Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71abae45-2b02-3b75-869d-23e5d8ff961a.roa
File:                     71abae45-2b02-3b75-869d-23e5d8ff961a.roa (raw, json)
Hash identifier:          UysAs7ufLDGbXst7HYZlvmpAhA9yOt0LXqrD9bmSJlc=
Subject key identifier:   AD:5F:00:57:16:79:81:22:24:F5:57:F4:13:B1:65:C4:9A:16:D1:CA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E7097DA65B1D982C4394180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71abae45-2b02-3b75-869d-23e5d8ff961a.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        35.244.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:97:da:65:b1:d9:82:c4:39:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=06da696d-ca06-4b3d-bb5d-cbcf51a45c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2f:da:9e:86:53:b6:f0:4e:e4:f7:4f:d4:66:
                    4d:ae:df:ca:d6:2b:5c:72:a0:76:88:25:2a:5d:ce:
                    67:74:d7:1b:45:4d:b5:ca:36:63:4d:5f:32:99:d4:
                    f1:27:a4:29:bc:1f:fa:60:a7:6d:56:fd:3d:75:43:
                    81:bc:d2:fc:2b:0b:f2:11:a2:04:e7:1c:0d:ce:ee:
                    c4:9d:9f:eb:98:e3:47:eb:7e:4d:4e:1c:58:a2:e0:
                    12:2c:1a:c7:bb:b0:29:39:d0:37:5c:83:8f:66:42:
                    0d:31:2d:97:69:39:27:5f:e1:73:a3:d9:e6:b5:36:
                    23:91:88:71:b1:fe:da:dd:4c:15:c9:64:3c:90:8e:
                    e9:4f:90:8f:f8:51:67:ca:3a:cd:19:96:d8:e9:89:
                    1a:88:d9:ad:66:ab:45:cf:86:17:7b:23:44:e6:2d:
                    52:78:27:8c:f4:37:02:7c:a2:9a:a1:1b:1f:38:ce:
                    fe:24:aa:fd:55:20:3d:37:93:ae:65:e6:ea:60:fe:
                    b3:17:77:b2:18:3e:2d:95:3d:3d:36:de:a1:23:55:
                    e2:f9:e2:37:cd:d3:a6:5e:f9:fb:77:a7:2b:81:06:
                    d0:ab:bd:11:99:69:2d:ca:0f:20:a3:96:be:0a:4c:
                    3e:f4:c1:50:91:1a:ce:d4:02:1a:02:08:2e:67:5b:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5F:00:57:16:79:81:22:24:F5:57:F4:13:B1:65:C4:9A:16:D1:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71abae45-2b02-3b75-869d-23e5d8ff961a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.244.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:fb:b5:65:b0:cd:b8:0a:5e:ff:e1:47:50:4e:32:b1:66:99:
         a9:71:11:9b:5c:1a:99:06:99:ac:79:a2:2d:59:6f:89:92:ed:
         1a:cc:40:ac:03:c2:94:02:fb:3b:71:71:95:a1:93:79:35:69:
         eb:fd:bc:82:69:e5:3d:82:f2:01:ee:e7:f1:20:23:e3:3e:b8:
         cc:3f:4b:47:05:84:35:db:80:3e:48:8b:bf:a5:b1:be:2a:c3:
         15:e7:5f:c1:5d:62:bc:c2:81:74:03:23:6d:ae:e6:9d:62:49:
         fd:de:83:3e:71:0d:79:f7:95:58:dd:3d:1a:70:8a:35:cf:10:
         03:97:4d:97:32:e0:ae:8b:fa:4f:b0:54:3b:a1:ba:85:a8:3c:
         a1:b7:d9:6c:2b:83:c9:bd:74:ad:d4:f5:fb:ca:74:ac:2c:c2:
         4b:a2:f8:9f:58:31:c8:c5:28:33:f0:c9:28:f2:0e:97:b1:1c:
         82:62:16:c4:57:41:2e:32:b7:77:92:9d:fc:a4:19:4f:a6:58:
         50:62:d7:5a:6e:79:89:8a:ed:48:32:40:df:f4:6d:5e:86:de:
         32:43:34:26:af:fb:58:e7:a7:a5:fa:ea:97:b0:de:79:09:67:
         4f:e3:de:ee:76:0e:3b:1c:17:70:02:56:9f:17:9c:74:0f:52:
         42:bb:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:28 2024 by rpki-client on console-fra.rpki-client.org