Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa
File:                     3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa (raw, json)
Hash identifier:          tgdX2aYo9PMTQAOyznrwfR9MxM4/OfBr9e/xP3TPdCA=
Subject key identifier:   F5:44:FA:EC:49:45:BF:59:6E:3A:F1:6B:38:B7:08:54:47:E3:1B:1A
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285847BAC6AB5591A9537D5616BB40
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     237
IP address blocks:        35.33.0.0/18 maxlen: 18
                          35.33.5.0/24 maxlen: 24
                          35.33.6.0/24 maxlen: 24
                          35.33.64.0/19 maxlen: 19
                          35.34.0.0/18 maxlen: 18
                          35.34.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:ab:55:91:a9:53:7d:56:16:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=24442c93-9b31-40ee-bcfb-981bd9710c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d4:53:b9:60:76:0f:8e:bf:92:48:d3:55:ec:
                    23:4f:f6:0a:e1:35:d6:99:c7:9c:b9:15:aa:25:6f:
                    3f:06:24:09:be:37:0d:4b:53:f7:2f:a3:6c:b4:6c:
                    bc:41:a9:5d:40:36:3d:58:d8:50:0d:94:eb:61:12:
                    6b:1a:14:36:9d:c5:a5:17:b1:c7:51:cc:db:44:0f:
                    f1:48:7f:3e:94:f9:50:61:89:c7:f3:16:93:ce:6a:
                    2f:02:87:de:35:07:4c:d8:d1:73:e4:0f:bd:e9:2e:
                    c6:07:f1:3a:75:63:82:62:87:75:27:06:8a:0d:b3:
                    64:cd:d9:6e:9b:97:dc:6a:53:21:5e:0c:c1:d6:bb:
                    16:e6:47:52:c2:56:ee:76:d5:b7:8e:1b:1d:ba:11:
                    59:90:68:32:7f:56:dd:03:33:12:69:34:37:b8:39:
                    d6:1f:5d:9b:61:28:16:84:3e:74:54:f6:68:49:64:
                    6b:3f:b9:60:40:1c:65:e1:6d:23:a7:64:14:e2:29:
                    38:10:cc:2d:32:f3:e6:d2:83:b5:c6:57:20:0e:49:
                    9c:ee:5c:b5:7f:a3:be:18:37:c8:f1:28:81:28:8c:
                    ce:4a:b9:a2:ce:af:9a:b7:d2:86:c5:ce:a6:6e:b8:
                    5f:fb:f7:59:da:bb:6e:4d:00:d1:56:ab:1b:69:05:
                    cd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:44:FA:EC:49:45:BF:59:6E:3A:F1:6B:38:B7:08:54:47:E3:1B:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.33.0.0-35.33.95.255
                  35.34.0.0-35.34.79.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e5:54:72:a1:3d:d6:9d:7f:f4:c6:ee:fd:32:07:0f:4c:87:
         d9:31:06:8c:80:d5:33:40:a6:c6:72:8b:a8:49:18:8b:e1:a3:
         56:99:34:54:dc:8d:e0:d8:bf:9a:59:55:52:9e:25:33:4f:57:
         30:23:7b:12:9b:f3:42:bf:98:f1:f8:20:8d:ab:1d:5d:99:d3:
         a5:74:b4:bd:f6:28:9b:ab:98:f7:4f:7a:71:cd:ac:ba:15:7b:
         bc:07:fa:4d:38:0e:ce:10:86:3c:ab:ae:a1:ab:e0:1b:fa:df:
         98:16:2d:40:36:da:c8:23:1a:71:5f:90:1e:71:63:0c:83:b4:
         1f:af:75:1e:c6:c6:17:46:6c:8c:72:54:ed:8e:bd:e1:88:27:
         b7:f2:e4:34:48:1f:6d:69:f3:1b:bb:04:43:11:1a:84:d0:40:
         89:d8:af:82:fe:d3:5d:0e:03:78:90:29:9e:60:af:48:7b:24:
         bb:79:a2:26:a2:75:42:c5:45:4f:4c:ab:53:49:60:d7:26:6b:
         fa:fd:1d:6e:bd:a0:86:45:1e:ab:27:6c:7c:17:e9:9c:e4:61:
         c6:a1:a9:8a:c1:ad:c1:d3:c5:5f:6e:ea:87:1d:5b:0a:2c:12:
         f1:a4:34:1a:63:c8:7e:09:d2:98:13:88:b2:72:4d:e9:e4:cb:
         70:d2:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:49 2024 by rpki-client on console-fra.rpki-client.org