Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa
File:                     627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa (raw, json)
Hash identifier:          7WYodIew2W+Yh13mfH8ecUESHIQXAlts7WQZ83csb2U=
Subject key identifier:   02:1C:9A:B7:EC:C4:CA:54:83:A3:46:3A:B3:18:DE:7F:50:5F:5E:3B
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285844FB600915A8BB93E79D690480
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     231
IP address blocks:        35.20.0.0/14 maxlen: 24
                          35.8.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:09:15:a8:bb:93:e7:9d:69:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=6b505c6d-fe5b-4139-b16e-50137276e388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:22:83:cb:a3:45:a0:9f:db:5e:b7:9e:f6:80:
                    b4:c1:90:7f:93:b9:c7:9d:90:a2:d6:a2:9f:8f:f8:
                    fe:06:44:25:5f:3a:58:7c:16:b4:29:20:9b:78:8d:
                    b1:1c:ec:10:47:21:25:40:41:b5:6f:9c:1f:7e:1a:
                    cd:93:b2:93:2e:09:86:91:6e:a0:18:33:8c:bc:7f:
                    79:68:db:2e:d4:a8:79:a6:cc:19:cb:b3:bc:2b:cc:
                    0b:54:28:30:83:58:53:d7:26:ab:fd:15:2f:1f:de:
                    71:f6:17:ef:b8:04:4c:bd:4a:70:55:b1:48:55:f5:
                    20:b1:e5:6f:17:3b:94:b2:b4:1e:b6:aa:3b:4b:2f:
                    c7:5c:1a:4f:fe:d0:f7:8e:00:21:be:e8:6e:c1:93:
                    4e:8c:f4:d4:28:9c:7f:28:76:10:5e:b3:03:2c:4e:
                    c2:45:67:ff:12:26:30:9d:e8:a6:96:25:1c:8a:2f:
                    0e:63:98:17:4c:56:db:4c:e4:6d:25:fc:a0:5c:03:
                    cd:73:0c:e6:28:be:76:da:ed:5b:cf:f4:62:33:2e:
                    bd:b4:9b:d7:4a:aa:21:e9:f9:18:3f:49:49:4b:46:
                    a2:9f:15:33:1e:1a:3e:49:18:f3:dc:a0:41:71:c3:
                    e5:24:de:f2:81:f9:48:46:02:51:70:a6:5a:5d:1c:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1C:9A:B7:EC:C4:CA:54:83:A3:46:3A:B3:18:DE:7F:50:5F:5E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/627711cf-0c46-3102-a7bf-7941a0a1fa4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.8.0.0/13
                  35.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:cd:e3:34:26:a2:f7:52:18:00:43:8e:f1:8f:5b:40:79:b5:
         9d:4d:67:2f:19:47:12:39:7f:cf:d9:6e:e6:ee:03:88:28:2f:
         4d:03:a9:dd:ab:bc:4d:31:79:df:d0:e4:4a:38:0a:45:68:04:
         2d:6a:10:97:4f:45:3c:67:54:0d:c8:c2:58:99:bc:fa:f5:5f:
         21:e9:24:a4:59:2e:f2:bf:45:2b:c7:dc:da:fc:75:29:7e:61:
         f3:96:93:53:7c:ea:4b:9d:37:35:95:d6:52:ec:91:f0:f7:70:
         e5:4e:63:5c:16:e4:3c:aa:64:14:8d:c0:32:18:4a:9a:e1:92:
         2d:e1:b2:ac:18:27:45:f0:33:4d:a1:c9:46:e9:15:2d:0c:05:
         5a:49:fb:9c:e5:d5:a3:70:89:04:5b:01:f1:77:7c:2a:32:f6:
         77:d0:03:6f:b5:a3:7f:cf:3c:f2:f5:11:05:46:59:52:4e:70:
         c5:6d:2e:55:68:ac:c9:1b:b3:0d:1d:da:5f:0e:b2:03:c4:68:
         95:ce:84:58:81:b3:7a:63:f3:bf:23:09:3d:58:0e:86:b9:75:
         4f:87:2b:72:f6:c3:5a:b3:27:8e:cb:54:8d:06:61:7b:86:83:
         77:32:9b:31:e4:97:39:55:c1:7f:9e:a5:80:41:b4:b5:d7:7e:
         06:ac:b6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:18:34 2024 by rpki-client on console-ams.rpki-client.org