Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/e43a7c9e-6e48-36b0-8209-aa1e9e68f275.roa
File:                     e43a7c9e-6e48-36b0-8209-aa1e9e68f275.roa (raw, json)
Hash identifier:          eDVT+jdez1Km7Hbfph+YI+lH7qWOcEu23DKGvNwbSRc=
Subject key identifier:   9E:94:A5:A6:EA:C6:DA:34:D4:26:8F:02:74:66:B2:AD:A7:3D:9D:D4
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285847CFD4D5DB14B46FE95A681B40
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/e43a7c9e-6e48-36b0-8209-aa1e9e68f275.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     400066
IP address blocks:        35.11.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d5:db:14:b4:6f:e9:5a:68:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=b23c5032-f75c-4c3c-ab2e-1cd8323a8200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:42:af:e8:d0:d9:f8:df:8b:b6:fc:24:7c:
                    9a:1f:5f:79:1d:60:7f:96:1c:4f:45:c8:bf:5e:f7:
                    87:f9:22:ea:3b:82:90:c4:aa:a0:2d:fc:ec:48:7b:
                    e8:72:50:39:40:00:ae:ed:d5:0c:76:ff:cd:20:33:
                    c0:ab:69:2c:bb:5a:8e:ce:c6:f9:ba:65:34:51:73:
                    a4:da:c4:a5:a4:61:00:8c:f0:9f:68:f5:e1:d7:66:
                    1d:2a:85:4e:2a:eb:34:c7:00:17:44:7b:fa:87:cc:
                    b5:00:e9:26:f6:a9:d9:39:ee:e7:49:d9:45:6e:69:
                    1e:14:9d:90:30:4d:0b:dd:eb:53:c1:8e:29:8d:ff:
                    4d:24:cb:1c:11:92:79:b7:ee:ff:5b:c4:ec:75:08:
                    c4:c6:a6:04:10:cb:40:c3:64:b7:30:c3:32:fb:9d:
                    21:9d:87:2b:e1:a9:06:a9:0b:97:d0:d9:61:38:ee:
                    77:bc:fd:88:52:2c:3d:a5:82:6f:7c:df:db:e8:50:
                    dd:4c:e5:dc:ea:8d:df:65:90:2a:71:f9:4a:fe:9b:
                    0a:69:6a:08:cf:d0:34:40:da:12:b0:a3:88:ae:a3:
                    d3:23:9b:72:cc:19:1a:5c:f5:25:d9:7a:5f:b9:7e:
                    39:e0:eb:77:b6:ca:29:f0:f2:11:1a:f3:b7:9a:aa:
                    c7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:94:A5:A6:EA:C6:DA:34:D4:26:8F:02:74:66:B2:AD:A7:3D:9D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/e43a7c9e-6e48-36b0-8209-aa1e9e68f275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.11.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c2:af:78:32:44:0d:42:0d:d5:12:d0:c0:96:6f:e7:8a:a0:
         56:a3:4d:f9:60:ca:0e:36:7e:8d:bf:2e:78:79:c5:e7:20:82:
         f9:8f:2e:02:73:a0:63:31:c2:35:ee:b6:f9:20:fc:50:ed:e9:
         28:90:35:6c:69:b0:42:06:1b:33:6b:1f:ce:7b:45:c7:37:4a:
         2e:7c:ae:9c:e9:c5:fa:5d:88:20:23:de:17:75:46:df:b3:75:
         6e:ec:52:90:ac:7e:eb:dd:28:6f:8f:09:88:12:69:8b:b9:2a:
         77:c8:6d:3a:67:3a:f8:6d:39:ae:f4:7b:62:67:3a:b6:5d:5f:
         c3:6f:34:2d:a8:4b:3a:46:24:b5:a5:5f:de:1b:a0:76:1e:d3:
         d0:8d:a6:4c:98:5a:1f:21:c1:7d:c4:99:12:e7:8a:a4:38:13:
         09:e0:40:6e:f0:e0:6f:8f:f8:1b:0a:f2:5a:66:50:4f:53:85:
         92:e6:b2:b0:90:ec:10:b4:03:79:a2:ad:3f:db:d3:47:0d:82:
         87:11:ca:3f:be:f7:43:4d:1c:01:89:f1:97:e5:37:9e:3b:e6:
         7a:71:3e:99:c1:1f:17:d4:f3:8d:45:36:14:9b:dd:57:6e:ac:
         7b:5e:bb:b2:08:b9:ee:97:1e:a6:31:7d:3b:42:f7:c5:6a:97:
         e2:6e:8a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:00 2024 by rpki-client on console-ams.rpki-client.org