Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f5a3a356-cc71-3430-b0a2-3763c1a9a313.roa
File:                     f5a3a356-cc71-3430-b0a2-3763c1a9a313.roa (raw, json)
Hash identifier:          YzRqRybpgC05Faow/G0McBX4FH1CvcAIEoLbyramcHA=
Subject key identifier:   12:28:63:86:66:12:CC:08:8A:F7:AA:63:A5:AC:0F:3C:D5:84:A4:AC
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F43285845174AE43A3FF9199298418040
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f5a3a356-cc71-3430-b0a2-3763c1a9a313.roa
Signing time:             Mon 04 Mar 2024 02:00:26 +0000
ROA not before:           Mon 04 Mar 2024 02:00:26 +0000
ROA not after:            Sun 02 Jun 2024 01:00:26 +0000
asID:                     237
IP address blocks:        35.46.0.0/18 maxlen: 18
                          35.46.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:4a:e4:3a:3f:f9:19:92:98:41:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Mar  4 02:00:26 2024 GMT
            Not After : Jun  2 01:00:26 2024 GMT
        Subject: CN=83f6b0c3-da21-4227-aae2-0661b8cd29eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:8b:7c:f3:63:e8:8a:a8:eb:52:f6:9c:7c:
                    a5:ec:7e:96:c2:5b:00:12:32:41:be:3e:20:65:d1:
                    a6:93:73:a9:43:4b:74:8a:2d:bd:27:57:90:75:8d:
                    8c:20:d9:4d:6a:41:d9:95:af:fc:db:8f:23:69:23:
                    d6:96:75:0b:26:db:3e:44:38:cd:2b:13:0e:0e:13:
                    84:2c:6a:b5:bc:8c:97:d5:37:97:63:f5:65:27:bc:
                    2b:07:36:ea:f9:c0:42:e8:fb:49:d3:8f:fa:71:59:
                    41:f4:e7:6b:a4:72:1b:8b:70:1b:e1:86:6a:95:e8:
                    80:7d:de:dc:56:67:22:cb:42:4d:f8:a5:80:26:14:
                    02:ce:51:72:da:6b:e3:54:5b:61:58:39:19:a2:64:
                    65:05:5c:0f:5c:81:15:3b:21:f4:a5:54:c4:56:7e:
                    db:ab:cc:03:41:75:37:d2:e6:7e:c4:d7:c5:9b:b8:
                    ab:c5:44:ed:d9:88:a5:c6:57:5d:44:66:8b:fd:ea:
                    d5:cc:52:37:9f:a9:f5:1c:42:34:64:0e:a0:a2:9b:
                    1a:d6:d0:16:c9:5e:9c:df:87:ac:77:f9:fa:b2:ed:
                    49:2c:62:b0:87:7a:d2:0e:72:3c:a5:c7:47:d2:6b:
                    11:46:c5:12:0d:f2:0a:c8:1c:94:6a:38:74:3a:71:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:28:63:86:66:12:CC:08:8A:F7:AA:63:A5:AC:0F:3C:D5:84:A4:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f5a3a356-cc71-3430-b0a2-3763c1a9a313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.46.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:cf:e0:4f:65:01:80:f4:28:87:e9:81:e6:ea:f8:c9:b0:99:
         15:02:23:b1:3a:33:03:30:55:e4:25:4b:e8:ee:96:88:b7:3e:
         c6:6f:f6:63:80:9f:70:2a:ed:e6:37:23:ee:09:65:e6:09:0e:
         a5:0e:31:1a:c0:c8:a7:aa:29:73:a9:5f:4b:04:51:4d:ea:1d:
         58:76:40:b7:a8:ce:ff:8f:33:76:b3:1c:b6:3a:88:08:b0:37:
         fe:9b:d1:6d:b6:f0:49:82:05:fe:5b:83:b6:61:6b:fb:75:65:
         af:bc:eb:c2:35:ed:4a:80:f0:72:24:d1:70:09:a4:68:9e:3e:
         b7:a4:4e:dd:a3:d5:a5:e6:12:8a:77:d5:6e:4c:97:86:56:bb:
         a7:2f:c0:71:94:8b:93:86:00:31:49:97:2f:f5:73:5a:fe:d2:
         17:8d:37:0f:ef:56:bc:d0:b0:be:2b:9d:89:c3:22:39:ef:ff:
         55:97:bd:2f:a6:13:5e:3e:4a:d6:90:99:6e:17:26:90:b2:c7:
         94:e9:99:ca:0f:d9:7e:b2:e1:fc:ff:bf:94:86:a5:3c:ec:23:
         d7:0a:ba:e2:39:61:84:43:f7:ab:d5:45:d0:ef:ea:bf:d3:77:
         6d:ba:76:b3:02:71:e4:5a:d0:7d:b7:e0:f3:94:1c:9e:98:6a:
         db:e3:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 12:14:46 2024 by rpki-client on console-ams.rpki-client.org