Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9a224d6-0db9-363e-95dd-dd71f107722c.roa
File:                     b9a224d6-0db9-363e-95dd-dd71f107722c.roa (raw, json)
Hash identifier:          gPmMPxm02qz5QpisZnIrvtTYJEm+gWX0DV5Z55y8irM=
Subject key identifier:   F7:97:D4:3C:3C:FF:3C:E0:F4:A8:3C:8F:19:9C:95:90:70:28:05:9B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F538556C2BE995E5385680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9a224d6-0db9-363e-95dd-dd71f107722c.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.195.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:38:55:6c:2b:e9:95:e5:38:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=e856dc3f-2313-4f76-80a9-98c5e311388d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:4a:36:d2:c0:22:78:64:42:3b:be:e7:89:
                    9f:d1:20:08:d7:b4:d7:01:ad:31:f6:77:60:75:0a:
                    61:43:60:69:b4:96:fe:d7:2e:83:b4:79:28:7f:05:
                    44:10:0d:93:77:fa:e7:01:b5:e9:73:bd:52:a2:81:
                    6e:b0:93:d6:fd:10:36:cc:d8:34:74:15:32:cd:9e:
                    d0:ca:2c:17:c9:b7:d8:93:d1:60:75:1c:f8:1a:69:
                    05:15:7f:1c:ec:38:4a:f8:a1:06:fc:7b:c4:04:10:
                    61:a5:d6:b7:c2:65:9d:26:9b:df:60:0d:13:ea:16:
                    48:37:c5:23:d9:69:d6:9a:bf:f8:5f:e3:38:91:c1:
                    c8:28:78:79:2c:54:2b:93:88:43:80:49:0c:00:d9:
                    31:c0:e0:07:5b:0e:7e:47:0b:b7:71:22:a5:cf:9d:
                    1e:50:90:d6:02:c9:47:75:64:85:87:ac:01:7f:b6:
                    72:4b:33:47:df:bf:6a:b8:76:bd:c6:a4:a3:2a:17:
                    85:87:75:3c:d4:11:48:77:60:ef:87:4a:61:42:de:
                    eb:7e:bd:10:18:e1:8c:49:10:12:38:a2:21:e7:a5:
                    a6:dd:a4:ae:1f:56:3b:ce:70:d8:2e:bf:34:e3:07:
                    c6:17:a3:ce:de:ef:3e:fd:36:b6:eb:f1:b7:26:e7:
                    3a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:97:D4:3C:3C:FF:3C:E0:F4:A8:3C:8F:19:9C:95:90:70:28:05:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9a224d6-0db9-363e-95dd-dd71f107722c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.195.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:cd:81:25:03:c2:52:6e:53:c5:c6:f2:80:a8:79:50:ec:08:
         a1:dc:a4:f6:e7:93:fd:b3:2d:73:c2:39:97:af:49:7a:6e:dc:
         8b:f0:60:81:ea:29:55:98:5b:15:29:be:cf:3b:e5:94:84:37:
         c7:68:06:aa:19:40:6f:79:af:07:a3:27:75:5d:fa:2d:94:51:
         00:d4:df:bc:09:eb:05:50:40:35:89:bf:07:cc:78:ae:a5:e8:
         b1:86:a8:de:20:49:7c:5b:21:ed:79:9a:37:b6:2b:2b:87:94:
         3c:2f:38:6d:95:b3:ee:e3:f7:e0:6d:1b:c9:4b:2c:b1:41:19:
         7c:4c:a1:7a:7e:06:11:5f:b9:ea:16:b8:a7:3b:88:27:f6:f4:
         ce:1f:95:e1:74:71:ac:b8:95:aa:d6:08:c2:ea:82:1c:20:fd:
         d8:b0:bf:1d:cd:4d:37:21:be:0a:33:d0:dd:e7:1f:d2:af:ec:
         4a:78:c8:4f:06:76:fa:23:bd:63:f5:a6:2a:51:76:ff:43:65:
         49:38:21:05:65:aa:62:89:98:ea:ea:2c:46:25:64:a5:fa:85:
         aa:25:d2:b0:9c:7e:e3:d7:c9:85:41:83:08:16:da:31:f8:29:
         f5:c9:93:74:af:69:3a:fc:35:91:b8:c9:bd:da:53:75:20:10:
         5a:a1:f5:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9ThVbCvpleU4VoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZTg1NmRjM2YtMjMxMy00Zjc2LTgwYTktOThjNWUzMTEzODhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsdKNtLAInhkQju+54mf0SAI17TXAa0x9ndg
dQphQ2BptJb+1y6DtHkofwVEEA2Td/rnAbXpc71SooFusJPW/RA2zNg0dBUyzZ7Q
yiwXybfYk9FgdRz4GmkFFX8c7DhK+KEG/HvEBBBhpda3wmWdJpvfYA0T6hZIN8Uj
2WnWmr/4X+M4kcHIKHh5LFQrk4hDgEkMANkxwOAHWw5+Rwu3cSKlz50eUJDWAslH
dWSFh6wBf7ZySzNH379quHa9xqSjKheFh3U81BFId2Dvh0phQt7rfr0QGOGMSRAS
OKIh56Wm3aSuH1Y7znDYLr804wfGF6PO3u8+/Ta26/G3Juc6CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPeX1Dw8/zzg9Kg8jxmclZBwKAWbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjlhMjI0ZDYtMGRiOS0z
NjNlLTk1ZGQtZGQ3MWYxMDc3MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8PAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADNgSUDwlJuU8XG8oCoeVDsCKHcpPbnk/2zLXPCOZevSXpu3IvwYIHq
KVWYWxUpvs875ZSEN8doBqoZQG95rwejJ3Vd+i2UUQDU37wJ6wVQQDWJvwfMeK6l
6LGGqN4gSXxbIe15mje2KyuHlDwvOG2Vs+7j9+BtG8lLLLFBGXxMoXp+BhFfueoW
uKc7iCf29M4fleF0cay4larWCMLqghwg/diwvx3NTTchvgoz0N3nH9Kv7Ep4yE8G
dvojvWP1pipRdv9DZUk4IQVlqmKJmOrqLEYlZKX6haol0rCcfuPXyYVBgwgW2jH4
KfXJk3SvaTr8NZG4yb3aU3UgEFqh9V4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:51 2024 by rpki-client on console-fra.rpki-client.org