Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b146e4ea-8952-3ec1-8682-e9a499393152.roa
File:                     b146e4ea-8952-3ec1-8682-e9a499393152.roa (raw, json)
Hash identifier:          x22L5PpZcbe/6P46DeraAGIFhxl8U1qzMbcgRCRYN/w=
Subject key identifier:   38:1B:64:BB:A3:34:31:7C:90:20:FE:A9:6A:EF:5C:39:10:DA:4A:67
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584549053B544EA68D80455B0A40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b146e4ea-8952-3ec1-8682-e9a499393152.roa
Signing time:             Thu 21 Mar 2024 21:30:38 +0000
ROA not before:           Thu 21 Mar 2024 21:30:38 +0000
ROA not after:            Wed 19 Jun 2024 21:30:38 +0000
asID:                     15169
IP address blocks:        35.188.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:05:3b:54:4e:a6:8d:80:45:5b:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:30:38 2024 GMT
            Not After : Jun 19 21:30:38 2024 GMT
        Subject: CN=490ea171-e7b7-47f6-8a73-947f722012a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4a:92:9f:ee:4d:5e:28:82:af:6d:67:eb:38:
                    f3:5d:eb:83:62:8c:f2:e0:32:1f:1d:b8:b1:01:c5:
                    09:c5:ec:0e:91:aa:09:18:64:45:7b:ae:13:26:f6:
                    e2:e9:29:30:88:95:80:6d:17:5d:d0:89:3a:f7:6f:
                    72:69:20:67:30:b3:73:12:7f:f5:9a:06:05:ce:8c:
                    c6:ed:32:26:00:b2:ea:04:1a:01:2e:0c:46:36:40:
                    b5:c0:d4:2e:18:23:33:b6:f6:53:0a:ac:34:eb:be:
                    37:a4:22:a0:77:02:47:55:d5:25:64:0a:0b:6e:ee:
                    c9:88:54:62:0e:b6:59:f6:b3:fc:c5:d5:c0:ce:8d:
                    1b:59:fb:0f:28:f6:56:33:11:1b:62:e7:f0:c5:b2:
                    6b:fc:a1:4a:8a:46:40:bf:bd:54:58:4a:1d:e7:2e:
                    f4:69:c8:fa:da:b2:dc:43:cc:41:31:d6:2d:9f:c7:
                    17:08:0f:cf:4b:62:92:9d:64:88:1a:df:d2:cf:d7:
                    58:c3:f8:ba:c8:d4:c6:27:f4:d5:d2:f6:c2:ba:24:
                    2b:5a:98:37:3c:2f:61:1b:41:e4:f9:01:b1:1f:1d:
                    73:4f:21:67:d9:14:dd:d6:03:ee:36:54:95:a9:6a:
                    4e:d6:fa:c4:42:63:c3:4b:8b:e4:17:3f:08:dd:ea:
                    b6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1B:64:BB:A3:34:31:7C:90:20:FE:A9:6A:EF:5C:39:10:DA:4A:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b146e4ea-8952-3ec1-8682-e9a499393152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.188.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d4:09:06:de:00:23:6a:a6:ce:26:59:c8:95:7f:24:b2:55:
         52:ce:7f:54:a4:7b:71:54:ac:c6:4b:c2:76:32:33:b6:50:ee:
         ef:98:8d:16:d1:00:37:2b:12:53:d9:d1:b8:d8:3a:c6:fc:a7:
         9a:a8:2a:b6:77:24:ba:5e:fb:7f:0b:b1:22:ba:2a:1c:d5:81:
         c2:82:bb:0b:53:eb:80:47:9e:8a:c6:b4:fe:7f:d5:b8:8b:24:
         6a:4a:ee:1f:d5:c8:6c:86:b2:7a:22:64:8c:2b:05:b0:7c:52:
         8c:0f:7f:28:f3:97:49:ca:13:74:2d:e7:80:57:c2:83:c3:ee:
         5a:79:91:0b:bb:34:1d:dc:46:80:58:8b:48:f0:ed:43:f2:3f:
         7e:4c:1c:ef:5c:e8:91:e3:0f:83:2a:ae:b0:c1:49:57:a6:69:
         57:77:d3:73:a2:68:17:7d:74:04:ad:68:d6:da:97:58:f7:93:
         65:e9:59:f6:0e:75:46:87:9f:a0:3e:c1:f5:ed:49:5c:f9:f9:
         c8:ea:63:d7:e6:8f:27:5d:31:d5:b9:4c:a4:b5:74:c3:29:84:
         8f:a2:05:8b:f8:12:d5:75:f9:80:ce:c5:64:6b:41:2a:98:61:
         73:75:1d:c9:ee:1e:2b:22:db:9c:93:2a:4f:53:c9:60:3b:6d:
         1e:eb:be:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:31:01 2024 by rpki-client on console-fra.rpki-client.org