Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/167123ff-d2c6-3c2d-a289-ae073a4d4b9e.roa
File:                     167123ff-d2c6-3c2d-a289-ae073a4d4b9e.roa (raw, json)
Hash identifier:          oVOoVt5Q+FFnzkK4Cd2k1OXh0shTmp7qyIBml6hAKAE=
Subject key identifier:   74:43:C2:77:BB:C2:1E:4B:3C:6A:E1:43:D7:42:4A:9D:57:4F:A4:B5
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285844FCC5684BC4506A2323FBFA80
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/167123ff-d2c6-3c2d-a289-ae073a4d4b9e.roa
Signing time:             Fri 23 Feb 2024 14:00:31 +0000
ROA not before:           Fri 23 Feb 2024 14:00:31 +0000
ROA not after:            Thu 23 May 2024 13:00:31 +0000
asID:                     397797
IP address blocks:        35.62.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:c5:68:4b:c4:50:6a:23:23:fb:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Feb 23 14:00:31 2024 GMT
            Not After : May 23 13:00:31 2024 GMT
        Subject: CN=c0984c07-2d57-4a95-b2e1-0f78eae87070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:c4:d9:4c:e5:d6:f2:7f:49:14:98:8e:61:
                    75:42:4f:1e:fb:53:fa:ba:04:17:06:36:8e:3b:c8:
                    6c:a7:11:c9:b0:a2:d7:e3:71:ad:b6:7f:0d:e0:22:
                    f9:11:24:4a:d9:49:a2:38:18:ee:a7:58:06:f1:c1:
                    24:05:37:77:85:e1:1b:28:aa:08:f6:8e:28:cc:3b:
                    35:8a:f2:50:ee:a8:4c:65:b4:d1:00:72:22:31:52:
                    2e:58:e5:ac:89:ed:60:1a:69:10:a6:ab:80:2f:2f:
                    74:7a:0a:b3:2e:50:39:02:15:06:60:b2:f2:4d:3e:
                    96:7d:d9:78:7b:fe:0e:cc:bd:2a:f3:fa:0f:1f:16:
                    21:b3:d4:e3:8c:7f:e3:a1:88:80:e5:42:3f:3e:f2:
                    ac:9a:03:5e:da:c0:fc:62:81:33:19:79:39:01:de:
                    48:7e:12:45:90:bf:a8:e0:f8:14:b3:32:75:8a:1b:
                    cd:69:9c:98:38:d3:bc:41:64:fd:7f:18:e9:a7:c6:
                    d7:fb:c6:f1:9d:fc:52:10:fb:0f:54:a0:17:6f:00:
                    44:24:79:ea:6a:b8:4d:73:5e:53:e1:23:ab:23:4a:
                    55:a8:69:80:1f:15:72:30:8f:61:62:4f:cf:88:8d:
                    48:f6:e6:16:d5:3e:d3:7f:71:64:de:fb:ff:e8:8e:
                    e3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:43:C2:77:BB:C2:1E:4B:3C:6A:E1:43:D7:42:4A:9D:57:4F:A4:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/167123ff-d2c6-3c2d-a289-ae073a4d4b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.62.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0a:df:2a:58:44:fc:f5:c9:29:1b:05:77:64:4e:fc:ba:12:
         e6:bf:57:cd:94:5a:ab:15:37:fe:ec:eb:b7:e1:2a:40:ed:ce:
         11:9c:2b:fc:64:f7:61:40:1d:ca:7a:b0:99:03:e1:a7:5f:c0:
         d8:53:43:bf:1c:52:02:c8:44:35:c0:5e:f5:ea:dc:51:53:dc:
         0a:da:66:94:9b:e1:48:26:02:33:42:19:82:8a:9a:ff:3b:f1:
         70:c0:a7:5e:2d:09:b3:57:a0:75:ab:9a:a8:7f:0a:18:bf:4a:
         22:81:fb:b6:6d:d5:1a:e5:47:37:c4:f5:61:b5:e6:b2:6f:0a:
         2e:ef:ac:12:e6:11:36:72:ac:2a:64:87:d9:f8:cb:36:ba:67:
         cc:aa:d2:2f:7f:0b:23:c4:7a:c4:34:14:e6:30:78:ff:ba:f9:
         86:fd:ef:fb:8b:11:26:de:22:18:12:d1:9a:57:53:75:80:ba:
         0a:e7:2e:a0:6e:19:cd:0f:c4:de:53:83:9a:b1:f5:bd:6d:f0:
         22:d5:78:60:5e:d7:d4:fc:6f:80:51:83:ed:85:68:44:09:dd:
         af:41:98:90:63:c5:ea:46:b2:21:84:c9:51:88:28:b3:77:b6:
         2c:fd:24:59:fb:61:f4:22:52:fa:4b:18:75:4b:c0:0d:c8:91:
         0d:99:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:47:06 2024 by rpki-client on console-ams.rpki-client.org