Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/55070058-5f4a-38cd-a25a-c39f73666443.roa
File:                     55070058-5f4a-38cd-a25a-c39f73666443.roa (raw, json)
Hash identifier:          XAHiZgPNKfsNyD9CL/aCDYmvZGOHdPcBqeWMyUXgf2M=
Subject key identifier:   BB:49:3F:A5:81:A0:7C:11:94:FE:35:6B:20:9F:E4:7B:9F:E9:2C:BF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4E9AD1647ACE2E9C30E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/55070058-5f4a-38cd-a25a-c39f73666443.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     19527
IP address blocks:        35.212.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:e9:ad:16:47:ac:e2:e9:c3:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=aa4bdf86-52d9-4eb0-9727-3ca059ba3bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:8f:93:2e:d8:0c:0c:a4:9f:4b:0c:95:1a:
                    8a:fc:cf:a6:4e:52:28:7b:d9:a3:55:83:f7:00:f0:
                    a6:68:49:2c:49:8f:11:b0:c2:9b:ff:7e:78:07:12:
                    98:7a:f3:be:a8:dd:34:65:d6:36:8d:26:ac:24:ec:
                    7d:34:28:00:f3:56:2c:d7:ae:8e:cf:b8:7b:6b:31:
                    5f:42:f7:8b:e3:44:09:e8:9a:12:aa:4b:11:ad:f0:
                    1e:f7:c2:3c:a1:53:3a:63:63:29:2e:d7:0b:01:05:
                    ed:43:07:88:36:ab:71:ee:d3:c5:47:f0:18:d8:3d:
                    b0:29:b4:4b:ed:9d:3f:c2:ea:8a:ef:a6:55:6b:75:
                    a5:40:1d:80:aa:f3:cc:f3:7c:12:0b:d3:58:3a:fd:
                    5e:ad:9b:6a:1d:06:6a:f5:ef:39:94:e1:65:f1:d9:
                    53:6b:fc:b8:fb:fb:f7:d5:58:01:4f:6a:26:90:dc:
                    f9:37:22:35:48:e6:26:e5:27:ce:96:2b:97:60:92:
                    8e:8e:c4:6b:e8:ab:91:92:23:38:d4:50:54:59:94:
                    49:3f:9e:9c:ec:f8:aa:29:dd:1d:f8:af:fe:7d:e8:
                    2f:6a:f3:fd:c3:7b:8f:80:37:61:54:b1:91:50:b7:
                    3e:6d:73:78:30:0b:a0:76:48:c7:56:17:b1:b9:14:
                    9b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:49:3F:A5:81:A0:7C:11:94:FE:35:6B:20:9F:E4:7B:9F:E9:2C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/55070058-5f4a-38cd-a25a-c39f73666443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.212.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e3:ca:72:9e:42:6e:23:c7:59:2f:82:1a:2a:e2:48:fc:89:
         3e:b1:dd:1c:1b:6a:27:a9:40:06:d5:2f:ce:a9:2d:b5:31:ca:
         ab:02:a3:2c:18:cd:5f:c0:44:61:38:3d:71:40:ad:d4:db:45:
         f8:13:56:20:0c:f2:d0:09:34:6b:45:16:42:3b:99:b9:88:08:
         d7:a0:48:dd:5e:8d:a5:d7:72:fd:a9:f0:66:bd:45:cd:b1:6c:
         bf:4d:75:4b:e6:59:45:7e:4b:a0:b2:ae:9c:e7:cf:4b:6e:07:
         85:ea:43:73:f4:9d:31:96:96:18:f1:72:ec:f4:7a:be:74:9f:
         e7:4a:b4:bc:d5:50:3a:b4:6b:76:71:14:31:e7:3e:c8:7d:6a:
         dd:7f:7b:bb:ca:f3:94:26:2a:31:12:dc:2b:c9:24:6e:18:91:
         09:5f:ca:4a:b6:d9:b0:09:80:06:1a:cd:49:0e:21:e7:b8:1e:
         98:f4:2c:b1:48:12:60:d5:ae:8b:78:63:76:81:1f:19:a7:1a:
         8c:b1:d6:9a:58:d6:41:fc:72:75:d6:61:ea:76:ec:71:41:f9:
         db:70:1d:e2:fb:ff:90:6a:bf:d4:67:53:53:35:12:d6:85:b1:
         8f:a5:57:98:51:ca:76:24:d3:6e:3c:60:b0:2d:22:4f:bb:3e:
         ad:2a:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:44 2024 by rpki-client on console-fra.rpki-client.org