Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b8b9e06-cc7f-3250-a029-8a5a7e30c4ab.roa
File:                     9b8b9e06-cc7f-3250-a029-8a5a7e30c4ab.roa (raw, json)
Hash identifier:          BdN9IdtduK5bnPVNR/9sAlFjtX+IVVCdLCsyXAS8/xQ=
Subject key identifier:   CA:97:6B:69:DD:F5:FA:A3:F1:B2:74:13:2E:F1:AB:76:CC:B8:FF:25
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E706C270F5DF0BCB7868E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b8b9e06-cc7f-3250-a029-8a5a7e30c4ab.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        35.227.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:6c:27:0f:5d:f0:bc:b7:86:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=1e2a3aba-a2a1-4b94-8011-3a520c0d396e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:e9:aa:84:c1:9e:85:9d:26:b8:4c:11:f1:
                    a4:0b:82:6d:24:63:89:41:bc:f9:a0:df:ad:07:cd:
                    28:25:96:c7:f1:eb:46:df:c5:d3:80:ac:fb:bb:b1:
                    00:67:bf:6c:30:fb:87:bc:b7:19:6e:dc:83:d9:98:
                    a0:e1:36:c9:74:cb:a1:a8:50:29:16:de:2b:6b:05:
                    24:da:d2:34:a9:0d:f7:00:79:16:42:95:e3:48:da:
                    de:05:de:7f:57:d5:e8:de:bf:f7:0f:4d:1f:f6:58:
                    f6:7f:0f:20:6f:5e:b4:5e:46:72:9d:d8:c4:8c:36:
                    a2:c7:00:61:4f:cc:44:a7:c5:d4:09:92:3d:b3:b4:
                    ea:ef:94:02:96:24:89:6a:3d:61:ca:fd:91:35:ff:
                    bb:af:eb:01:e1:74:bd:09:ad:14:44:83:07:a9:63:
                    48:8c:a0:b6:f1:4d:af:f3:f7:e0:78:63:9e:62:2c:
                    da:5c:03:be:86:3c:c5:83:66:25:75:4e:50:15:30:
                    a1:c2:bf:87:01:b9:e9:fa:75:0b:7d:1b:0a:43:db:
                    de:ed:6d:90:c5:42:d2:22:dd:21:e6:b0:cd:b2:15:
                    ce:80:86:11:a9:33:9d:05:68:a3:9e:c8:81:cc:d8:
                    1b:e8:62:32:99:6e:86:25:ec:ad:b4:b3:12:a6:fa:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:97:6B:69:DD:F5:FA:A3:F1:B2:74:13:2E:F1:AB:76:CC:B8:FF:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b8b9e06-cc7f-3250-a029-8a5a7e30c4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.227.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:c8:dc:1f:f7:59:64:fe:18:ba:ed:d6:cb:ed:c9:f4:93:5b:
         d3:47:6c:6f:c8:f3:35:97:b6:ed:3f:93:38:b3:08:3d:44:a5:
         c0:d4:a6:08:84:18:c7:a3:16:65:df:77:d1:70:8e:4d:44:48:
         68:48:7b:0b:5c:5a:8c:4d:77:5c:93:e3:b7:3e:96:71:43:22:
         12:88:21:b7:15:07:15:3b:e3:b9:d7:21:a2:cd:e1:ff:08:5c:
         50:d3:46:ab:cb:da:27:c9:90:35:03:18:01:31:ac:49:fc:97:
         f5:2f:67:81:e6:f1:97:3a:d7:64:6e:69:2b:0e:78:e5:5a:62:
         2d:7f:61:ae:d9:ca:d4:63:62:11:29:d5:2d:cb:7c:e6:78:d9:
         c9:3c:2c:60:89:6b:cc:6c:7b:23:b2:9f:f7:10:e4:e7:da:62:
         34:74:be:57:83:4e:1e:98:5b:4a:ac:3f:c5:31:f6:36:91:17:
         f7:47:33:a0:94:d7:52:64:51:3b:66:12:ac:86:55:66:35:b8:
         80:4f:ac:5f:9a:3d:e0:70:af:cc:39:5d:aa:7d:07:b8:bb:ed:
         9b:95:8b:21:d1:6d:54:d0:d3:ce:5d:6c:b7:b7:f6:9e:09:a6:
         67:aa:10:8e:88:43:09:5f:ab:ff:41:06:df:e0:da:88:f5:72:
         08:e3:de:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:23 2024 by rpki-client on console-ams.rpki-client.org