Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ac14654-b739-3df4-a7af-add24c8361cc.roa
File:                     1ac14654-b739-3df4-a7af-add24c8361cc.roa (raw, json)
Hash identifier:          zpsdQ8mjB9sa8Hwfmuh9Tc66ZxlN8LMT7JQpuRNAdIo=
Subject key identifier:   34:DD:28:73:7C:C9:3B:E9:82:FF:C9:AD:ED:A4:E8:31:4D:1F:56:0F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4E6092B8CC9F2816E1540
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ac14654-b739-3df4-a7af-add24c8361cc.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        35.212.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:e6:09:2b:8c:c9:f2:81:6e:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=df93b8c5-7333-47ea-8fbd-c24b8b041903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:f1:1d:42:4a:f5:8e:aa:6d:0e:34:70:18:
                    e1:d6:41:3b:6c:a7:88:fd:71:34:d5:5b:3d:9d:43:
                    fd:2c:f9:85:57:02:8c:d7:b0:e7:bc:ca:fb:d2:12:
                    ca:0b:77:34:9f:d6:87:a9:66:3a:6e:9c:c6:c3:5a:
                    ba:75:5e:9a:b4:32:21:4e:0a:c7:0d:a9:49:d6:4e:
                    1b:c9:97:cd:99:f9:8a:6d:fa:90:34:77:fe:a3:14:
                    84:85:b2:81:c2:95:8a:19:cd:a3:79:ea:e1:03:d4:
                    c3:83:63:9b:54:b6:fe:08:ab:33:f7:d0:52:ce:20:
                    b4:7f:8a:3c:14:de:a4:5a:7f:8c:66:6c:12:1b:42:
                    5b:4b:fa:5e:30:27:fc:8a:7a:a3:7a:45:3e:5a:63:
                    c6:ae:71:83:bd:65:16:d3:73:d7:4a:60:6f:47:c6:
                    a2:33:bb:ed:f6:cd:65:ae:bf:ee:0d:ed:3b:51:11:
                    6f:38:b4:81:3a:d5:f8:5b:3c:e7:d7:48:36:1d:8b:
                    aa:7e:67:b0:70:56:3b:b7:92:72:4f:63:32:0c:9c:
                    cb:e3:ec:c5:df:3d:4d:c5:39:e4:a4:7b:bb:a7:9e:
                    02:47:72:99:8b:e4:98:00:58:c6:d7:e6:b9:0f:db:
                    0a:c7:02:7d:a8:8a:33:92:38:c2:49:9b:7b:20:33:
                    0e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DD:28:73:7C:C9:3B:E9:82:FF:C9:AD:ED:A4:E8:31:4D:1F:56:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ac14654-b739-3df4-a7af-add24c8361cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.212.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:13:cf:92:a5:dc:f3:ad:ef:9f:b1:b2:fb:8c:fd:20:0b:7f:
         05:01:9f:53:b9:76:5e:0e:d2:0e:4c:3f:91:2c:9a:93:5a:78:
         1b:85:73:e0:5b:8a:a7:32:57:1a:56:81:e8:76:5d:d2:d2:49:
         c3:2b:15:6c:0a:38:90:cd:52:2e:e5:f3:46:5d:8f:cb:3d:a2:
         18:8c:f6:16:bf:ce:ce:6e:ab:61:b8:7d:8e:ec:a0:92:ac:99:
         d3:6a:5e:48:8c:e7:39:f4:a5:8d:25:ab:d6:bc:09:ab:e8:17:
         87:9c:a6:8f:28:4a:ef:6c:19:9c:fe:20:1d:b7:87:90:e0:c7:
         ec:9b:bd:2c:98:fc:71:d7:cf:86:2f:c3:7c:5e:07:62:a2:a3:
         7c:43:90:a2:75:77:55:c1:9f:8b:7c:ec:b8:5f:5b:e3:7e:3a:
         1d:de:23:1f:e7:fd:12:e5:fe:e7:81:f3:a5:11:6d:e3:a6:84:
         89:cd:9f:77:2c:29:97:98:e1:5d:df:b1:7e:25:97:2d:39:cc:
         28:26:0e:cd:85:dd:ee:44:3e:2f:4d:82:2c:ec:bc:88:f1:cb:
         50:b9:c0:82:2b:6f:eb:dc:27:bc:10:3f:69:e2:9c:d0:2a:20:
         d2:d8:70:23:dc:6e:cd:4f:dc:c0:d7:75:1e:c0:8f:21:de:0d:
         9c:bc:f2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:45 2024 by rpki-client on console-ams.rpki-client.org