Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa
File:                     bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa (raw, json)
Hash identifier:          I8VcD1lyJ08EH7jTj3MuJbMBpKVYzbfbUCKCon2p24s=
Subject key identifier:   BD:CF:58:E3:6C:74:D8:BE:8F:D6:58:8A:F9:61:B4:21:53:DF:1E:F4
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285847B53152C02F378E60F2B346A0
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     237
IP address blocks:        35.38.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:52:c0:2f:37:8e:60:f2:b3:46:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=9cf6a228-c074-4c1b-9138-f1e3cb101735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:82:d9:f3:23:5d:75:0a:1c:15:4d:3c:60:
                    fb:9f:25:4a:f1:8b:aa:e8:7c:b4:0f:54:48:5b:37:
                    42:ea:4e:da:8c:d2:11:95:64:33:03:98:2a:76:d4:
                    d4:16:5c:a3:8f:22:eb:3c:ef:86:c6:cc:3b:5e:33:
                    71:ce:28:91:1f:15:b8:7d:37:6f:4b:ef:dc:bc:23:
                    aa:7f:76:ac:e5:ac:bb:13:7f:df:56:cf:cb:1a:e9:
                    ba:ca:16:c6:c9:38:a0:7b:0f:60:30:f7:aa:64:72:
                    a2:a9:e7:e3:99:74:28:e6:b4:ab:cb:a3:86:9b:cc:
                    1c:89:ab:b5:d1:17:fa:37:4f:20:04:26:ab:bc:9e:
                    33:e9:52:69:e2:0a:87:59:05:3b:f7:33:73:cf:e1:
                    39:9b:c0:50:cb:b1:9d:b5:00:d5:6d:0d:cf:8a:d8:
                    7e:33:f8:dd:00:f1:5b:7e:28:fc:87:32:4b:a2:ed:
                    1e:21:97:9d:ea:88:09:1e:d3:0f:a1:8b:bc:71:5d:
                    11:37:3f:a6:a5:2f:a8:78:f8:73:67:19:69:b2:f0:
                    7a:7d:4d:ac:fa:e2:5b:fc:c5:24:fc:c5:d5:eb:6a:
                    7d:a4:53:16:79:f0:75:cd:2e:75:09:0b:af:01:ff:
                    e8:aa:71:eb:05:33:19:5b:b8:20:36:f4:50:34:2a:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CF:58:E3:6C:74:D8:BE:8F:D6:58:8A:F9:61:B4:21:53:DF:1E:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.38.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:12:9f:35:06:fe:ae:20:8a:e9:f7:c1:d7:0e:fc:56:27:67:
         33:12:56:2e:97:65:11:97:67:ee:c0:40:b0:9d:f9:95:5c:76:
         b2:e9:36:60:ec:6b:07:d1:85:63:fb:34:92:a2:b1:29:6e:bc:
         d0:28:bd:8a:0b:77:cb:83:9f:da:b2:f9:38:4f:ce:83:bb:7f:
         48:66:e3:a6:96:f3:6b:f9:6e:f7:b3:16:b7:e4:d8:2f:e0:28:
         9b:3a:fc:09:49:50:59:51:26:77:4a:dd:a5:0d:1b:b6:de:e2:
         2f:10:86:fc:99:94:38:f6:40:a3:38:46:7f:90:39:60:b0:06:
         5a:14:13:b7:4e:13:52:b5:8d:03:5f:24:f3:dc:0c:2c:8b:fc:
         81:ad:9b:d9:ce:2a:44:e2:ea:70:7b:83:2f:83:96:8d:30:8a:
         86:a6:37:35:ff:12:e9:cc:03:c8:01:c7:26:76:8e:e8:b2:cb:
         8d:ee:65:cb:36:a2:3e:61:a0:d4:c3:37:cd:79:53:d4:3a:c1:
         c7:7f:74:af:8d:e9:a1:ac:01:ae:c5:67:4b:89:68:79:a8:af:
         7f:e0:83:9e:2c:0a:0b:3b:c5:4a:ad:f0:1f:a5:85:8c:b3:2d:
         65:31:21:9c:b8:d5:05:83:60:6b:3a:bb:4c:dc:67:97:4f:83:
         e9:68:33:a8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEe1MVLALzeOYPKzRqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk
ZWZlMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk
OWNmNmEyMjgtYzA3NC00YzFiLTkxMzgtZjFlM2NiMTAxNzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZmC2fMjXXUKHBVNPGD7nyVK8Yuq6Hy0D1RI
WzdC6k7ajNIRlWQzA5gqdtTUFlyjjyLrPO+Gxsw7XjNxziiRHxW4fTdvS+/cvCOq
f3as5ay7E3/fVs/LGum6yhbGyTigew9gMPeqZHKiqefjmXQo5rSry6OGm8wciau1
0Rf6N08gBCarvJ4z6VJp4gqHWQU79zNzz+E5m8BQy7GdtQDVbQ3Pith+M/jdAPFb
fij8hzJLou0eIZed6ogJHtMPoYu8cV0RNz+mpS+oePhzZxlpsvB6fU2s+uJb/MUk
/MXV62p9pFMWefB1zS51CQuvAf/oqnHrBTMZW7ggNvRQNCrxWQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL3PWONsdNi+j9ZYivlhtCFT3x70MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz
MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvYmQ2MjJjOGMtOThjNC0z
MzE5LWE2OTAtZDUyYTI3YmMyZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz
MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4
ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm
ODc1OGRlZmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIyYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaRKfNQb+riCK6ffB1w78VidnMxJWLpdlEZdn7sBAsJ35lVx2suk2YOxr
B9GFY/s0kqKxKW680Ci9igt3y4Of2rL5OE/Og7t/SGbjppbza/lu97MWt+TYL+Ao
mzr8CUlQWVEmd0rdpQ0btt7iLxCG/JmUOPZAozhGf5A5YLAGWhQTt04TUrWNA18k
89wMLIv8ga2b2c4qROLqcHuDL4OWjTCKhqY3Nf8S6cwDyAHHJnaO6LLLje5lyzai
PmGg1MM3zXlT1DrBx390r43poawBrsVnS4loeaivf+CDniwKCzvFSq3wH6WFjLMt
ZTEhnLjVBYNgazq7TNxnl0+D6WgzqA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:00 2024 by rpki-client on console-ams.rpki-client.org