Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc18bc3-1f72-3baf-82c4-2698b8fe237b.roa
File:                     cfc18bc3-1f72-3baf-82c4-2698b8fe237b.roa (raw, json)
Hash identifier:          6bVw2wQ6BDuEaFmK9+baxYNWg27htnu7NrElCVSfqUw=
Subject key identifier:   52:B3:00:C1:95:F9:F9:7D:DA:F9:7A:BB:3B:2D:3A:9A:FF:C0:ED:95
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FBE331A3916B6F38433AC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc18bc3-1f72-3baf-82c4-2698b8fe237b.roa
Signing time:             Thu 21 Mar 2024 21:11:48 +0000
ROA not before:           Thu 21 Mar 2024 21:11:48 +0000
ROA not after:            Wed 19 Jun 2024 21:11:48 +0000
asID:                     15169
IP address blocks:        35.206.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fb:e3:31:a3:91:6b:6f:38:43:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:11:48 2024 GMT
            Not After : Jun 19 21:11:48 2024 GMT
        Subject: CN=65b93649-55ea-41cc-9a40-ad4682217d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:d2:31:f2:a8:2a:24:1b:ce:92:7f:af:0b:
                    fd:03:23:9a:3b:81:46:51:16:33:49:d7:79:62:41:
                    1f:2e:9d:a1:1a:5f:d8:dd:90:cf:dd:3c:c9:b3:91:
                    27:cc:f2:fe:79:c8:ca:0d:dd:67:33:42:20:1d:a8:
                    33:da:82:9e:ec:e2:74:3e:2f:e3:48:2d:dc:af:30:
                    9d:ab:3c:e7:f8:4d:27:07:5c:1b:63:b2:ce:18:0d:
                    99:8d:a8:30:6a:d4:7d:f0:44:88:9c:7d:c9:1d:00:
                    e6:1f:f7:23:63:14:1e:f9:a7:48:40:79:61:18:4a:
                    75:98:4f:58:dc:f0:09:9e:b4:72:be:c6:e8:5e:af:
                    d2:76:e3:9b:8d:31:83:9b:de:55:8e:bf:dc:e1:06:
                    ac:36:df:3d:61:c3:84:34:c1:7a:df:ae:a8:cc:09:
                    6f:23:77:41:dc:b8:57:f3:24:06:fb:b9:f3:6b:e0:
                    e4:81:01:67:9f:ee:b0:ce:bf:0f:76:c4:09:6d:05:
                    8f:56:d1:d5:ed:68:c0:18:ad:80:a9:22:3e:4f:f1:
                    67:35:5f:dc:6c:17:13:ff:a5:8e:a1:0c:e8:49:9d:
                    9a:89:34:0d:91:78:0b:d0:27:f6:af:13:47:cf:92:
                    51:83:68:d3:5f:5f:3e:ed:6e:7a:d9:ea:51:89:9e:
                    8e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B3:00:C1:95:F9:F9:7D:DA:F9:7A:BB:3B:2D:3A:9A:FF:C0:ED:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfc18bc3-1f72-3baf-82c4-2698b8fe237b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.206.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:7a:15:c0:06:06:12:2a:b7:a2:49:69:64:1a:ce:95:84:bf:
         4f:a6:9a:9c:c9:9b:16:cc:b8:9c:64:54:da:59:30:bc:a8:5d:
         47:be:05:13:24:0b:7d:e1:00:75:c5:5b:7e:cf:c5:5e:d1:40:
         4b:cb:ab:e2:de:f7:83:a7:4f:6a:79:fa:2a:55:32:5e:aa:2b:
         bf:d7:7c:39:6e:dc:d4:32:b7:7f:39:c3:76:9a:c5:01:22:45:
         d2:a0:df:28:72:20:bb:e0:9c:fc:2b:b0:92:73:94:79:67:8e:
         50:cb:6f:41:ab:ab:74:31:6f:9f:a0:eb:d1:10:74:62:af:23:
         06:a3:87:de:21:21:81:2b:e6:7f:b7:fa:6b:76:a5:e7:a0:dd:
         64:fa:76:78:5c:2e:cc:e0:1e:71:f0:91:3c:6f:2f:6e:16:76:
         19:ef:0c:dd:6b:1d:32:11:3d:41:92:4a:3c:0e:09:ab:4e:a1:
         6c:44:b4:dc:b9:4d:38:69:62:d3:0d:4d:43:98:6a:ba:42:12:
         46:2c:e1:a3:a2:f7:46:7d:c9:5a:d6:8c:3e:71:43:72:be:94:
         e0:13:8e:60:1a:7d:be:e1:d7:7d:15:1e:2f:49:83:f7:47:e3:
         eb:f2:7a:52:1d:bf:f4:6b:ae:40:85:1c:fe:5e:55:0c:11:f1:
         cb:88:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:33:47 2024 by rpki-client on console-fra.rpki-client.org