Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3622bfaa-2931-3182-84e1-6608aa01d210.roa
File:                     3622bfaa-2931-3182-84e1-6608aa01d210.roa (raw, json)
Hash identifier:          LIR+67dLXswB9cthRGTyYty5PcZdSrLXHn6n1EDOo7k=
Subject key identifier:   E7:9E:A4:7A:FB:EE:89:1E:B8:9F:F4:98:A7:48:75:A7:1E:E3:5F:0A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E7077E7B2083118CDEBFD20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3622bfaa-2931-3182-84e1-6608aa01d210.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        35.194.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:77:e7:b2:08:31:18:cd:eb:fd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=292311d3-ee8c-4011-aa7b-838d2202c61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:15:a1:3e:d4:23:5e:5e:29:cc:15:4f:e9:
                    34:4b:39:a1:ed:a0:ab:35:2e:ad:d0:4d:2b:b7:44:
                    34:fb:1c:ac:ba:69:14:2f:73:90:37:18:4d:f8:51:
                    d2:c5:5b:07:11:03:58:3c:ad:32:9d:58:42:d6:b2:
                    ad:41:d3:9f:07:9b:95:74:a7:5a:a4:a8:14:59:f2:
                    15:e1:5a:e1:25:78:1f:82:35:d5:9c:4d:34:d5:08:
                    db:d1:1a:49:22:d4:e4:92:7e:17:cd:28:54:5e:95:
                    a8:bf:61:64:ae:8a:eb:c5:4b:5c:f4:0a:e0:70:ba:
                    a8:4a:d3:27:aa:8e:de:e5:84:5f:bc:a7:b4:2a:92:
                    dc:ca:a3:f0:b5:24:70:f9:1b:60:73:71:7d:1e:3a:
                    0a:56:1d:71:22:1e:25:66:de:ac:fa:af:15:50:04:
                    b4:86:e8:8c:a3:99:a0:1a:8d:b2:ee:ad:97:e2:f7:
                    d0:8e:46:46:13:d9:a1:9f:a7:7d:80:51:55:5d:0e:
                    0e:ac:7a:c6:93:2e:a5:73:0f:fa:43:be:dd:49:a0:
                    ff:4b:c2:0e:e1:21:ff:99:b8:ff:09:e5:06:e9:02:
                    32:63:e8:f1:ee:21:94:9c:30:ac:4c:f0:31:9b:b8:
                    88:c0:6a:34:93:e9:7c:12:e5:02:13:2b:c9:84:cb:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9E:A4:7A:FB:EE:89:1E:B8:9F:F4:98:A7:48:75:A7:1E:E3:5F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3622bfaa-2931-3182-84e1-6608aa01d210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.194.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:cb:c9:b1:65:40:22:00:91:5f:fd:8e:8b:46:3a:82:9c:9c:
         b3:74:90:7b:d9:98:0d:b4:e6:37:03:e5:b3:89:f6:45:b8:6d:
         9e:08:c7:98:d4:c2:e1:92:7b:07:d7:b2:d5:d0:28:da:3a:38:
         60:b3:64:94:b5:ad:b8:d2:b8:cd:b6:e7:d9:91:11:85:eb:19:
         ea:89:31:6a:1c:eb:64:46:1e:4b:42:65:29:3f:1c:13:be:81:
         ce:d9:2c:99:62:b4:36:07:3a:da:30:24:1c:72:e5:52:5f:ea:
         07:70:cf:7f:92:fe:51:68:63:f2:67:b9:c2:3a:db:ad:e7:6e:
         64:e5:5e:58:b6:fc:e2:85:bc:d0:43:d3:d2:c4:8b:09:37:72:
         06:03:b0:0a:99:17:05:cf:10:1c:b9:65:eb:e2:ff:cc:37:7b:
         94:83:21:e3:f1:d4:44:24:e5:44:7a:60:d9:d1:15:71:a0:85:
         c7:01:6f:ef:d5:7b:b4:bd:ad:de:ff:f8:50:7d:00:22:36:0e:
         32:b7:e7:85:0d:25:b6:05:49:f2:8d:94:b1:bb:59:7b:85:a2:
         22:ba:a7:4b:6a:6e:31:ef:87:a5:b7:16:d6:bd:6f:7d:ba:f8:
         19:c5:e3:57:0f:82:e7:72:14:11:9a:f7:7a:f9:e5:6a:d3:b2:
         ef:e7:d1:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecHfnsggxGM3r/SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
MjkyMzExZDMtZWU4Yy00MDExLWFhN2ItODM4ZDIyMDJjNjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnsVoT7UI15eKcwVT+k0Szmh7aCrNS6t0E0r
t0Q0+xysumkUL3OQNxhN+FHSxVsHEQNYPK0ynVhC1rKtQdOfB5uVdKdapKgUWfIV
4VrhJXgfgjXVnE001Qjb0RpJItTkkn4XzShUXpWov2FkrorrxUtc9ArgcLqoStMn
qo7e5YRfvKe0KpLcyqPwtSRw+Rtgc3F9HjoKVh1xIh4lZt6s+q8VUAS0huiMo5mg
Go2y7q2X4vfQjkZGE9mhn6d9gFFVXQ4OrHrGky6lcw/6Q77dSaD/S8IO4SH/mbj/
CeUG6QIyY+jx7iGUnDCsTPAxm7iIwGo0k+l8EuUCEyvJhMtSZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOeepHr77okeuJ/0mKdIdace418KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzYyMmJmYWEtMjkzMS0z
MTgyLTg0ZTEtNjYwOGFhMDFkMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI8IAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELLybFlQCIAkV/9jotGOoKcnLN0kHvZmA205jcD5bOJ9kW4bZ4Ix5jU
wuGSewfXstXQKNo6OGCzZJS1rbjSuM2259mREYXrGeqJMWoc62RGHktCZSk/HBO+
gc7ZLJlitDYHOtowJBxy5VJf6gdwz3+S/lFoY/JnucI6263nbmTlXli2/OKFvNBD
09LEiwk3cgYDsAqZFwXPEBy5Zevi/8w3e5SDIePx1EQk5UR6YNnRFXGghccBb+/V
e7S9rd7/+FB9ACI2DjK354UNJbYFSfKNlLG7WXuFoiK6p0tqbjHvh6W3Fta9b326
+BnF41cPgudyFBGa93r55WrTsu/n0Sk=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:15 2024 by rpki-client on console-fra.rpki-client.org