Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12c52561-a470-3c72-b6ab-a7363cbacf79.roa
File:                     12c52561-a470-3c72-b6ab-a7363cbacf79.roa (raw, json)
Hash identifier:          S5sQ3F4Pg2/HC3MMa38DDnyHCRFPuFe8Z/e0TpJDnEk=
Subject key identifier:   45:71:49:46:13:95:04:63:E4:AE:77:CA:4F:7A:47:8B:F9:98:96:B8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4FADBB23C2515CA67E580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12c52561-a470-3c72-b6ab-a7363cbacf79.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.222.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:fa:db:b2:3c:25:15:ca:67:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=e4d18407-b722-4869-b749-78cedb4c04b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:9a:bc:9f:a8:3f:0f:b5:98:98:7c:86:b9:
                    0c:8c:4d:f8:ff:9c:bc:9d:fc:04:3b:75:34:77:3e:
                    b4:b7:b6:75:06:43:4e:c2:af:4d:30:ce:c0:93:8d:
                    63:13:47:d3:98:2d:bf:fd:2a:c6:13:28:0a:fd:a8:
                    a2:16:26:62:ff:22:31:75:d7:bf:72:2c:81:97:65:
                    c0:b4:7b:21:c8:7e:57:a5:2d:34:c0:81:b1:21:14:
                    53:55:f4:3b:47:6d:2d:f5:3a:69:5e:bf:2f:b4:89:
                    ba:ab:13:de:45:31:01:18:39:26:0e:df:c6:80:ed:
                    8e:b4:4b:10:e0:a3:d6:00:7f:53:5a:d2:e8:d0:f3:
                    57:f5:2d:3a:57:87:5d:01:4d:ef:88:5e:5d:9b:d7:
                    48:a4:59:f3:e6:af:a6:01:73:6f:8b:f2:48:55:b6:
                    60:1c:f0:e5:0e:3b:ba:b8:b2:5d:28:2d:74:69:a9:
                    31:25:e8:d1:08:cf:54:b8:eb:6f:7d:e6:73:4e:b1:
                    1f:01:4d:9d:f7:b7:a5:13:25:d8:79:b5:ed:20:77:
                    fb:0a:41:84:31:39:3a:72:b6:2b:12:ce:84:53:df:
                    15:fa:64:b7:ea:ee:48:bf:e5:25:81:1f:59:97:d1:
                    18:39:c2:03:20:56:05:5b:9c:8b:80:9e:a1:b8:73:
                    12:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:71:49:46:13:95:04:63:E4:AE:77:CA:4F:7A:47:8B:F9:98:96:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12c52561-a470-3c72-b6ab-a7363cbacf79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.222.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:9c:43:81:6d:a6:15:11:4c:bf:0d:0a:f9:64:80:20:93:
         f0:2f:f1:cc:fd:fd:93:88:46:1c:8e:e7:b6:c3:38:06:07:b8:
         fa:86:4e:f1:32:13:f8:3d:9d:6b:fa:11:df:6e:74:6f:b1:fa:
         ad:31:fd:bc:36:ff:60:b0:4d:4b:62:a7:e8:b0:fc:3d:d9:2a:
         3b:a9:20:2a:36:59:92:b9:97:68:e4:71:ea:70:72:b3:1b:ea:
         97:94:06:2b:fe:61:33:2f:c2:e5:30:01:2f:9c:dc:1f:2e:9d:
         26:3a:eb:54:ad:f1:bd:b8:82:e3:5f:3f:f3:15:0b:1a:16:51:
         f0:c6:b6:d4:d3:4f:7c:d8:3e:ad:1c:fe:01:09:bd:a8:fc:8a:
         b8:36:b8:d3:9e:55:6d:13:95:54:7d:ac:92:6f:2f:7a:40:31:
         be:ff:cf:f4:38:a6:06:21:be:7b:72:9a:e3:be:6e:eb:d6:c3:
         75:8d:84:81:8c:5c:72:d9:15:d9:3b:ff:17:33:29:b0:87:34:
         1e:6d:2f:05:2b:22:46:54:be:1b:c0:a6:68:88:20:d0:9f:c8:
         b8:13:c7:4d:8f:6c:c5:91:4b:04:d8:80:3a:9d:29:aa:3a:43:
         05:7d:fd:ea:13:da:26:78:02:94:e2:59:3c:7b:17:ad:41:02:
         ac:c5:b3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:27 2024 by rpki-client on console-ams.rpki-client.org