Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7985cc3e-ee55-3682-99c2-052602ed74fc.roa
File:                     7985cc3e-ee55-3682-99c2-052602ed74fc.roa (raw, json)
Hash identifier:          4ROd61vKuy20w5DEg8ZY3TksbLSIFMFo1ODhac8qDLQ=
Subject key identifier:   15:B8:CD:5A:FB:F7:63:B2:C2:55:D1:BA:EC:4E:03:B2:00:B6:7B:B7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F532BCA1AE19E5C45364C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7985cc3e-ee55-3682-99c2-052602ed74fc.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.226.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:32:bc:a1:ae:19:e5:c4:53:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=43f2b137-4bf1-429e-9d3d-e58e4293fea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:33:7b:0a:cc:01:d8:0a:35:0c:23:eb:c3:
                    5e:9d:33:1a:47:0e:0f:c7:3a:eb:5d:ad:a9:06:b9:
                    97:2f:b3:78:2d:e4:86:3d:39:24:d6:50:a4:d7:75:
                    3f:b1:7f:88:4b:20:c0:53:1d:cb:3d:92:fe:7b:b2:
                    40:de:c7:b8:71:99:ca:5d:4f:c9:09:86:40:d1:0d:
                    8d:2b:09:d5:2a:92:73:be:45:9e:4a:98:aa:31:e3:
                    4e:33:bf:35:1c:8b:0b:64:f4:87:41:80:c8:09:d4:
                    7e:96:58:13:c7:cb:1a:e0:7a:36:0e:26:39:3e:72:
                    19:8e:2a:e4:3f:d1:c7:44:8f:46:2b:25:2e:df:6b:
                    bf:43:ea:00:20:1f:75:1d:9d:50:de:f8:ef:45:6b:
                    12:a4:3e:cc:f7:b4:38:1e:26:bd:cc:3e:70:33:62:
                    72:06:5c:9c:24:3b:b2:29:d6:05:8f:a0:2d:0b:45:
                    a2:ec:93:d4:f2:15:d4:da:a0:43:42:bc:4d:7f:e1:
                    bc:cb:51:f7:af:96:48:95:dd:a0:a9:86:08:5a:88:
                    80:70:f4:78:e8:d4:dd:9d:7c:f7:c4:e1:0a:b4:44:
                    15:67:a1:e8:33:78:b5:80:88:67:d2:b7:05:9e:0a:
                    1c:a9:20:49:33:22:74:b4:f7:67:5e:39:04:63:c2:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B8:CD:5A:FB:F7:63:B2:C2:55:D1:BA:EC:4E:03:B2:00:B6:7B:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7985cc3e-ee55-3682-99c2-052602ed74fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.226.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:06:30:ca:a9:1d:a4:75:42:77:74:ee:c9:91:a1:51:d9:2c:
         41:8b:0a:9e:7c:d0:5c:56:05:5b:eb:f5:48:22:4c:7e:87:0e:
         1e:9f:22:ad:63:25:f9:18:26:74:50:fe:bb:1f:62:f0:0e:b2:
         12:47:34:fc:39:a0:7b:59:f5:0b:ce:51:99:e5:98:76:03:5f:
         c3:9c:ce:9f:9e:eb:57:34:20:04:f0:91:f9:5a:6a:15:59:8e:
         bd:0c:fa:3d:7c:14:7b:74:e8:4e:4d:b3:bd:58:12:10:ff:12:
         dc:7c:22:06:92:0b:d4:56:a9:91:4a:b9:3d:4e:f7:d3:58:84:
         6c:93:79:a9:c0:72:20:97:7b:11:18:dd:bd:1d:fe:32:23:4f:
         6b:2d:96:ba:1a:b0:cd:88:65:f9:68:ca:63:b1:94:cd:27:91:
         1f:81:00:2b:24:9d:7a:27:74:07:7e:cd:18:cc:61:8c:7b:5a:
         f5:21:0f:b8:c9:72:dd:55:25:37:d9:19:ff:df:0d:81:33:b7:
         b2:59:3c:af:d0:af:7c:9f:e5:5f:64:58:28:fd:7a:7d:8c:06:
         a1:e3:4b:36:c5:94:f2:db:b2:95:ee:f4:bc:83:20:09:a1:b3:
         25:8c:da:c8:84:41:b3:ce:4e:f7:fb:b7:f0:0c:27:13:24:47:
         7a:1c:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:07:17 2024 by rpki-client on console-ams.rpki-client.org