Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db37c723-3241-319a-bcca-8cf894b01f82.roa
File:                     db37c723-3241-319a-bcca-8cf894b01f82.roa (raw, json)
Hash identifier:          4jsl8yR17N7cD/qxTEgIAdCzmLb6HhIQM4pgN7B+FIg=
Subject key identifier:   2D:D5:2A:E6:3C:89:34:4F:D8:5D:40:84:9C:2D:B0:E2:B0:72:7E:2F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4DF6048ED4A0BECF57800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db37c723-3241-319a-bcca-8cf894b01f82.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.225.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:df:60:48:ed:4a:0b:ec:f5:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=008869c6-dd47-41f9-a651-e7ab0a5dc99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:1c:a8:99:d5:fa:65:33:5e:77:1f:e3:08:
                    cc:66:b6:fc:b5:01:89:9d:ca:ea:8c:a0:0b:e2:52:
                    a8:07:12:5c:00:76:2a:92:dd:2e:b8:7b:15:ed:b4:
                    80:1d:a6:f9:29:6d:36:c1:99:d8:5d:5a:87:67:72:
                    46:0b:b0:0c:c0:d4:17:1a:28:98:1e:d6:7c:d1:80:
                    b9:3d:e4:63:14:89:29:47:86:b9:c0:64:13:81:5e:
                    a8:c3:0c:5e:77:c4:5a:6f:52:cb:9f:45:14:f4:93:
                    13:19:8e:e6:bf:24:00:73:73:fe:7e:93:01:9b:a2:
                    0e:26:50:4f:3a:d0:b7:26:a3:62:5b:45:50:13:35:
                    de:09:c3:78:37:0d:fc:01:43:81:08:0a:49:ce:44:
                    84:37:12:35:04:1b:07:ed:c2:93:06:10:7d:92:dd:
                    99:f7:f6:1c:eb:17:43:6f:94:76:c6:92:bd:08:6a:
                    73:ba:aa:14:41:1f:ea:bf:85:8a:97:6d:14:d2:7e:
                    ca:bd:49:ef:82:31:47:88:2b:a7:af:65:23:4d:42:
                    96:6f:ab:8d:51:3e:7b:38:4d:cf:be:7a:06:d8:4a:
                    74:c5:a8:e0:9a:1a:dd:b2:b3:cc:f6:e4:67:a2:73:
                    1f:8a:72:6a:69:92:6a:a9:c8:1c:fe:91:a9:9e:22:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D5:2A:E6:3C:89:34:4F:D8:5D:40:84:9C:2D:B0:E2:B0:72:7E:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db37c723-3241-319a-bcca-8cf894b01f82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.225.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:68:5d:e9:5c:4f:f3:de:3c:90:2d:41:f0:cd:d6:8a:50:80:
         12:4c:7a:d1:16:59:59:06:a7:e4:fa:fe:6c:f1:eb:bc:ef:84:
         60:ec:32:89:a8:4f:ea:65:49:b8:c8:7e:08:0a:96:eb:db:ad:
         ca:a8:22:e6:70:71:c5:99:e5:27:40:95:45:eb:e4:e5:22:13:
         86:33:fd:ca:7b:d4:a1:13:a7:e3:86:e7:52:20:74:40:72:63:
         ec:c1:91:2a:d5:14:d1:3d:cc:a4:b6:e3:52:74:08:39:c2:0d:
         d0:a1:ee:32:97:b1:30:6d:93:e5:e8:c9:86:e0:38:06:ea:fa:
         24:5b:7b:7f:2d:bc:9c:e4:e4:36:9b:b9:b5:33:8e:b6:99:f0:
         b4:10:72:87:bf:58:8f:6b:c0:55:e1:18:16:76:d8:28:c3:bb:
         77:ce:02:02:4b:8b:e6:8f:35:93:1d:55:3d:cf:a1:a6:02:d6:
         97:7e:75:e1:25:8f:bb:73:ed:68:70:0a:d3:f0:1c:2c:5c:c5:
         9d:20:b2:85:cf:df:a4:f2:71:f0:53:6e:0b:1a:db:dc:fc:50:
         de:c1:82:1e:db:1d:f5:7d:89:de:83:1f:0d:36:64:bc:96:cf:
         73:e8:a5:96:35:26:90:8b:60:d0:16:6f:b9:18:03:c3:9c:5a:
         7e:c4:18:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:49 2024 by rpki-client on console-ams.rpki-client.org