Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88af8c0b-d9c0-3b1d-a201-afd6cefdbb5d.roa
File:                     88af8c0b-d9c0-3b1d-a201-afd6cefdbb5d.roa (raw, json)
Hash identifier:          xjvejxQ0Ult+y8T9I0M+aUf8HDvUD8dEX5CJ90as8iQ=
Subject key identifier:   DA:5C:1C:20:31:CB:6A:22:84:DB:9D:98:AF:67:04:28:12:B5:A7:54
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858454900B478C434390B0F4B6E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88af8c0b-d9c0-3b1d-a201-afd6cefdbb5d.roa
Signing time:             Thu 21 Mar 2024 21:21:30 +0000
ROA not before:           Thu 21 Mar 2024 21:21:30 +0000
ROA not after:            Wed 19 Jun 2024 21:21:30 +0000
asID:                     15169
IP address blocks:        35.219.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:00:b4:78:c4:34:39:0b:0f:4b:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:21:30 2024 GMT
            Not After : Jun 19 21:21:30 2024 GMT
        Subject: CN=b06d7d70-d136-4db4-8def-014c74e2e627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:70:e3:bf:d0:7d:13:0d:d9:60:cd:6c:c7:
                    64:19:9e:61:a3:7f:2c:da:68:d1:f2:49:d4:ee:33:
                    ff:dc:49:27:64:d5:6f:75:da:48:2f:68:e6:6c:f5:
                    61:c8:b0:4d:c0:39:46:39:04:95:06:4e:a2:18:7a:
                    b4:bf:c0:8d:8b:64:8f:7d:b0:3d:c5:e1:c5:03:3e:
                    60:15:42:fb:0d:8e:bc:bb:ce:b7:3b:67:23:d3:5c:
                    7a:61:32:65:a8:cf:49:18:85:5e:e7:70:5a:bf:ee:
                    59:95:13:f3:ef:41:0d:51:e0:ad:58:98:fc:08:0d:
                    23:27:f7:8c:0c:b4:25:f8:52:f6:09:43:41:4d:e0:
                    0e:e5:59:7a:39:9d:f1:c6:70:dc:78:a0:a5:64:08:
                    0f:d4:20:e0:98:7d:68:e5:5d:70:3b:80:89:7c:a0:
                    d6:ad:f0:00:06:39:78:01:a4:41:f5:96:ea:7a:11:
                    d2:33:2c:8a:ff:93:84:78:ee:0b:3f:3b:e3:25:0b:
                    06:f4:e4:46:d5:73:5d:b5:6a:c6:69:d8:24:ec:30:
                    5d:8a:95:24:13:2f:5f:77:46:25:45:51:c9:7b:f9:
                    cb:fe:96:84:3b:d8:57:93:77:3e:fc:71:2e:8d:fd:
                    97:32:48:af:c6:b0:80:d2:43:73:87:f0:6d:99:52:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5C:1C:20:31:CB:6A:22:84:DB:9D:98:AF:67:04:28:12:B5:A7:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88af8c0b-d9c0-3b1d-a201-afd6cefdbb5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.219.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:1f:eb:65:ae:26:82:11:ec:70:1c:a5:92:57:84:85:46:81:
         6b:d9:37:09:f2:17:21:fb:22:b9:79:16:3f:1d:ca:34:17:12:
         5c:fe:a1:73:16:11:9d:44:46:6c:42:12:f7:c6:6f:e9:fb:63:
         fb:06:32:f5:35:b6:15:16:5d:b4:f9:7c:6b:53:f3:08:be:1b:
         fb:37:2d:27:4f:95:ad:73:e3:9e:04:20:df:95:06:d7:73:e2:
         b9:57:f7:fc:32:7e:6f:8f:be:42:24:04:03:bf:f6:63:de:77:
         27:e0:b0:31:8c:c1:90:96:c6:09:df:b7:2d:8f:47:66:f4:63:
         e3:6b:29:df:93:0c:2c:6a:cb:c9:e9:b5:ed:8a:38:b5:94:3a:
         55:46:53:86:b3:d7:8e:b2:78:1c:a1:68:63:ce:54:5e:31:55:
         e0:a7:ea:26:e3:bc:19:c4:f5:f9:c6:0f:4a:1f:f3:e1:dd:96:
         2d:26:d4:a2:78:5c:96:c9:d3:21:32:38:f0:7a:dc:9d:ff:21:
         7e:94:2d:19:b8:f6:07:19:f7:53:81:9e:42:68:19:e3:26:c2:
         26:50:c0:80:16:37:d8:ee:7a:5b:33:b0:91:a3:32:e3:e1:98:
         06:6b:e9:23:23:cb:c7:65:ff:1a:c8:26:9a:29:29:36:b1:fd:
         0f:0a:e7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:33:19 2024 by rpki-client on console-fra.rpki-client.org