Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/884763ea-5eee-3437-a700-182a36503d81.roa
File:                     884763ea-5eee-3437-a700-182a36503d81.roa (raw, json)
Hash identifier:          p9eGELEa8HlFSOrMaMQjoFHBA5YvSVxJ2WBAZ11WrM0=
Subject key identifier:   74:87:A0:C5:70:0C:CA:5C:AE:A0:7D:EF:DF:EB:B2:6E:D1:D3:C9:35
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F432858451CE038D0B60686B9071F5180
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/884763ea-5eee-3437-a700-182a36503d81.roa
Signing time:             Wed 06 Mar 2024 02:00:25 +0000
ROA not before:           Wed 06 Mar 2024 02:00:25 +0000
ROA not after:            Tue 04 Jun 2024 01:00:25 +0000
asID:                     36375
IP address blocks:        35.7.64.0/19 maxlen: 19
                          35.7.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1c:e0:38:d0:b6:06:86:b9:07:1f:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Mar  6 02:00:25 2024 GMT
            Not After : Jun  4 01:00:25 2024 GMT
        Subject: CN=10e637d7-80fe-4a48-9ed7-b08aa5f1fba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:2a:c2:0e:44:7e:e4:24:fe:8f:31:16:a6:
                    04:51:db:c6:d4:eb:76:7d:ee:44:41:51:b5:97:a5:
                    aa:59:67:8c:8d:03:68:c7:e5:12:ea:e9:d7:0f:90:
                    24:cb:12:0b:c9:38:ad:66:fa:3a:a8:1a:83:00:1a:
                    e6:e3:7d:05:ed:4d:5f:4e:a5:de:ce:6e:d3:0b:7b:
                    19:81:c1:09:7f:8b:7d:ed:8f:c9:a9:df:d9:60:ff:
                    28:0c:12:09:0f:46:26:c7:03:be:fe:16:3b:da:3a:
                    b6:18:a4:c2:b9:1a:6b:51:5e:2e:53:be:02:06:ab:
                    fd:4b:f0:32:8d:ee:c0:80:7a:61:a9:be:16:85:e7:
                    7e:46:3b:94:4e:f5:fb:ae:28:6c:62:66:87:12:51:
                    90:40:dd:f0:6c:41:35:6a:49:14:4b:17:4a:14:b3:
                    82:b8:c0:19:d8:9d:7b:50:5e:44:94:65:29:a4:d9:
                    7d:4b:50:28:05:50:0f:44:1e:ef:9e:8f:d9:2e:d1:
                    24:fb:ed:67:7c:f1:7c:f7:87:8f:3a:ac:d9:83:8d:
                    3d:d8:04:94:9f:e6:3c:70:05:fc:a9:f3:e3:10:31:
                    fc:25:a5:08:0a:6d:09:97:40:48:00:06:27:ad:f6:
                    63:25:27:e1:a9:a5:0c:8c:99:13:a0:01:ca:44:80:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:87:A0:C5:70:0C:CA:5C:AE:A0:7D:EF:DF:EB:B2:6E:D1:D3:C9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/884763ea-5eee-3437-a700-182a36503d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.7.64.0-35.7.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:08:bd:eb:26:49:0a:06:a7:5c:05:70:81:fc:61:2e:f4:77:
         b7:f1:9a:1c:a1:0a:fd:f9:72:89:39:18:c0:9d:d1:6b:f8:c2:
         f1:ec:9f:6f:9e:cb:7b:fd:11:c9:af:85:22:e3:24:06:00:b4:
         cd:ff:10:a5:2c:9b:67:04:29:5e:05:25:89:63:88:c2:a2:39:
         c5:89:b1:f1:10:be:57:4e:12:f9:36:58:78:bd:ad:da:43:57:
         3f:13:c8:4e:1f:80:c3:fb:07:79:52:b2:3c:f1:d7:b2:28:08:
         28:5c:97:cc:08:80:84:5a:c7:ec:f4:2a:b5:01:75:eb:f0:77:
         f0:bb:6a:e6:66:af:de:1d:58:db:0d:85:a4:71:65:48:22:e9:
         6f:72:f1:b1:f8:9d:7d:c0:66:b7:e0:a4:6b:b3:78:f5:77:08:
         e6:a7:69:a4:72:31:4f:2e:de:1d:e5:cc:be:0a:a8:72:40:c2:
         fd:31:36:ad:af:f0:c0:06:e9:7f:62:cc:c6:a2:fe:37:08:1c:
         d8:cf:33:8e:cb:34:76:cd:88:f1:0f:b1:58:d7:23:a6:00:c0:
         ae:40:02:8c:ac:84:75:b1:b7:aa:88:f8:a9:c1:6e:aa:91:52:
         db:b5:01:16:d6:ed:71:ba:23:19:a3:7e:21:63:4e:3d:05:87:
         7b:d2:de:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:38:34 2024 by rpki-client on console-ams.rpki-client.org