Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/361daccc-32a9-3704-a24c-0b5de6e0d45f.roa
File:                     361daccc-32a9-3704-a24c-0b5de6e0d45f.roa (raw, json)
Hash identifier:          CP9tXAWrUyqcnJyfErhA1inI54OMbW7dju4H/hvATJE=
Subject key identifier:   FE:18:91:F2:E1:6E:45:5D:B0:59:7E:54:CE:FC:86:51:68:C4:26:74
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490E8FFDE6939C009C962480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/361daccc-32a9-3704-a24c-0b5de6e0d45f.roa
Signing time:             Thu 21 Mar 2024 21:49:26 +0000
ROA not before:           Thu 21 Mar 2024 21:49:26 +0000
ROA not after:            Wed 19 Jun 2024 21:49:26 +0000
asID:                     15169
IP address blocks:        35.236.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0e:8f:fd:e6:93:9c:00:9c:96:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:49:26 2024 GMT
            Not After : Jun 19 21:49:26 2024 GMT
        Subject: CN=8e6686d5-f803-4e00-a249-590f3bb6b3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3f:1b:c1:11:b4:5f:8e:a4:f8:32:0c:0c:7f:
                    b7:49:55:34:ee:ba:a1:bc:64:aa:1a:7d:73:97:e6:
                    0d:f9:01:78:7d:f5:21:1a:43:78:55:03:db:77:c3:
                    a4:a2:0c:b4:77:9e:ae:2d:15:27:f1:c2:55:cb:6f:
                    46:91:6d:11:79:09:ba:67:dd:e3:33:bb:b8:c3:f1:
                    19:19:46:a5:fc:65:a6:d0:26:44:13:43:8f:1e:27:
                    7e:c4:f7:34:ae:24:db:1e:fd:bb:76:b6:e1:64:f7:
                    45:fc:f2:60:23:1a:f8:6c:cb:5c:92:6c:2b:cd:09:
                    e2:a0:8c:cc:f9:51:55:a1:44:89:e2:c3:b8:f8:3e:
                    ff:f1:64:2d:0b:3d:8a:d9:90:94:55:30:2a:1e:a1:
                    36:37:a9:d8:60:b4:fb:4b:12:18:63:c3:0d:b5:8d:
                    4e:15:5f:64:cc:ee:d1:72:59:90:86:e7:cf:17:10:
                    a9:f6:15:99:30:e6:cd:b2:c9:22:e6:f9:40:86:81:
                    c0:f0:da:ad:ba:90:a7:7f:d0:17:df:26:04:63:3b:
                    3e:b8:82:65:59:cd:8b:c1:fc:a9:79:aa:0c:28:e5:
                    16:43:6c:17:96:01:b2:08:33:8a:b2:ae:63:17:f1:
                    d4:99:41:e0:27:eb:96:6a:4f:c5:a1:30:57:72:04:
                    25:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:18:91:F2:E1:6E:45:5D:B0:59:7E:54:CE:FC:86:51:68:C4:26:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/361daccc-32a9-3704-a24c-0b5de6e0d45f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.236.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e7:3e:92:69:cd:9b:17:07:26:cb:ff:ef:72:6a:66:4e:66:
         59:c0:ac:8c:b4:4e:6e:bd:53:cd:a7:62:d0:96:32:be:84:b8:
         7a:ac:90:46:9c:6b:50:4d:e0:1b:d2:6b:23:b7:66:1c:79:93:
         cc:50:32:c9:ad:e8:7d:5e:c9:3f:78:5c:60:db:25:57:6f:1b:
         24:8a:23:38:99:c2:49:d2:b2:54:13:b8:30:84:3a:8a:42:4b:
         4b:7e:6b:74:9c:a3:06:fd:db:a8:58:7f:ec:a3:bb:86:08:d9:
         7e:b9:f5:b8:07:69:af:90:2e:2f:f8:87:12:5c:8d:99:d1:5c:
         7a:3c:f3:a9:af:be:a4:2f:98:53:24:b1:5e:cc:a4:63:fb:b0:
         33:90:a3:71:ee:71:ba:23:16:34:65:1d:8e:e5:36:84:74:34:
         ab:7c:b0:9b:ed:02:d5:8b:04:aa:b4:fe:e0:2f:84:9d:af:1d:
         c0:cd:13:4a:63:ba:9f:2d:db:c2:69:f0:40:41:70:66:7e:93:
         0b:9e:41:13:e4:65:5e:7e:85:de:09:9b:9e:84:0c:48:22:c3:
         64:3f:0f:c3:47:ae:86:f3:0a:6d:df:d2:ac:06:f0:c0:d5:c5:
         66:ed:60:ee:65:18:a3:aa:97:d0:4e:b7:1b:ee:1b:46:78:e2:
         5e:51:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:29:21 2024 by rpki-client on console-ams.rpki-client.org