Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/88cfb93c-155c-3b0d-be04-aa21f30fa493.roa
File:                     88cfb93c-155c-3b0d-be04-aa21f30fa493.roa (raw, json)
Hash identifier:          YNKNX6oyszysbm0v1kREIjAmV1zUNRCyIPK2Y30JsH0=
Subject key identifier:   98:5A:8B:DA:6F:01:CC:54:45:D4:DE:DC:46:CF:EB:F3:44:CE:C0:AB
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285844FCC563EBC4DB82E607C93C40
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/88cfb93c-155c-3b0d-be04-aa21f30fa493.roa
Signing time:             Fri 23 Feb 2024 14:00:31 +0000
ROA not before:           Fri 23 Feb 2024 14:00:31 +0000
ROA not after:            Thu 23 May 2024 13:00:31 +0000
asID:                     395638
IP address blocks:        35.62.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:c5:63:eb:c4:db:82:e6:07:c9:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Feb 23 14:00:31 2024 GMT
            Not After : May 23 13:00:31 2024 GMT
        Subject: CN=40d6d085-0ee1-4d72-a3b0-a29be2eeb7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:32:50:66:e2:42:d5:8a:0a:83:64:65:3b:
                    3a:1f:0a:0c:4b:4b:2f:7b:95:7b:5a:24:de:a0:9f:
                    bf:8c:b3:5b:93:bb:8e:12:72:d8:89:13:52:68:03:
                    50:35:5e:53:25:ce:6a:1e:bf:d1:76:a7:14:8d:ae:
                    44:1e:5f:85:e5:c5:45:39:c0:78:b6:db:74:cd:0f:
                    7c:58:8f:4d:27:27:9e:db:f6:d4:df:49:fd:7c:a3:
                    69:d1:76:18:fb:4c:ae:f5:b1:03:f2:02:89:7c:87:
                    5f:b2:b2:37:eb:5e:31:14:8b:1d:cc:ac:b9:25:fa:
                    1b:5d:70:c1:2e:8c:a4:b5:85:d2:d3:5c:95:d0:97:
                    9c:5a:69:89:d6:39:23:c4:21:6f:e3:72:44:9f:89:
                    bf:a2:41:d9:c4:c4:9a:ea:f3:39:90:29:d2:13:c7:
                    08:7e:89:9e:76:61:46:1e:01:33:51:5c:e5:d2:88:
                    9c:44:56:d5:17:ed:40:f8:f9:cb:e7:24:89:f1:bb:
                    25:73:73:e8:c3:25:14:50:6f:b9:ba:df:fe:88:cc:
                    05:77:64:1b:28:55:08:d6:a9:4f:67:16:17:de:c9:
                    fd:f9:23:4e:06:47:5a:7b:f7:b9:22:d4:d3:d7:dd:
                    0b:76:a5:22:be:63:ff:c5:ea:ac:75:db:f3:a9:10:
                    90:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5A:8B:DA:6F:01:CC:54:45:D4:DE:DC:46:CF:EB:F3:44:CE:C0:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/88cfb93c-155c-3b0d-be04-aa21f30fa493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.62.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:79:96:8a:87:84:f4:97:7c:c8:13:47:3a:36:bd:51:a8:e8:
         46:0e:b5:6e:78:18:29:79:da:2f:d6:92:38:c2:14:c9:3d:d4:
         40:08:c1:5f:a6:45:e2:5e:d1:bf:61:1a:13:45:b6:c4:3c:1c:
         87:b3:94:8e:28:85:50:37:4e:01:bf:93:4a:e8:03:e0:c7:58:
         a1:e1:d4:a9:a9:c7:4a:a1:46:03:6e:60:56:d1:84:2f:42:c9:
         ba:9f:2f:e0:9f:2d:5b:b6:11:3c:dc:66:4c:89:29:00:02:8b:
         5c:64:0f:9b:57:47:8b:50:0f:52:69:96:27:4a:68:fa:a1:32:
         b7:b7:6e:d4:73:b9:7b:48:92:ef:dd:58:54:24:36:86:9e:1d:
         dd:86:9e:a8:5f:23:fa:30:38:8f:01:2e:cf:03:40:a0:97:c4:
         72:95:38:55:5a:96:ca:d0:8a:74:44:aa:16:98:02:95:89:4d:
         21:d0:10:8d:f3:fb:8c:97:e2:f5:f5:03:d9:f9:6d:c8:6b:d2:
         47:fd:c3:fb:bf:b5:0b:19:de:7d:db:71:3e:ea:e5:2e:e7:70:
         96:73:cd:c2:17:86:8f:49:c2:25:c4:c1:e1:49:8b:ef:9d:db:
         bc:65:76:47:91:1f:0b:53:ac:a6:4f:53:d2:0a:07:10:59:4e:
         53:d8:ab:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET8xWPrxNuC5gfJPEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk
ZWZlMB4XDTI0MDIyMzE0MDAzMVoXDTI0MDUyMzEzMDAzMVowLzEtMCsGA1UEAxMk
NDBkNmQwODUtMGVlMS00ZDcyLWEzYjAtYTI5YmUyZWViN2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtIyUGbiQtWKCoNkZTs6HwoMS0sve5V7WiTe
oJ+/jLNbk7uOEnLYiRNSaANQNV5TJc5qHr/RdqcUja5EHl+F5cVFOcB4ttt0zQ98
WI9NJyee2/bU30n9fKNp0XYY+0yu9bED8gKJfIdfsrI3614xFIsdzKy5JfobXXDB
LoyktYXS01yV0JecWmmJ1jkjxCFv43JEn4m/okHZxMSa6vM5kCnSE8cIfomedmFG
HgEzUVzl0oicRFbVF+1A+PnL5ySJ8bslc3PowyUUUG+5ut/+iMwFd2QbKFUI1qlP
ZxYX3sn9+SNOBkdae/e5ItTT190LdqUivmP/xeqsddvzqRCQZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJhai9pvAcxURdTe3EbP6/NEzsCrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz
MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvODhjZmI5M2MtMTU1Yy0z
YjBkLWJlMDQtYWEyMWYzMGZhNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz
MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4
ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm
ODc1OGRlZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIz4IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADl5loqHhPSXfMgTRzo2vVGo6EYOtW54GCl52i/WkjjCFMk91EAIwV+m
ReJe0b9hGhNFtsQ8HIezlI4ohVA3TgG/k0roA+DHWKHh1Kmpx0qhRgNuYFbRhC9C
ybqfL+CfLVu2ETzcZkyJKQACi1xkD5tXR4tQD1JplidKaPqhMre3btRzuXtIku/d
WFQkNoaeHd2GnqhfI/owOI8BLs8DQKCXxHKVOFValsrQinREqhaYApWJTSHQEI3z
+4yX4vX1A9n5bchr0kf9w/u/tQsZ3n3bcT7q5S7ncJZzzcIXho9JwiXEweFJi++d
27xldkeRHwtTrKZPU9IKBxBZTlPYq+k=
-----END CERTIFICATE-----
Generated at Sun May 12 19:16:43 2024 by rpki-client on console-ams.rpki-client.org