Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bcf0c3da-98a7-3b92-91ad-b7665797ad14.roa
File:                     bcf0c3da-98a7-3b92-91ad-b7665797ad14.roa (raw, json)
Hash identifier:          TBo3zhbHTziPCYFtAnVshcIScLaL3rC1tBElRwaP5TI=
Subject key identifier:   4C:1C:A2:A7:84:27:1B:16:D3:A4:94:A3:FA:DD:16:0A:58:18:FD:43
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4FBB025E91A62EAF22D60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bcf0c3da-98a7-3b92-91ad-b7665797ad14.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.187.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:fb:b0:25:e9:1a:62:ea:f2:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=36ab03dc-4da3-426d-bdea-ef7fc1fd15f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:e6:ff:01:51:f6:c1:a8:ed:71:0c:34:30:
                    c6:86:33:8c:ef:10:43:ed:8d:da:1c:72:fe:6c:fc:
                    9d:92:a1:84:8f:6c:24:84:48:a3:02:e2:03:0a:2f:
                    72:da:6f:39:d3:c0:77:fe:ac:d4:82:29:d1:af:fe:
                    d5:2d:f4:a6:9c:1e:7e:0e:cb:e4:30:93:12:f9:bf:
                    65:c0:a3:f6:f7:48:0a:fd:74:6e:46:72:b7:b7:43:
                    32:ec:f9:bc:97:70:f0:f1:15:fc:54:0e:a4:d7:6c:
                    71:0a:e5:9d:b9:89:ea:2f:f0:65:a2:68:7d:c7:a1:
                    b7:f9:88:aa:49:77:54:72:46:3b:c4:4f:ab:ae:69:
                    8e:08:3e:b3:62:d3:ed:8c:4f:18:07:a8:0b:22:0a:
                    cd:0a:9e:57:23:fc:30:ea:b1:b8:15:12:9f:9f:86:
                    d7:1f:a1:b6:93:ba:38:64:a8:50:ad:51:7f:db:ec:
                    5a:53:1f:9b:e7:fc:8c:72:4d:25:13:c0:84:b3:84:
                    61:bb:cd:1f:95:e8:61:6a:b5:11:04:93:6a:7f:17:
                    ad:a0:6e:3e:5f:ee:0c:f9:ea:5e:c0:75:96:db:73:
                    91:74:11:b8:3b:ff:61:b8:85:81:e1:4d:30:c2:fb:
                    f3:cc:23:fc:22:f1:65:c8:89:89:9d:d0:79:15:9d:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1C:A2:A7:84:27:1B:16:D3:A4:94:A3:FA:DD:16:0A:58:18:FD:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bcf0c3da-98a7-3b92-91ad-b7665797ad14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.187.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a4:33:85:cb:e9:06:78:60:86:d6:ce:6b:9c:48:e3:56:d5:
         ed:80:db:cd:05:f5:79:0f:85:22:77:28:db:b0:08:97:ca:71:
         1d:76:c0:e8:ae:ba:80:d1:47:9a:bd:10:53:27:79:49:53:ca:
         9a:69:8a:1c:61:e8:cb:0a:c1:f7:e7:4d:31:bc:e2:1b:c2:44:
         c5:32:43:28:5f:e3:2b:a6:75:76:7c:7f:f9:d9:af:f4:a7:92:
         83:32:17:a8:d8:d7:c5:47:7b:fe:2e:b3:3e:15:e5:c9:21:ac:
         c8:93:a9:0c:33:9a:bb:8d:dc:31:2b:6f:41:3e:90:98:bb:ea:
         d9:6c:4f:62:64:4e:79:f1:f7:82:34:d4:52:57:d2:34:d7:6a:
         2d:29:a3:a3:95:cb:7f:76:96:ed:be:98:b1:d9:9d:29:aa:c1:
         4a:c5:59:21:99:e3:ba:82:ef:a2:2a:89:77:86:e3:71:ae:84:
         1d:e3:35:80:5f:8b:7d:ab:8e:40:75:4e:78:29:31:d1:65:4b:
         94:c2:2e:31:2d:73:63:26:65:b6:6f:64:27:9c:54:db:91:d0:
         ad:f2:10:92:0a:54:93:71:cb:e4:dc:dc:92:7a:18:07:71:c3:
         e1:39:60:67:2a:7d:ba:85:94:13:8e:e1:00:3f:0c:8b:e1:16:
         c7:04:4a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:39 2024 by rpki-client on console-ams.rpki-client.org