQqpres3UJWqUITEylTt6D3Tcs=
Subject key identifier:   9E:62:28:D4:7A:4C:7B:E7:EC:68:20:5B:0D:9F:5E:DF:32:03:4A:AC
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285847D834AF81C4F9D82ED2E71340
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0d255eec-86a4-30ef-a29e-f9ed7c9a2572.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     394769
IP address blocks:        35.7.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:af:81:c4:f9:d8:2e:d2:e7:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=e8103bda-b867-4706-b3c4-51f63184be29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:6c:00:51:ce:7b:19:88:6a:95:dd:58:fe:
                    17:a7:e9:cd:ad:b2:6b:af:f9:cd:57:f8:4a:e7:89:
                    86:44:e6:4f:4f:b7:d8:cb:6b:57:44:26:06:3c:32:
                    44:05:ea:51:80:dc:fa:b8:77:e6:0d:fd:86:cd:44:
                    36:08:5c:84:0c:fc:41:25:7b:12:e2:c0:a1:c0:02:
                    5b:e1:b3:f8:28:ff:a2:35:5a:2d:18:db:22:3a:6f:
                    32:6f:7d:d7:7a:ee:c6:de:26:95:db:30:0e:86:19:
                    1d:d1:81:86:c3:34:78:e0:8b:d1:52:cb:bb:1e:e4:
                    f9:98:3b:06:fc:3d:4d:65:30:71:da:b2:9b:75:e4:
                    8a:54:06:8c:08:ac:a7:4f:a2:dc:cf:21:22:a8:70:
                    64:af:76:8d:eb:2d:0d:2b:2b:84:37:c4:08:11:a4:
                    2a:f7:77:f8:c0:39:1b:cf:62:8e:cb:25:c3:59:d2:
                    b6:48:37:61:c5:09:61:47:12:92:9a:70:8c:13:c4:
                    94:e8:0e:be:b9:20:bb:f0:79:14:26:d3:bc:4c:d8:
                    26:2c:ab:64:62:d2:4a:9d:b3:81:f0:a3:a0:53:30:
                    f1:7b:0c:1b:12:a1:f2:53:0c:2d:74:48:25:9c:15:
                    8c:ea:66:28:17:54:3d:e5:58:8e:94:e1:4d:68:f1:
                    5f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:62:28:D4:7A:4C:7B:E7:EC:68:20:5B:0D:9F:5E:DF:32:03:4A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/0d255eec-86a4-30ef-a29e-f9ed7c9a2572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.7.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:8f:d8:ab:32:89:64:3e:65:fe:cc:71:ff:b3:1d:54:4e:b8:
         ce:19:c1:f0:58:99:1f:a8:f3:11:87:26:c0:ad:61:73:2e:38:
         c2:5c:7c:a8:2f:89:f7:66:a0:5a:40:e9:77:69:fd:2e:c3:cb:
         33:18:27:db:78:29:b0:4b:35:ae:c1:c0:bd:71:8b:77:22:e0:
         09:0e:c2:28:42:30:84:26:cc:5b:d1:d2:14:eb:b5:24:e5:47:
         3e:b8:6f:69:ac:05:1a:44:3c:97:80:79:ac:6e:64:2d:7b:12:
         05:57:cc:8c:21:2c:cb:6f:ce:4f:e1:18:d0:c6:c8:74:c0:67:
         28:de:bd:47:f8:98:3b:72:fb:55:ba:ac:e9:a1:a2:7f:d2:80:
         cb:85:05:7a:11:c7:18:8c:44:9a:c1:6c:a7:93:ff:88:56:be:
         31:f7:8b:46:40:b8:dd:ee:e4:36:ae:9d:26:36:da:59:07:e1:
         70:ce:b3:6b:15:74:28:89:f3:5c:bc:c9:b3:72:f7:e3:ae:c3:
         52:14:64:23:c8:31:ae:a1:1d:ad:bb:23:cf:a8:f6:2a:c0:c4:
         50:bf:2e:10:53:cf:7b:0a:9e:b0:5f:ed:73:31:a2:70:9c:14:
         ee:d5:06:37:5a:51:d7:0b:68:34:68:83:ea:26:a3:a2:eb:05:
         f7:0e:e6:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfYNK+BxPnYLtLnE0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk
ZWZlMB4XDTI0MTExMTE0MDAzOVoXDTI1MDIwOTE0MDAzOVowLzEtMCsGA1UEAxMk
ZTgxMDNiZGEtYjg2Ny00NzA2LWIzYzQtNTFmNjMxODRiZTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy21sAFHOexmIapXdWP4Xp+nNrbJrr/nNV/hK
54mGROZPT7fYy2tXRCYGPDJEBepRgNz6uHfmDf2GzUQ2CFyEDPxBJXsS4sChwAJb
4bP4KP+iNVotGNsiOm8yb33Xeu7G3iaV2zAOhhkd0YGGwzR44IvRUsu7HuT5mDsG
/D1NZTBx2rKbdeSKVAaMCKynT6LczyEiqHBkr3aN6y0NKyuEN8QIEaQq93f4wDkb
z2KOyyXDWdK2SDdhxQlhRxKSmnCME8SU6A6+uSC78HkUJtO8TNgmLKtkYtJKnbOB
8KOgUzDxewwbEqHyUwwtdEglnBWM6mYoF1Q95ViOlOFNaPFfXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ5iKNR6THvn7GggWw2fXt8yA0qsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz
MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvMGQyNTVlZWMtODZhNC0z
MGVmLWEyOWUtZjllZDdjOWEyNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz
MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4
ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm
ODc1OGRlZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIwdwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ2P2KsyiWQ+Zf7Mcf+zHVROuM4ZwfBYmR+o8xGHJsCtYXMuOMJcfKgv
ifdmoFpA6Xdp/S7DyzMYJ9t4KbBLNa7BwL1xi3ci4AkOwihCMIQmzFvR0hTrtSTl
Rz64b2msBRpEPJeAeaxuZC17EgVXzIwhLMtvzk/hGNDGyHTAZyjevUf4mDty+1W6
rOmhon/SgMuFBXoRxxiMRJrBbKeT/4hWvjH3i0ZAuN3u5DaunSY22lkH4XDOs2sV
dCiJ81y8ybNy9+Ouw1IUZCPIMa6hHa27I8+o9irAxFC/LhBTz3sKnrBf7XMxonCc
FO7VBjdaUdcLaDRog+omo6LrBfcO5ik=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:37 2024 by rpki-client on console-ams.rpki-client.org