Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c594cc9-b906-3727-a03a-72ab6e6bd542.roa
File:                     2c594cc9-b906-3727-a03a-72ab6e6bd542.roa (raw, json)
Hash identifier:          zcd2YLebrygh1nUA5qFIfT49jVdErpWDc8CPWM2eqI4=
Subject key identifier:   B7:34:DC:C8:23:6E:C1:E8:99:64:92:C0:76:1E:39:C8:91:38:93:D1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F53BD83332E29F06C12040
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c594cc9-b906-3727-a03a-72ab6e6bd542.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.227.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:3b:d8:33:32:e2:9f:06:c1:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=5ab68d1f-e262-44ed-b5cf-3af8a9c02f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fc:ae:dd:fe:ac:97:0f:9c:42:0e:c5:f7:71:
                    df:da:19:12:ce:d9:36:14:8c:dd:4d:e2:5e:ca:28:
                    a1:aa:b1:d8:b7:e8:b4:57:f2:1e:69:20:1f:73:c0:
                    d8:53:40:84:23:d7:da:c0:95:89:e4:fd:97:34:e3:
                    7a:d9:2a:b7:65:03:4d:98:b8:87:e0:a2:5c:64:5d:
                    63:e9:fa:3c:c7:fa:54:1c:d2:4d:5c:35:e9:cc:10:
                    db:9e:68:98:e1:d1:16:84:55:ac:1c:45:5a:37:5e:
                    b1:fa:c9:66:5d:05:0a:63:eb:bc:68:7f:83:17:b0:
                    fd:68:c0:05:f9:a8:7f:35:43:78:3b:32:5b:5c:41:
                    fe:40:8c:5e:71:03:0a:c3:cc:98:fe:c5:86:b5:a3:
                    18:b4:91:42:e0:5c:1d:bc:11:8c:60:c0:e6:72:fe:
                    7a:24:69:fa:25:3a:21:2c:dd:2d:d3:61:03:7d:89:
                    0a:16:a5:4f:30:d5:30:e6:39:4c:18:45:e9:1a:1f:
                    af:ff:9a:05:23:4a:84:7c:e8:2e:53:31:a5:07:5b:
                    bd:cf:3b:96:cd:97:1e:a5:2e:b4:98:25:81:9d:0a:
                    b4:a0:1b:ec:fe:14:ec:46:33:13:c5:f3:bd:5b:88:
                    21:83:94:61:80:d8:6c:16:88:76:2e:cc:38:67:01:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:34:DC:C8:23:6E:C1:E8:99:64:92:C0:76:1E:39:C8:91:38:93:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c594cc9-b906-3727-a03a-72ab6e6bd542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.227.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:38:64:b5:59:0e:17:d3:08:25:28:00:a6:26:42:55:4e:12:
         c3:0d:31:fa:7f:a1:0a:7d:0c:55:28:00:71:ef:0a:79:61:b9:
         bb:3a:33:f1:1b:eb:9b:81:1d:15:45:7c:35:cc:79:9f:b1:f7:
         7a:7e:6b:ff:cd:b4:71:35:1e:f7:9a:8e:65:48:c0:84:72:cc:
         96:5d:43:df:6d:99:0e:65:15:0d:ac:39:21:d0:e6:62:a0:22:
         49:cf:40:68:02:66:5f:5e:fd:f1:3a:b4:72:b3:bf:60:ac:2e:
         09:0a:53:44:a8:41:ff:59:77:b8:c2:aa:6b:a3:0a:f1:50:a1:
         32:79:3f:6f:8b:65:94:4d:56:94:c8:91:1f:b3:91:7f:a1:4f:
         15:68:5e:95:b8:27:a0:18:92:83:85:9c:17:21:dc:37:e6:67:
         13:a9:aa:6a:92:82:2d:a1:ca:8f:9f:98:b4:07:6f:31:1c:d9:
         f1:7e:24:4a:57:28:7e:5c:0f:76:d2:9d:6a:9c:98:bb:22:5e:
         0f:21:84:72:80:45:46:a2:4f:84:cf:99:84:99:aa:59:ba:3c:
         cf:4d:7a:39:ac:c5:94:ba:4e:25:bd:8f:99:3b:2c:0b:f2:79:
         31:99:08:70:b4:54:e3:09:d8:92:50:bd:51:78:47:49:27:01:
         fc:e1:53:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9TvYMzLinwbBIEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
NWFiNjhkMWYtZTI2Mi00NGVkLWI1Y2YtM2FmOGE5YzAyZjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/yu3f6slw+cQg7F93Hf2hkSztk2FIzdTeJe
yiihqrHYt+i0V/IeaSAfc8DYU0CEI9fawJWJ5P2XNON62Sq3ZQNNmLiH4KJcZF1j
6fo8x/pUHNJNXDXpzBDbnmiY4dEWhFWsHEVaN16x+slmXQUKY+u8aH+DF7D9aMAF
+ah/NUN4OzJbXEH+QIxecQMKw8yY/sWGtaMYtJFC4FwdvBGMYMDmcv56JGn6JToh
LN0t02EDfYkKFqVPMNUw5jlMGEXpGh+v/5oFI0qEfOguUzGlB1u9zzuWzZcepS60
mCWBnQq0oBvs/hTsRjMTxfO9W4ghg5RhgNhsFoh2Lsw4ZwG7+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLc03MgjbsHomWSSwHYeOciROJPRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmM1OTRjYzktYjkwNi0z
NzI3LWEwM2EtNzJhYjZlNmJkNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI+PAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQ4ZLVZDhfTCCUoAKYmQlVOEsMNMfp/oQp9DFUoAHHvCnlhubs6M/Eb
65uBHRVFfDXMeZ+x93p+a//NtHE1HveajmVIwIRyzJZdQ99tmQ5lFQ2sOSHQ5mKg
IknPQGgCZl9e/fE6tHKzv2CsLgkKU0SoQf9Zd7jCqmujCvFQoTJ5P2+LZZRNVpTI
kR+zkX+hTxVoXpW4J6AYkoOFnBch3DfmZxOpqmqSgi2hyo+fmLQHbzEc2fF+JEpX
KH5cD3bSnWqcmLsiXg8hhHKARUaiT4TPmYSZqlm6PM9NejmsxZS6TiW9j5k7LAvy
eTGZCHC0VOMJ2JJQvVF4R0knAfzhU3s=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:08 2024 by rpki-client on console-fra.rpki-client.org