Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12ada61c-0087-3ee2-8a30-e435d0252499.roa
File:                     12ada61c-0087-3ee2-8a30-e435d0252499.roa (raw, json)
Hash identifier:          fUuYDM/iXenucDGY0yrWk0T5VKsOfCtwW/Az5cbsMeU=
Subject key identifier:   EC:E1:35:E0:85:C5:53:C9:96:7E:12:5E:9F:6B:AE:0A:97:03:67:37
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4FC3D1DDAF2A5721367C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12ada61c-0087-3ee2-8a30-e435d0252499.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.187.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:fc:3d:1d:da:f2:a5:72:13:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=f4803130-ca29-4d2b-abe5-25a50c5c1fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:14:18:ad:dd:61:5d:5e:5b:f6:e6:10:76:
                    b9:ac:a3:22:f1:b4:5c:9e:b2:d0:0e:31:23:4a:03:
                    a6:db:35:f5:19:83:6f:c3:d9:86:bf:e9:26:c7:19:
                    bd:78:ed:4b:3d:ff:c7:17:31:41:67:c1:b3:b2:69:
                    a9:a8:67:ca:f4:a3:8f:d9:e6:cf:5a:fc:f6:00:24:
                    e4:4c:10:7e:15:a5:bb:31:e8:e6:66:0f:be:34:5f:
                    6e:60:40:f8:f0:9b:73:ff:6b:fb:0e:69:e3:76:a7:
                    ad:88:18:55:bc:57:1f:34:c1:30:8e:54:70:71:1d:
                    25:6f:21:d9:8d:46:66:0a:ca:9e:a8:da:5f:0f:8a:
                    56:0f:ce:c2:4e:30:b5:1a:2c:2e:8b:92:e2:d2:10:
                    5b:6a:4a:a3:92:6d:94:9a:18:33:1b:39:49:b3:37:
                    51:78:b8:6c:38:bb:01:24:f5:b8:3b:c2:6a:fb:fe:
                    0f:44:31:60:a4:ff:82:3e:28:db:4e:95:1a:e3:80:
                    fd:75:44:74:a8:9d:e7:ca:36:f0:1a:e9:30:4d:64:
                    6f:0f:5c:e6:2c:a2:a3:b3:b0:34:c5:7d:32:87:87:
                    f1:ae:97:93:d5:3c:4f:5f:16:d7:03:fc:69:e9:d1:
                    90:33:72:48:a3:a0:62:8a:22:45:c4:35:8c:05:68:
                    fe:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E1:35:E0:85:C5:53:C9:96:7E:12:5E:9F:6B:AE:0A:97:03:67:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12ada61c-0087-3ee2-8a30-e435d0252499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.187.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:04:70:90:97:04:1a:c2:80:eb:8d:ae:c7:a5:01:43:f2:ee:
         2f:dd:79:b1:24:60:f3:20:68:80:45:96:87:9b:e4:5b:37:1f:
         e2:18:df:cf:87:e0:61:d7:9d:23:8c:ee:5c:6a:18:e9:a0:31:
         59:f3:a9:74:49:d4:0f:b2:3a:30:c1:b0:24:0b:d5:e0:14:a8:
         10:d9:a4:03:4f:1c:7f:ad:98:85:32:5d:c1:37:17:1e:d7:30:
         a4:db:38:7e:45:ec:b0:36:3b:a9:50:b3:9f:9b:ff:d8:09:f1:
         22:d9:7a:8b:01:c2:85:e5:93:34:a9:f6:08:6f:4a:f2:e6:e8:
         1e:b8:bf:0c:a2:fc:8e:f9:45:d4:67:6b:af:ee:f5:25:06:15:
         2a:5c:46:00:d6:79:b6:32:ab:89:14:9f:86:18:c2:9a:d9:9e:
         b8:0c:71:77:51:24:0a:79:f2:f4:04:ac:df:64:21:af:e0:bd:
         80:48:82:99:9b:d5:aa:8d:17:da:0a:0f:db:d8:0a:00:fa:83:
         81:dd:4c:6f:ff:a3:9d:b7:43:81:09:06:bf:29:ef:8f:06:e8:
         ec:6b:78:92:dd:9b:da:0d:69:ef:8a:41:5e:65:f2:91:02:7b:
         00:b2:04:6e:a2:cb:57:70:6d:57:30:ee:70:07:89:1f:9e:17:
         90:fd:54:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:00 2024 by rpki-client on console-fra.rpki-client.org