Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/de5de0e7-d6b0-3bdb-8fba-598d34c2a6e4.roa
File:                     de5de0e7-d6b0-3bdb-8fba-598d34c2a6e4.roa (raw, json)
Hash identifier:          CjBbur4s5g4ZE5mvzWxuAasYkjErmvJ6x8R0ZQY1DXU=
Subject key identifier:   B8:76:B0:EC:74:1E:0C:7C:25:3D:C8:8D:89:D5:20:BC:0A:50:E7:64
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285847B531529079D37A665FC34840
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/de5de0e7-d6b0-3bdb-8fba-598d34c2a6e4.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     237
IP address blocks:        35.16.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:52:90:79:d3:7a:66:5f:c3:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=79a5fb47-fa34-4d90-8fa0-0dba030f7b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:91:7a:61:e5:71:88:9d:a8:63:f0:60:68:f1:
                    1b:5a:70:9a:25:ad:5f:05:1f:be:05:31:20:2e:2e:
                    51:17:3c:52:f0:1c:93:22:b7:9c:b2:ac:8e:ac:64:
                    af:95:d7:26:e8:3d:dc:57:5b:db:9b:f3:26:e4:b8:
                    fa:bf:31:d7:7e:c0:c5:97:63:64:a0:e4:eb:b2:36:
                    09:1d:3c:e8:c8:96:ee:dc:ac:37:b1:8c:a9:d5:0d:
                    9e:69:00:06:b3:8b:ca:53:90:b7:e7:56:e1:e0:ba:
                    e8:ad:2c:76:fc:33:7d:be:6a:82:57:63:da:ee:aa:
                    dd:b4:23:f9:2c:e4:33:af:3e:a3:28:14:34:33:78:
                    8d:a4:8a:cb:79:aa:25:43:a6:2b:0b:e9:0e:ef:2f:
                    17:ae:4b:ab:cf:4b:a6:f6:ca:b6:61:5d:09:80:17:
                    56:a1:b3:7b:29:4c:19:51:8d:30:4e:ae:6d:5f:78:
                    b2:6a:4f:e2:95:3d:21:ef:27:8f:a3:89:f0:fb:06:
                    d1:2c:0b:71:bc:b3:e8:f1:92:fa:a7:fa:55:51:e9:
                    9f:e1:23:af:14:37:16:b0:c5:00:9f:8f:7e:13:71:
                    e0:3b:27:25:67:01:74:f0:20:48:06:37:36:a1:00:
                    b5:98:b1:d4:10:b2:f4:65:e3:bb:13:53:e6:1f:42:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:76:B0:EC:74:1E:0C:7C:25:3D:C8:8D:89:D5:20:BC:0A:50:E7:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/de5de0e7-d6b0-3bdb-8fba-598d34c2a6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:76:4c:2f:79:07:02:96:6c:5a:6a:df:0c:5f:a3:43:6b:69:
         70:9d:cb:ba:8e:af:42:34:80:78:68:d9:4e:83:b4:01:f1:4d:
         9c:9a:72:db:a6:5d:d6:c5:bc:31:9e:7b:a8:a5:7c:f8:c7:9c:
         dc:42:c5:9a:d8:35:0c:cb:44:69:d5:b0:4c:6e:0b:a2:04:d7:
         92:0b:1d:87:09:22:d6:76:6c:1e:ef:7d:92:2c:ed:e5:38:da:
         3f:36:e5:a4:2d:bd:41:d2:1f:6b:c7:2a:00:a9:56:94:d1:06:
         a1:1c:7b:fb:98:93:8c:5e:73:46:7f:fc:4a:63:df:a0:75:a2:
         85:b0:fc:4b:13:9b:0c:1a:a5:41:df:26:ff:31:46:82:11:f8:
         b5:6b:ae:3f:14:2d:b1:8c:12:b1:13:16:05:71:4c:de:58:3d:
         c9:9b:ae:9b:3d:6a:9a:9b:30:e4:21:a4:46:e0:bd:29:25:9b:
         c0:f7:9f:1e:36:00:30:0a:83:4b:73:16:4f:8b:d3:3f:5b:0c:
         8f:94:0e:c1:40:5d:ad:a5:3c:d8:da:08:fb:57:da:e0:03:84:
         4b:17:0d:ae:1b:29:22:f9:c7:3f:e4:f7:30:dd:45:79:02:15:
         6c:9f:02:da:27:4d:95:e4:89:f7:3f:e5:38:ff:21:0e:4b:7e:
         e7:f9:5a:88
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEe1MVKQedN6Zl/DSEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk
ZWZlMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk
NzlhNWZiNDctZmEzNC00ZDkwLThmYTAtMGRiYTAzMGY3YjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpF6YeVxiJ2oY/BgaPEbWnCaJa1fBR++BTEg
Li5RFzxS8ByTIrecsqyOrGSvldcm6D3cV1vbm/Mm5Lj6vzHXfsDFl2NkoOTrsjYJ
HTzoyJbu3Kw3sYyp1Q2eaQAGs4vKU5C351bh4LrorSx2/DN9vmqCV2Pa7qrdtCP5
LOQzrz6jKBQ0M3iNpIrLeaolQ6YrC+kO7y8Xrkurz0um9sq2YV0JgBdWobN7KUwZ
UY0wTq5tX3iyak/ilT0h7yePo4nw+wbRLAtxvLPo8ZL6p/pVUemf4SOvFDcWsMUA
n49+E3HgOyclZwF08CBIBjc2oQC1mLHUELL0ZeO7E1PmH0LdIwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLh2sOx0Hgx8JT3IjYnVILwKUOdkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz
MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvZGU1ZGUwZTctZDZiMC0z
YmRiLThmYmEtNTk4ZDM0YzJhNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz
MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4
ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm
ODc1OGRlZmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIxAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkXZML3kHApZsWmrfDF+jQ2tpcJ3Luo6vQjSAeGjZToO0AfFNnJpy26Zd
1sW8MZ57qKV8+Mec3ELFmtg1DMtEadWwTG4LogTXkgsdhwki1nZsHu99kizt5Tja
PzblpC29QdIfa8cqAKlWlNEGoRx7+5iTjF5zRn/8SmPfoHWihbD8SxObDBqlQd8m
/zFGghH4tWuuPxQtsYwSsRMWBXFM3lg9yZuumz1qmpsw5CGkRuC9KSWbwPefHjYA
MAqDS3MWT4vTP1sMj5QOwUBdraU82NoI+1fa4AOESxcNrhspIvnHP+T3MN1FeQIV
bJ8C2idNleSJ9z/lOP8hDkt+5/laiA==
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:09 2024 by rpki-client on console-fra.rpki-client.org