Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20c96bab-2a3a-332e-b412-7f6fd6233ecd.roa
File:                     20c96bab-2a3a-332e-b412-7f6fd6233ecd.roa (raw, json)
Hash identifier:          K+em9IlECxibOxw/67e17ZNyPs311eqppBF3D6sHTjM=
Subject key identifier:   12:A6:61:3C:47:95:D6:F4:45:89:01:5B:BE:38:7A:88:1E:A6:1F:54
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F511D942BF3526C291B7C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20c96bab-2a3a-332e-b412-7f6fd6233ecd.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.235.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:11:d9:42:bf:35:26:c2:91:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=65043628-2466-4768-996d-e13e87d195f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:54:dd:b7:f9:37:99:74:47:e0:14:53:be:34:
                    c4:d0:aa:02:4f:88:d0:42:1e:9c:5a:06:ba:32:86:
                    1e:07:78:9b:e0:18:40:c3:55:56:20:2f:bb:57:dc:
                    0d:2d:48:70:e5:28:ae:35:e4:ab:69:1a:a2:d0:8b:
                    c1:a8:74:53:b1:59:6b:94:33:7a:83:c8:3c:c7:ad:
                    e8:be:85:84:2f:27:2b:1f:b0:55:7a:0e:2d:9c:db:
                    42:52:a9:9b:84:c0:0e:56:86:e7:7b:64:8f:da:8a:
                    48:a7:0a:0c:4b:a8:e9:f8:9a:19:d2:86:4f:ee:36:
                    b6:91:71:c8:75:6a:a7:44:f5:99:9a:ed:2d:ad:a5:
                    a9:a0:e1:69:50:69:b4:23:67:3b:87:f5:8c:cc:e8:
                    50:99:5f:a0:c1:bc:a4:df:55:3b:35:19:ba:91:18:
                    0d:a7:8e:b9:fb:7f:37:87:ec:d2:71:ff:77:a6:25:
                    81:a5:b1:65:eb:88:65:0e:66:f5:6a:c7:58:02:52:
                    11:89:7b:80:8c:d3:1c:ed:63:28:94:02:88:ee:b1:
                    be:0c:05:94:b2:89:4c:0b:99:83:ce:2a:71:9a:7f:
                    30:2a:e2:ff:2a:6c:5c:73:c3:ab:29:f3:96:e2:ee:
                    8e:ff:d6:8b:1d:aa:e9:3e:f3:cc:ee:97:c0:8f:8f:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A6:61:3C:47:95:D6:F4:45:89:01:5B:BE:38:7A:88:1E:A6:1F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20c96bab-2a3a-332e-b412-7f6fd6233ecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.235.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:25:ca:f6:ad:58:fa:cb:65:92:7a:75:42:1a:61:5e:35:a9:
         fe:aa:03:15:1e:09:98:5c:74:96:53:de:81:34:bd:3a:10:b3:
         9a:6e:7a:10:14:40:33:e5:8a:52:b0:8a:a5:f3:84:c5:ee:c7:
         cf:1b:f8:7a:31:4e:d7:79:71:50:d9:97:c3:2a:3a:c2:dc:e2:
         85:8d:52:73:42:a0:43:63:52:99:a6:25:ef:2f:9d:10:9b:0f:
         af:5e:e8:c3:10:66:7f:73:02:60:c0:29:55:d5:9c:64:c9:e5:
         fb:ae:38:5d:8d:15:65:d3:17:bc:da:bd:6f:82:9d:bf:5d:b3:
         20:bc:d5:7e:7b:7b:b0:26:fb:80:71:88:64:f8:2e:c3:90:d0:
         6a:67:c6:b1:bf:f1:89:f8:65:41:bf:5e:41:5a:4f:df:ae:44:
         7f:2b:8a:64:72:4b:61:f9:9e:e5:b5:aa:9a:ea:9d:7c:79:f4:
         8d:62:1a:fd:85:58:e5:c8:af:76:dd:5c:05:7a:24:f4:d5:66:
         65:35:13:6e:62:65:9f:a4:09:f4:f2:1c:c7:9f:8f:b1:98:28:
         6f:1d:09:93:2e:f6:03:27:ab:51:63:87:36:79:4b:89:03:a4:
         52:99:8a:f2:21:ba:ec:70:63:80:dc:31:f8:ce:94:3e:7d:37:
         f3:21:09:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9RHZQr81JsKRt8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NjUwNDM2MjgtMjQ2Ni00NzY4LTk5NmQtZTEzZTg3ZDE5NWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVTdt/k3mXRH4BRTvjTE0KoCT4jQQh6cWga6
MoYeB3ib4BhAw1VWIC+7V9wNLUhw5SiuNeSraRqi0IvBqHRTsVlrlDN6g8g8x63o
voWELycrH7BVeg4tnNtCUqmbhMAOVobne2SP2opIpwoMS6jp+JoZ0oZP7ja2kXHI
dWqnRPWZmu0traWpoOFpUGm0I2c7h/WMzOhQmV+gwbyk31U7NRm6kRgNp465+383
h+zScf93piWBpbFl64hlDmb1asdYAlIRiXuAjNMc7WMolAKI7rG+DAWUsolMC5mD
zipxmn8wKuL/Kmxcc8OrKfOW4u6O/9aLHarpPvPM7pfAj4/JFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBKmYTxHldb0RYkBW744eogeph9UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjBjOTZiYWItMmEzYS0z
MzJlLWI0MTItN2Y2ZmQ2MjMzZWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBI+viMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQlyvatWPrLZZJ6dUIaYV41qf6qAxUeCZhcdJZT3oE0vToQs5puehAU
QDPlilKwiqXzhMXux88b+HoxTtd5cVDZl8MqOsLc4oWNUnNCoENjUpmmJe8vnRCb
D69e6MMQZn9zAmDAKVXVnGTJ5fuuOF2NFWXTF7zavW+Cnb9dsyC81X57e7Am+4Bx
iGT4LsOQ0GpnxrG/8Yn4ZUG/XkFaT9+uRH8rimRyS2H5nuW1qprqnXx59I1iGv2F
WOXIr3bdXAV6JPTVZmU1E25iZZ+kCfTyHMefj7GYKG8dCZMu9gMnq1FjhzZ5S4kD
pFKZivIhuuxwY4DcMfjOlD59N/MhCR0=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:09 2024 by rpki-client on console-fra.rpki-client.org