Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5855a1f3-99db-3454-a604-768f9ebcb865.roa
File:                     5855a1f3-99db-3454-a604-768f9ebcb865.roa (raw, json)
Hash identifier:          A65AvRfRKzBJ0ahXk6f3gpb7U4FMmwanAoeiiSMKPc8=
Subject key identifier:   2D:62:CF:62:4C:07:6D:F1:90:6A:F8:42:ED:7A:6E:68:19:FB:77:9E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490FA43D301C5EE3A0407480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5855a1f3-99db-3454-a604-768f9ebcb865.roa
Signing time:             Thu 21 Mar 2024 21:51:36 +0000
ROA not before:           Thu 21 Mar 2024 21:51:36 +0000
ROA not after:            Wed 19 Jun 2024 21:51:36 +0000
asID:                     15169
IP address blocks:        35.185.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0f:a4:3d:30:1c:5e:e3:a0:40:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:51:36 2024 GMT
            Not After : Jun 19 21:51:36 2024 GMT
        Subject: CN=0e79d8ae-1199-45c4-bd54-9ee996972d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7f:00:f2:55:12:e6:24:e2:13:d8:11:eb:fe:
                    2f:07:4d:8b:de:e9:9d:11:21:fa:14:c9:c0:ba:88:
                    df:97:45:80:5f:99:50:3c:48:57:96:5d:93:3d:6a:
                    a8:94:35:0c:55:6b:81:22:25:da:6e:8f:f8:25:4e:
                    f3:9f:02:5b:b3:3d:f5:70:c2:4b:0e:16:21:92:93:
                    97:2d:c2:a0:f7:22:0d:e8:8b:fc:b9:ca:32:76:2f:
                    89:1a:6e:2e:86:e2:f4:03:89:c1:46:7e:f6:fd:d8:
                    03:7a:15:18:96:59:f9:8d:0d:37:48:28:4d:96:c5:
                    31:fd:a1:e6:8d:31:18:da:91:15:ca:74:45:03:2a:
                    fb:39:83:a3:52:58:fd:26:0d:db:7e:31:30:3d:93:
                    2a:09:e3:04:e8:ee:f0:c4:6c:43:0c:3e:87:05:01:
                    7c:56:f4:ef:30:b0:65:26:8f:8e:45:cf:e0:a7:e9:
                    00:bd:7b:05:e2:8b:ae:c0:d1:64:ee:c1:d0:d7:99:
                    e8:94:55:a6:b5:e4:6a:b2:d5:ac:51:c5:47:be:2c:
                    6f:b5:b9:3c:c1:8d:97:85:45:e2:fa:96:29:11:60:
                    46:83:5e:52:eb:ce:47:69:5f:a5:f7:4a:e0:0a:8c:
                    26:5b:2b:d1:67:25:40:a4:f0:4a:65:41:43:bc:47:
                    89:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:62:CF:62:4C:07:6D:F1:90:6A:F8:42:ED:7A:6E:68:19:FB:77:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5855a1f3-99db-3454-a604-768f9ebcb865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.185.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b0:b4:f4:5a:0c:83:d8:c8:68:e7:d1:c8:07:c2:da:16:ca:
         1c:f7:47:b4:eb:c9:f7:6b:fd:0f:0f:3e:1b:3b:bc:b3:bf:5f:
         3e:fc:18:f7:b7:36:bb:5a:5d:e3:1a:87:fe:d7:77:60:43:f4:
         77:31:6a:85:0a:79:6d:0c:61:ea:49:78:4c:8d:8e:c4:40:aa:
         91:3f:f8:87:79:46:9b:56:69:01:91:ac:02:07:52:51:76:23:
         06:7e:e4:7e:8a:72:f5:aa:3d:74:5e:55:c0:47:82:8f:9d:fc:
         fb:32:4b:9e:0f:33:18:31:c8:6d:e2:87:b1:40:f1:16:56:4e:
         33:7a:87:d4:02:f0:0b:06:6f:ee:ea:f8:27:aa:e4:ff:4e:75:
         4c:6e:50:b3:db:43:e4:4d:7b:6d:2f:b5:88:44:e4:96:81:53:
         bd:ff:ab:a5:f9:8b:12:a3:65:55:93:00:93:fe:e5:80:80:97:
         37:90:84:0a:3b:60:57:ef:bf:f9:e1:94:60:9f:a3:3f:a8:b4:
         eb:fa:c5:1f:2c:ef:84:bd:8a:82:cf:c3:8f:19:bb:c8:ef:50:
         e3:07:53:48:cb:53:c0:69:f8:43:21:2b:a4:b2:94:b7:79:43:
         7b:15:80:f4:36:23:d0:d8:38:84:51:f8:78:cd:33:97:7a:ea:
         bc:e4:d5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:44:55 2024 by rpki-client on console-ams.rpki-client.org