Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc1a214-6ddd-30fa-b6f4-c28afe842978.roa
File:                     6dc1a214-6ddd-30fa-b6f4-c28afe842978.roa (raw, json)
Hash identifier:          DaFxS/u81Re9/lhj0qBACA8lbXHqTmiYzKvfc2VXHMk=
Subject key identifier:   89:DA:A9:C3:C6:12:CD:2A:6B:1B:67:90:2D:94:74:C0:9E:FC:B7:2B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F5221FD357C0B740F0E040
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc1a214-6ddd-30fa-b6f4-c28afe842978.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.200.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:22:1f:d3:57:c0:b7:40:f0:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=a5d89192-4b72-4fd4-876c-445c00cc7fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f9:f0:17:05:c4:2f:99:44:22:98:64:7e:70:
                    f3:18:7b:8a:27:05:b2:db:dc:6b:c8:16:ad:61:02:
                    0c:cf:f3:a7:e7:38:b7:93:c2:73:f3:de:e9:c0:2c:
                    c9:e2:f3:4f:65:8a:e7:71:3b:4e:ad:96:fb:7c:ce:
                    a4:9b:a3:5c:f4:04:ae:28:35:7c:f0:4c:49:07:89:
                    4a:6b:9b:d6:d7:93:f7:8e:32:20:8c:0e:15:ff:ac:
                    00:d4:6d:c8:bb:6a:7f:1e:0c:77:38:a5:b9:79:59:
                    dc:21:8b:4b:b3:6e:4a:a8:7b:10:07:fe:f5:98:b7:
                    48:4f:90:0d:dc:62:b1:3c:f9:e5:38:a8:17:5e:1a:
                    1e:80:6f:68:09:39:d3:3c:11:5e:21:db:84:b3:7b:
                    81:bd:c3:dd:73:30:d3:de:98:b1:b1:8c:cd:88:25:
                    b9:22:aa:60:e9:04:f5:9c:c4:7c:a4:c0:c5:ca:78:
                    be:9c:2b:e3:14:a5:0e:69:c6:4f:08:de:f1:1e:39:
                    fa:66:d1:3e:cf:f6:79:d6:34:09:bb:7a:35:43:60:
                    bd:c2:eb:7e:f1:40:30:47:2c:ec:52:fc:f0:b5:08:
                    01:b0:6b:47:37:b6:46:54:fe:b9:80:44:95:43:30:
                    bf:30:a0:9c:43:01:5e:99:8b:ea:d2:b2:a3:15:7a:
                    a4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DA:A9:C3:C6:12:CD:2A:6B:1B:67:90:2D:94:74:C0:9E:FC:B7:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dc1a214-6ddd-30fa-b6f4-c28afe842978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.200.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a3:fa:2c:d3:2b:3b:66:d8:94:cd:5b:62:0f:4d:51:74:fe:
         6a:4b:24:3c:f2:8f:0f:32:24:74:ec:74:c6:01:15:7a:b4:e3:
         7d:43:41:da:43:b9:fa:3a:70:1f:91:7d:56:36:fd:36:93:e1:
         8a:87:af:7d:8d:77:b6:67:db:3f:a8:e7:eb:d3:8b:46:a4:08:
         81:c8:a3:94:25:67:13:1f:3a:08:28:9d:c5:d9:47:5d:c6:1c:
         e1:2b:b6:25:13:62:77:97:6c:04:fd:69:bd:37:e8:f5:ff:df:
         60:9e:6e:23:0c:18:6d:b5:25:37:17:20:27:ec:65:f3:0b:b9:
         37:d0:2c:58:88:7d:8b:b7:0b:79:b5:fb:8f:70:00:d3:94:77:
         18:83:e7:64:66:39:16:78:0d:76:5c:b4:35:81:9b:ba:cb:dd:
         b8:65:10:b4:fe:74:d7:32:3b:4b:98:de:24:e2:f8:bd:86:2f:
         f2:e1:f1:a4:c8:fd:d7:7f:86:1f:10:98:f0:3e:e6:bf:01:f6:
         ca:59:b1:37:63:cc:0a:11:d5:92:52:01:3b:81:ba:dc:8c:d6:
         62:cb:c6:71:7c:d9:4c:d0:e7:ff:d5:10:c9:a8:b8:30:19:1c:
         19:06:8f:98:f0:e2:e0:9a:87:d3:36:5d:b8:56:f9:1e:3f:ae:
         d0:09:51:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:01 2024 by rpki-client on console-ams.rpki-client.org