Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa
File:                     a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa (raw, json)
Hash identifier:          oB6g3/fjEwmdNe/oQd3xfaDLBzFLNAz9X8x3jxsZTCM=
Subject key identifier:   4D:DD:A4:CA:CA:AF:BC:35:46:F2:01:16:A5:C5:D8:06:ED:B5:C7:1C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F52788F18CB4AF23415280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        35.217.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:27:88:f1:8c:b4:af:23:41:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=f2724145-fd09-4a33-9e59-f093efe45ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:5c:c2:d3:ea:35:f1:a3:a3:44:fd:2b:a7:
                    36:06:1e:92:e9:42:f9:77:cc:1b:3f:52:73:fc:51:
                    05:78:c9:a3:2d:52:dd:5e:5e:fb:c0:e7:6e:31:f6:
                    c9:11:f3:e1:5b:27:3b:64:32:a2:ba:a6:3e:37:56:
                    07:60:03:b6:fa:d5:c7:32:08:e6:1b:d8:2c:df:45:
                    00:35:b7:34:2c:ed:55:5f:9a:59:0e:c2:7f:43:93:
                    22:b1:07:5b:9b:b8:d5:c5:d3:1f:79:b4:a2:32:65:
                    7d:fc:9a:40:f9:13:ac:46:3a:10:54:ef:30:42:d2:
                    84:ac:1a:a1:d0:74:33:4f:88:5b:4b:35:69:76:d4:
                    0b:8c:6c:a7:82:38:47:12:b1:ea:6a:5c:90:30:e1:
                    de:47:66:a0:76:d7:6f:93:8f:b5:7b:09:36:d4:e0:
                    6f:b8:9d:43:c6:dc:a7:00:06:a7:9c:c3:4b:6c:50:
                    4c:cc:53:48:9f:82:f0:57:48:32:5e:64:33:18:e2:
                    d5:45:fc:1c:7a:d9:23:35:af:f8:88:82:0e:4b:85:
                    d0:00:06:3b:19:04:21:f2:68:66:13:09:0f:09:6d:
                    d0:33:a5:8b:e8:3b:0d:ac:41:a2:56:ad:76:56:9f:
                    e0:cf:d1:2d:67:b0:61:5c:ff:cf:1b:25:bd:d2:21:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DD:A4:CA:CA:AF:BC:35:46:F2:01:16:A5:C5:D8:06:ED:B5:C7:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.217.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f0:cf:59:b9:25:9b:94:fc:60:ed:3d:83:8b:ae:27:ed:f9:
         b4:45:b8:47:3d:97:1d:c5:24:15:d1:80:24:eb:b1:35:52:65:
         de:20:53:24:1c:de:6d:1d:4d:fa:f6:2a:af:f5:94:3a:e1:9e:
         92:09:97:a3:85:be:e0:30:10:fa:74:4e:5e:15:1a:54:a0:4a:
         f8:39:a8:82:aa:60:ad:dc:b5:76:7a:3f:ce:62:aa:6a:27:a8:
         30:3e:cd:50:62:5c:3b:a5:6b:68:e4:0b:c4:f6:eb:79:e7:60:
         2b:b7:93:ad:80:b2:8e:f0:d1:f9:aa:fe:1a:c4:ab:6e:3d:f3:
         2d:f8:97:6e:eb:57:64:a6:09:af:b7:27:94:5f:73:c0:a3:9c:
         3c:78:29:f1:7d:f8:8f:d6:68:77:b9:c4:4d:7a:2b:7b:e3:0a:
         82:f7:8a:e3:c2:92:24:ef:db:30:c6:4a:6c:a0:46:59:3f:c2:
         74:6d:9a:c9:7f:f8:36:e3:51:e6:25:30:10:96:fd:bd:bf:8b:
         bb:cb:2a:0f:20:d0:a8:be:ba:b2:74:ae:a1:4c:e6:20:97:0a:
         67:84:64:a3:bd:bb:9e:fc:15:e9:7b:3a:13:80:95:a0:06:a2:
         25:d0:ea:db:d5:dd:56:0c:e5:80:e6:91:48:c8:ab:6b:19:4f:
         f8:d7:7a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:07:32 2024 by rpki-client on console-ams.rpki-client.org