Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a909092-0047-378c-ae36-2640f41a8d2b.roa
File:                     7a909092-0047-378c-ae36-2640f41a8d2b.roa (raw, json)
Hash identifier:          viTXfiFRTkLkT2a7U8sNQpW0FeNCcAgQWvwtmNTfsUU=
Subject key identifier:   2C:5F:79:56:52:E8:24:FA:EA:C9:9E:9E:24:FD:C1:8C:71:B0:1E:A4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E70777BD45BAA30BA3577C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a909092-0047-378c-ae36-2640f41a8d2b.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        35.223.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:77:7b:d4:5b:aa:30:ba:35:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=b93bb53b-5ba6-4129-bf54-a6bc450376f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ba:f5:cc:f6:9e:e8:86:fc:a4:c1:68:36:75:
                    ec:e3:93:ca:0e:f6:9a:a8:cf:70:3d:2f:76:f0:c7:
                    fb:40:db:ad:4d:1e:b6:4d:7c:58:9f:9f:45:0f:cb:
                    34:45:3b:37:7d:b0:31:b3:50:3f:79:04:47:66:ac:
                    52:a7:fa:2d:3b:c2:bf:6a:35:1b:cf:14:23:34:aa:
                    09:ea:49:e4:c0:df:53:52:f8:08:db:74:d6:dd:74:
                    1b:4b:1b:36:3f:dc:75:74:8d:f0:02:32:33:59:f1:
                    69:80:0b:a5:31:4b:d6:e0:b7:c4:a6:be:de:56:a9:
                    6d:c7:ad:0c:16:07:f6:47:96:c4:c3:e9:9e:08:55:
                    c4:0c:4e:7d:a1:19:37:22:cd:13:f7:56:94:77:19:
                    af:28:45:5d:06:27:5d:9a:12:c1:82:d4:af:b3:10:
                    70:59:aa:1f:d5:1b:31:ed:03:27:f7:39:24:53:b4:
                    cc:bb:47:52:83:13:b7:df:38:ea:48:02:9e:5f:c1:
                    8f:b6:40:83:79:5a:ee:4c:35:6a:9a:00:e2:ee:ef:
                    cb:66:36:ae:45:c9:85:bc:33:04:a1:79:e5:dd:db:
                    0b:f8:63:21:5b:3b:bc:7a:36:46:06:d0:9c:82:27:
                    57:f8:48:69:8f:96:51:31:9d:4e:ee:30:62:d4:ad:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5F:79:56:52:E8:24:FA:EA:C9:9E:9E:24:FD:C1:8C:71:B0:1E:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7a909092-0047-378c-ae36-2640f41a8d2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.223.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c0:ea:dd:fa:67:cf:c4:8a:44:c6:d1:2b:5e:76:b7:e6:2b:
         f2:06:61:26:5b:05:af:86:7e:df:75:51:21:ad:41:62:50:42:
         31:fe:38:61:ec:67:6f:d2:b5:50:22:9c:63:b7:31:6e:51:3e:
         e3:03:d6:27:8c:bd:dc:2c:c1:3c:50:27:8c:2f:4f:d1:bd:5d:
         ba:e7:0c:33:16:f5:91:72:28:76:3f:57:6f:aa:92:4a:7b:fa:
         92:e0:57:84:9b:d4:a8:5e:af:1c:e2:b7:84:63:1c:c0:38:4b:
         5d:e2:48:65:f0:a4:eb:59:43:90:01:c9:b2:b4:f6:f5:2d:ca:
         8a:a9:31:79:43:e5:1a:16:6d:86:89:c8:d5:ca:e1:29:b7:36:
         69:28:82:2e:3b:74:26:af:d1:b6:b2:3f:63:aa:6a:65:0e:de:
         b7:df:30:3a:58:99:bf:e7:ba:7e:e6:b6:aa:f4:19:55:d9:2a:
         f6:eb:b8:5f:95:fa:66:6a:f9:30:2a:8c:ec:58:87:de:f5:19:
         22:f8:a5:59:6a:20:79:4d:57:ec:a3:21:47:88:08:e4:a7:33:
         3b:75:31:49:fd:bd:a8:31:4b:76:57:fe:1e:e6:91:b1:2a:4a:
         08:51:fa:43:6c:81:d7:35:8e:bf:2a:08:c6:21:2a:c5:04:61:
         95:25:81:5b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcecHd71FuqMLo1d8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
YjkzYmI1M2ItNWJhNi00MTI5LWJmNTQtYTZiYzQ1MDM3NmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4br1zPae6Ib8pMFoNnXs45PKDvaaqM9wPS92
8Mf7QNutTR62TXxYn59FD8s0RTs3fbAxs1A/eQRHZqxSp/otO8K/ajUbzxQjNKoJ
6knkwN9TUvgI23TW3XQbSxs2P9x1dI3wAjIzWfFpgAulMUvW4LfEpr7eVqltx60M
Fgf2R5bEw+meCFXEDE59oRk3Is0T91aUdxmvKEVdBiddmhLBgtSvsxBwWaof1Rsx
7QMn9zkkU7TMu0dSgxO33zjqSAKeX8GPtkCDeVruTDVqmgDi7u/LZjauRcmFvDME
oXnl3dsL+GMhWzu8ejZGBtCcgidX+Ehpj5ZRMZ1O7jBi1K3roQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCxfeVZS6CT66smeniT9wYxxsB6kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2E5MDkwOTItMDA0Ny0z
NzhjLWFlMzYtMjY0MGY0MWE4ZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAI98wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJ8Dq3fpnz8SKRMbRK152t+Yr8gZhJlsFr4Z+33VRIa1BYlBCMf44Yexn
b9K1UCKcY7cxblE+4wPWJ4y93CzBPFAnjC9P0b1duucMMxb1kXIodj9Xb6qSSnv6
kuBXhJvUqF6vHOK3hGMcwDhLXeJIZfCk61lDkAHJsrT29S3KiqkxeUPlGhZthonI
1crhKbc2aSiCLjt0Jq/RtrI/Y6pqZQ7et98wOliZv+e6fua2qvQZVdkq9uu4X5X6
Zmr5MCqM7FiH3vUZIvilWWogeU1X7KMhR4gI5KczO3UxSf29qDFLdlf+HuaRsSpK
CFH6Q2yB1zWOvyoIxiEqxQRhlSWBWw==
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:33 2024 by rpki-client on console-fra.rpki-client.org