Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14f49ac2-c390-3b2c-b217-e200d024d211.roa
File:                     14f49ac2-c390-3b2c-b217-e200d024d211.roa (raw, json)
Hash identifier:          rztQgJS7YiVeGeeYs2lgC+85a6GJbeAzOYQQIxyMd/A=
Subject key identifier:   22:A5:95:3A:55:CE:01:D0:0F:85:60:5C:A9:EB:FC:CC:F2:03:1E:27
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4D775ECEE2B315B66C800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14f49ac2-c390-3b2c-b217-e200d024d211.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.193.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:d7:75:ec:ee:2b:31:5b:66:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=4e8a20c0-2011-4f47-a412-c14e0d315165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2c:43:27:96:05:c7:42:b2:37:8e:82:6a:cc:
                    95:30:55:a4:7c:57:fb:8d:c7:5d:76:ea:6b:db:d3:
                    c0:f8:41:21:f8:71:de:fb:6b:e0:76:9e:9f:52:ff:
                    9b:74:93:51:92:b1:6f:7e:0e:fa:84:03:ae:46:51:
                    5b:81:d0:21:f2:bf:e8:e0:c3:50:cb:ce:b2:15:3d:
                    d2:5a:86:e7:5e:ec:38:d2:c3:78:39:06:f8:cf:34:
                    82:50:29:f3:75:f6:0e:6e:00:81:1f:88:31:bd:50:
                    bb:50:5e:00:ac:79:32:fd:d7:42:02:fc:cb:be:98:
                    1b:15:9f:6b:fe:3f:88:d1:36:79:7c:2a:fc:dd:97:
                    69:92:8d:df:0a:ad:87:5c:21:36:2e:7f:49:59:b1:
                    95:91:17:2c:ca:56:12:a1:57:b5:ec:c1:87:7f:05:
                    2f:ad:69:c3:28:70:a4:eb:7d:ba:72:1f:bd:64:c2:
                    35:b5:7a:41:ff:2c:7f:3c:37:7e:00:b2:2e:0e:e0:
                    00:ed:df:02:22:02:35:85:48:20:c4:10:34:36:2d:
                    c7:6e:33:cc:c5:9c:2a:63:06:be:98:45:ca:d3:56:
                    77:fc:70:74:4e:ba:26:8a:9b:0c:fe:52:8a:6e:5b:
                    5b:29:86:14:1e:44:93:52:4d:57:c0:40:40:88:9c:
                    7a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A5:95:3A:55:CE:01:D0:0F:85:60:5C:A9:EB:FC:CC:F2:03:1E:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/14f49ac2-c390-3b2c-b217-e200d024d211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.193.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:2c:12:0e:dd:ad:90:21:70:59:a4:9b:41:18:42:dd:80:f8:
         4f:1b:0a:14:30:d7:4e:74:fa:bd:6d:3c:69:9b:54:9f:72:9b:
         21:d7:97:e9:98:b4:8f:b6:f7:3a:a3:3e:f6:9c:d1:3c:01:ae:
         a8:8f:f2:79:14:76:ef:93:f0:a8:e9:55:4b:a5:ee:5a:1c:33:
         79:90:9d:e7:d4:ae:e7:3b:4a:64:65:52:81:e0:71:b1:77:b6:
         5a:61:7a:1d:b4:5e:4f:e9:ce:61:8e:f0:f4:01:0a:0b:14:7a:
         e1:82:31:35:2f:c9:a5:5e:ce:58:a5:62:0a:09:97:d1:3d:f3:
         f8:ba:86:e0:8b:ad:5a:45:9c:39:6a:35:3f:53:41:3f:8f:27:
         1d:ef:22:a0:89:97:37:cb:f0:64:a3:54:a0:b1:7b:55:69:cb:
         8b:aa:ec:3c:c5:49:be:ad:f6:a6:3b:d1:85:48:47:22:3e:d2:
         89:07:65:82:56:bb:4a:20:e2:ef:fd:42:f4:c9:3e:b4:60:33:
         eb:75:87:41:4c:7c:0f:90:ca:12:c6:ce:b5:af:dc:0e:2e:e3:
         ff:fb:de:38:54:a5:87:07:03:53:ce:39:cf:d5:50:b5:11:3f:
         96:37:09:df:5d:da:a1:24:2f:61:cd:e3:c8:f4:be:83:02:8a:
         c9:a4:5f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:27 2024 by rpki-client on console-ams.rpki-client.org