Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e4e2607-2ee5-3e51-93a2-1e4f99937435.roa
File:                     3e4e2607-2ee5-3e51-93a2-1e4f99937435.roa (raw, json)
Hash identifier:          II9qqDw17L0L7qg69RO1owun2/MZlRL1AespDBk6Kxo=
Subject key identifier:   DC:9C:37:C2:01:02:B1:6C:5B:FB:45:EC:3B:D4:F1:3B:C2:B2:6F:3D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E709A01B62BB5A06FE7B400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e4e2607-2ee5-3e51-93a2-1e4f99937435.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        35.187.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:9a:01:b6:2b:b5:a0:6f:e7:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=749664fd-bcd7-4f01-9c5a-aabe5dd110b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:d1:00:ef:4c:13:30:7f:83:b0:66:0c:f7:
                    21:bc:69:44:b3:a3:2f:8e:af:cd:65:40:a7:da:7c:
                    86:a7:a0:be:d6:3a:7d:70:5b:6f:62:18:21:2a:d1:
                    38:91:a6:52:90:fe:ec:31:c8:40:06:9a:fe:91:05:
                    ce:65:aa:97:07:98:d1:eb:da:d5:a8:8e:04:ed:70:
                    62:47:c9:14:2b:91:d9:a4:83:b1:3f:f5:a9:a3:6f:
                    42:13:cd:e7:f8:bd:a7:15:78:23:32:2e:81:0d:0f:
                    a1:64:e9:1a:4f:92:91:1e:c6:70:5a:e1:b9:8d:ea:
                    47:8d:7f:a4:41:36:71:c6:79:7f:21:bf:13:7d:2e:
                    ec:4f:5f:d7:f7:61:83:a6:ab:59:87:c4:00:d2:7a:
                    75:8a:9b:e9:5c:66:31:ae:d9:f5:5c:a7:b7:f6:ed:
                    e6:03:3b:6a:2c:e2:1c:72:55:75:95:94:fd:2c:2f:
                    20:b0:c7:fd:35:3c:f6:21:41:32:1b:00:41:ce:d9:
                    c4:f0:2f:ec:f0:cf:c9:fb:73:51:71:c4:f6:ae:bf:
                    c2:1f:49:07:59:9d:66:02:ac:5c:73:a9:68:1f:c1:
                    00:8d:93:df:ff:7f:1c:43:cd:46:b4:01:59:ed:09:
                    8d:f3:3d:c9:34:f6:3a:df:81:29:4f:55:af:7c:ba:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9C:37:C2:01:02:B1:6C:5B:FB:45:EC:3B:D4:F1:3B:C2:B2:6F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3e4e2607-2ee5-3e51-93a2-1e4f99937435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.187.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b4:e4:eb:7f:b9:fc:0a:4b:19:e6:d7:77:fd:d2:6f:94:8b:
         a1:db:e6:f3:51:72:55:21:4f:de:ea:b9:a6:b3:ac:da:a1:42:
         e6:6e:72:ec:ff:03:46:f1:0a:45:71:71:f9:f5:00:71:f2:70:
         8e:da:08:82:bc:2b:dd:ae:25:cd:30:0c:1d:f9:fa:89:c9:1c:
         e1:fd:f3:f6:33:c3:c5:a5:a5:8c:ad:01:9f:bb:7c:39:2b:23:
         ef:b8:22:cc:68:f0:6c:48:44:71:58:46:0c:fc:8c:03:11:34:
         13:13:93:1c:c8:37:c8:50:28:3e:cf:a3:27:88:45:05:b1:d9:
         b4:25:9c:6c:86:37:c3:cc:e2:14:0b:78:6d:9c:8a:89:51:7a:
         ba:5f:4f:d2:69:38:c3:e1:6f:15:01:16:96:27:e2:bb:23:20:
         71:67:68:31:35:e3:aa:0d:2d:bb:08:c6:0f:4c:7a:40:bb:30:
         3e:7a:82:66:dd:f2:18:ba:6d:f9:3c:16:fa:74:a0:7c:20:06:
         99:4f:b8:5c:99:3b:54:00:4b:93:92:58:ef:3b:73:7f:d0:22:
         22:59:11:8e:f5:aa:43:c5:2e:3d:fb:89:d5:0a:b5:79:64:67:
         a8:70:30:c5:22:5f:0a:91:08:ba:e5:44:28:16:8d:1e:be:12:
         b4:fb:27:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecJoBtiu1oG/ntAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
NzQ5NjY0ZmQtYmNkNy00ZjAxLTljNWEtYWFiZTVkZDExMGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2jRAO9MEzB/g7BmDPchvGlEs6Mvjq/NZUCn
2nyGp6C+1jp9cFtvYhghKtE4kaZSkP7sMchABpr+kQXOZaqXB5jR69rVqI4E7XBi
R8kUK5HZpIOxP/Wpo29CE83n+L2nFXgjMi6BDQ+hZOkaT5KRHsZwWuG5jepHjX+k
QTZxxnl/Ib8TfS7sT1/X92GDpqtZh8QA0np1ipvpXGYxrtn1XKe39u3mAztqLOIc
clV1lZT9LC8gsMf9NTz2IUEyGwBBztnE8C/s8M/J+3NRccT2rr/CH0kHWZ1mAqxc
c6loH8EAjZPf/38cQ81GtAFZ7QmN8z3JNPY634EpT1WvfLoqVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNycN8IBArFsW/tF7DvU8TvCsm89MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2U0ZTI2MDctMmVlNS0z
ZTUxLTkzYTItMWU0Zjk5OTM3NDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI7uAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABm05Ot/ufwKSxnm13f90m+Ui6Hb5vNRclUhT97quaazrNqhQuZucuz/
A0bxCkVxcfn1AHHycI7aCIK8K92uJc0wDB35+onJHOH98/Yzw8WlpYytAZ+7fDkr
I++4Isxo8GxIRHFYRgz8jAMRNBMTkxzIN8hQKD7PoyeIRQWx2bQlnGyGN8PM4hQL
eG2ciolRerpfT9JpOMPhbxUBFpYn4rsjIHFnaDE146oNLbsIxg9MekC7MD56gmbd
8hi6bfk8Fvp0oHwgBplPuFyZO1QAS5OSWO87c3/QIiJZEY71qkPFLj37idUKtXlk
Z6hwMMUiXwqRCLrlRCgWjR6+ErT7Jw0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:13 2024 by rpki-client on console-fra.rpki-client.org