Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd553ff6-502d-3d57-a568-fef8808545f0.roa
File:                     dd553ff6-502d-3d57-a568-fef8808545f0.roa (raw, json)
Hash identifier:          6bmCX7cChc+OzCV9yvjwkPiTkl2nfkFEk0b3DHdJH5s=
Subject key identifier:   27:D7:1F:7E:A0:41:5A:8C:A9:56:95:0F:92:29:80:49:9D:24:7B:BD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E70705C328469EA4E6D24C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd553ff6-502d-3d57-a568-fef8808545f0.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        35.188.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:70:5c:32:84:69:ea:4e:6d:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=1a8210bf-9940-4859-80e7-b4e87f90c953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:8a:d4:f1:ae:cd:db:3c:e2:cf:e6:95:9a:
                    5e:09:9c:11:ac:23:42:42:0f:4b:b3:bc:75:45:cb:
                    3a:8e:99:55:47:ad:33:4a:b9:89:40:69:99:f4:c6:
                    80:57:6c:b7:3e:5b:ce:5c:2d:b2:ad:fb:2d:c6:61:
                    c1:ef:b4:fe:5d:53:91:93:c4:3f:ae:24:01:92:d6:
                    49:96:22:da:50:63:e0:2a:c3:f1:e2:03:4c:c2:44:
                    76:d8:2f:a0:27:ca:2d:3d:94:db:3a:95:0f:c0:eb:
                    ac:16:f5:53:7d:99:6c:b9:24:7b:30:47:de:77:f0:
                    8d:3b:ec:72:96:5a:8e:88:47:bb:4e:b9:5d:e4:39:
                    6d:ce:5c:5a:07:bb:91:b4:af:7c:ed:d3:fe:8f:d9:
                    d9:46:7a:6f:43:a6:b3:5c:2d:f1:32:75:ec:ba:e0:
                    48:ca:32:95:c2:22:9b:8c:ad:5e:4c:5c:3a:89:41:
                    69:ed:ac:a1:87:72:c2:37:f5:32:d2:4f:44:b3:f0:
                    6f:c4:f1:39:4e:d6:ed:46:79:ed:5b:9e:13:5d:93:
                    8c:4f:8a:bf:9d:74:db:15:a4:77:7d:9b:03:65:0b:
                    fb:c9:4e:88:1a:0f:18:11:b7:cc:39:30:15:73:8c:
                    26:3e:c5:cb:ae:ed:9d:51:49:63:f2:67:b1:4c:30:
                    37:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D7:1F:7E:A0:41:5A:8C:A9:56:95:0F:92:29:80:49:9D:24:7B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd553ff6-502d-3d57-a568-fef8808545f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.188.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:eb:ee:17:cc:75:eb:6b:6c:b6:b5:2f:00:86:22:5b:75:ba:
         5b:f3:6b:cf:0a:b5:84:df:fa:d5:0d:cf:3c:2d:67:a8:2d:2b:
         78:20:2e:1b:aa:fb:68:32:53:52:7b:ea:a6:c5:b3:1b:cb:12:
         1d:b1:9c:23:74:36:6d:77:1c:32:da:99:a7:53:61:cc:02:b6:
         8e:84:4a:74:4b:51:1a:2b:ba:f3:73:13:3a:7e:8f:1b:3e:4b:
         c1:92:d3:f8:69:3f:17:ad:a3:d3:dd:ae:ae:20:2b:b1:9b:60:
         f9:20:b6:74:2d:82:6d:08:ab:ca:f1:0b:c1:53:ee:6b:57:f6:
         f0:e4:b0:b1:02:ea:8d:4f:b4:60:af:13:7b:65:5b:18:18:dc:
         ee:ff:24:b2:e0:5d:1e:95:09:b8:35:2d:d4:f5:8d:0f:98:39:
         fe:8f:e4:29:91:b1:ee:02:ba:86:b4:14:5c:83:c2:aa:8c:5f:
         e4:23:c1:ce:ac:7c:1f:f6:d8:63:2a:92:50:46:6e:9a:a4:67:
         51:b5:e0:43:e2:28:c9:78:d6:7d:79:20:3c:40:ba:24:a3:d6:
         cf:9f:41:89:fa:88:c6:99:52:20:fc:4f:8d:54:88:2f:53:a7:
         d5:56:2d:3d:28:62:1f:92:72:58:2f:d6:97:9b:50:43:4c:5d:
         94:b4:42:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:49 2024 by rpki-client on console-ams.rpki-client.org