Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3c8d4c7e-0eea-3217-bbf7-1951bff7db5e.roa
File:                     3c8d4c7e-0eea-3217-bbf7-1951bff7db5e.roa (raw, json)
Hash identifier:          xylSdLvr9rWVqlGtwW19yaxIWliAxeh5uR9wMCqJ1KY=
Subject key identifier:   97:E9:62:59:3E:92:11:BB:24:EC:B0:C5:B5:A4:97:69:92:E4:4B:EC
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F432858479AABE468EC54D259F272DC00
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3c8d4c7e-0eea-3217-bbf7-1951bff7db5e.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     62676
IP address blocks:        35.7.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:e4:68:ec:54:d2:59:f2:72:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=d6d258ae-40f8-47c2-b574-187ff862456f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:10:40:0f:b9:57:e5:d3:9e:9f:87:5b:97:
                    8c:b6:c5:bf:32:a1:0f:ec:86:59:99:4b:fe:20:2f:
                    c1:8c:bb:24:75:78:db:f1:bd:4e:73:e0:fd:42:1c:
                    08:a7:09:9e:4e:e5:1e:09:3c:6a:ca:54:99:4a:a5:
                    1d:94:69:c1:79:a0:6b:f7:be:96:85:de:fa:1b:38:
                    bd:e7:8b:c6:40:bd:af:29:d7:4e:50:48:42:6d:50:
                    d5:b4:89:06:68:27:64:d7:60:63:de:25:43:dc:40:
                    64:27:f5:ea:c1:14:21:de:bc:3d:c3:72:7c:0a:47:
                    e2:9f:c4:0a:9d:88:30:07:e5:6b:91:10:fc:22:6d:
                    0c:77:e1:29:f4:41:04:9d:e1:80:2d:ca:42:04:e6:
                    b4:99:c0:e7:16:c9:eb:07:a5:4e:aa:69:95:0e:03:
                    e6:6e:70:6d:43:44:44:10:67:f2:8d:d3:20:3e:a1:
                    13:24:65:76:20:6c:53:ae:6d:63:22:fc:f7:c2:82:
                    57:aa:ee:ab:4a:51:39:89:e8:3f:62:97:ea:06:e9:
                    86:be:d6:71:d7:e9:ce:3c:2f:61:a1:42:53:68:18:
                    09:12:d6:80:6c:ad:6e:14:54:d7:b7:7b:23:64:ea:
                    93:46:76:16:b2:51:be:a5:16:ee:37:63:92:2b:14:
                    3c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E9:62:59:3E:92:11:BB:24:EC:B0:C5:B5:A4:97:69:92:E4:4B:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3c8d4c7e-0eea-3217-bbf7-1951bff7db5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.7.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:29:24:a3:42:de:a9:dd:75:c4:4c:f7:f0:2c:ed:9b:ca:53:
         1d:cb:fc:c9:78:9a:d2:19:73:93:60:78:df:2b:4e:9f:1f:7a:
         f5:79:bb:fc:37:ba:01:20:30:7f:e5:12:6e:78:4f:a9:f5:92:
         dc:70:ff:f1:bf:f1:24:6f:e9:69:12:41:d5:d6:4e:51:1f:96:
         bf:cc:ae:cf:7c:10:9f:d9:2c:3f:75:4a:bd:61:98:fc:4b:84:
         82:33:d3:45:58:6b:87:00:b7:10:0f:f6:b7:fc:01:4b:5e:10:
         3b:ff:a9:f7:3f:6b:db:86:f4:75:98:74:ab:e3:d5:97:0f:7f:
         1b:c5:7f:37:9d:31:7d:d1:b5:ed:39:ec:b3:ca:56:a0:48:23:
         66:ab:ed:54:1c:55:1c:cf:d3:96:4b:21:d1:8a:4e:1f:b1:a8:
         2b:53:0f:0c:ee:63:cf:af:8d:1c:4e:71:ba:9d:00:50:ff:f2:
         72:ec:75:d8:ef:ac:08:11:7c:b9:62:31:9d:02:d1:84:2b:cb:
         9f:50:1e:8b:db:a4:96:ad:42:0f:d6:1f:3a:f2:89:7f:62:49:
         a5:51:e2:bf:53:71:c2:0f:6b:df:3a:f7:9e:09:76:e4:5f:58:
         50:eb:d0:43:e3:88:91:23:94:56:cc:f1:bd:57:cc:e6:a8:49:
         a4:5c:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:00 2024 by rpki-client on console-ams.rpki-client.org