Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa
File:                     00848c69-e0a2-30a1-87c4-14728f62595e.roa (raw, json)
Hash identifier:          l0qidHv69+rgt5U4BOPSksoqCU/MUFjqAgbWYdEvkwI=
Subject key identifier:   D4:4C:20:28:DE:54:F2:01:2E:D0:B0:2C:5C:03:DB:74:6D:C2:FB:4A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F51C4B747E9BDE705B7700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.192.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:1c:4b:74:7e:9b:de:70:5b:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=eafe8bc5-a111-4dba-bb18-58b820ed0c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:74:0c:c9:9a:b4:e7:dc:14:fa:98:83:88:
                    83:07:96:fb:39:6c:e6:9c:1b:02:d7:7c:69:63:18:
                    96:66:23:92:e9:8b:e1:27:a7:f7:eb:34:2a:88:5b:
                    5c:20:e9:a1:17:64:b0:42:30:0d:97:4c:01:65:e0:
                    57:cb:c8:8f:54:34:2e:c8:2e:99:d8:62:82:a2:b2:
                    03:dd:70:20:aa:c2:36:de:42:d3:a0:e2:2d:e9:72:
                    a4:d9:66:13:10:88:6c:fe:ab:f0:7f:38:42:b0:d6:
                    ad:e5:ef:ac:c3:d8:32:04:97:bb:fa:28:86:3f:97:
                    d7:30:cf:95:ea:22:61:d9:8d:d1:a7:a2:f7:40:d9:
                    38:6f:3f:e8:85:74:22:56:1e:42:65:5e:f9:71:57:
                    30:8e:7f:5d:bc:1b:80:ea:9f:7b:a8:9b:4a:fb:44:
                    72:1c:23:ed:cc:7c:7b:1b:59:25:c6:73:53:91:58:
                    f9:a3:d2:13:3f:b1:89:8d:64:af:69:50:8a:1f:f7:
                    f3:30:ff:09:99:26:7d:94:0c:7d:f0:a7:a4:e8:57:
                    5e:9e:34:ef:ba:a1:2a:63:98:80:92:4a:5c:b3:77:
                    23:a2:91:fe:a0:7f:01:43:89:3e:48:86:8e:28:df:
                    fd:42:d4:2a:8f:e9:83:16:05:58:7e:ac:57:ff:fc:
                    a5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4C:20:28:DE:54:F2:01:2E:D0:B0:2C:5C:03:DB:74:6D:C2:FB:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.192.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6d:a3:b9:19:69:b0:b4:62:6d:56:1e:30:92:5a:5e:6d:07:
         9b:ec:a1:d2:fa:ab:d1:d2:67:64:30:78:13:4c:e4:dd:db:00:
         86:77:fb:53:14:52:31:07:4f:27:6f:d2:b2:9c:ea:24:d9:b6:
         7d:ec:ff:54:89:a1:47:91:30:22:c4:b8:32:c6:c0:6f:ee:3a:
         72:8e:20:63:d8:81:0a:e8:63:f1:eb:fb:9a:fb:75:72:34:c1:
         fc:4a:55:71:2f:85:d5:37:42:24:6e:06:65:c8:76:f8:90:57:
         f3:bd:4c:cd:3e:0a:9c:96:88:03:01:4a:de:9d:1c:2e:a2:a0:
         7d:12:7d:30:39:2b:4d:1b:f1:68:b7:71:86:fe:90:fd:40:9e:
         86:26:dc:70:6b:92:1c:c4:8d:6b:50:a9:d3:08:fb:7a:ae:87:
         c5:b6:f8:0e:df:bd:a4:78:3b:da:6c:3f:8b:3d:01:73:7c:7a:
         62:f6:08:c1:e1:ed:06:90:b0:7f:d3:a1:07:0f:41:2c:88:02:
         ba:a1:df:4c:d4:56:55:3a:14:2b:17:0c:fa:8f:8f:e4:63:2a:
         64:1c:eb:7a:51:3b:39:31:6d:02:a1:da:dc:aa:a5:fa:12:78:
         3d:da:f1:6c:d4:27:61:50:2d:eb:06:78:30:03:30:bd:73:77:
         43:d5:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:55 2024 by rpki-client on console-fra.rpki-client.org