Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de1ba926-af05-3ccd-a587-476dfebed522.roa
File:                     de1ba926-af05-3ccd-a587-476dfebed522.roa (raw, json)
Hash identifier:          bDXB5d7NP1s8fcAmHCTMaa03b13+d+mAq6dhuimw98g=
Subject key identifier:   F5:81:E1:2F:AB:AA:90:14:CE:13:86:28:A1:EE:43:94:04:53:28:59
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F50DC392A2ACAE9AFB8D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de1ba926-af05-3ccd-a587-476dfebed522.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     19527
IP address blocks:        35.216.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:0d:c3:92:a2:ac:ae:9a:fb:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=45d3776b-a38d-4ada-a4ee-b4d483181c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:8c:31:5c:8f:b5:63:0f:51:0a:51:03:c2:
                    2c:6e:3f:46:d6:78:80:d4:25:10:a4:94:34:95:bc:
                    00:5f:37:78:99:2e:21:c7:b1:29:82:59:f4:89:54:
                    d4:de:ec:c4:73:a0:cb:01:e3:e8:30:4d:af:35:56:
                    6c:eb:62:5e:59:0d:02:a0:2c:ae:ea:1b:ef:c4:03:
                    eb:b5:88:e5:fa:4d:3d:d8:db:c5:ca:f8:e8:a6:e7:
                    b7:1b:73:de:98:38:d7:31:ba:cd:f0:5d:1a:5e:9f:
                    91:b1:14:a5:23:07:40:8b:18:9e:4e:f7:c7:17:a9:
                    75:d3:88:04:bd:f5:2e:ad:4f:d6:8e:3f:0a:66:45:
                    c5:d6:81:a2:20:cc:0d:d5:71:26:b9:48:c2:10:b9:
                    f1:0d:bc:e9:85:23:0b:63:23:03:ea:7e:b0:44:50:
                    37:ff:65:fd:df:0e:b7:c1:8e:b5:75:fd:fb:73:a4:
                    c2:49:74:ec:9e:18:bc:82:bb:5a:7c:46:15:6f:77:
                    5f:3c:ad:8b:99:93:c2:49:fa:cb:b1:9c:b2:01:19:
                    d4:ee:1c:dc:08:0c:d8:f9:db:8b:35:cf:66:1f:5b:
                    61:82:12:84:7f:3b:ec:f1:a1:13:0c:87:7f:b0:79:
                    1b:a3:73:9d:a6:bb:11:d2:e2:5e:d5:d3:d6:e0:57:
                    08:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:81:E1:2F:AB:AA:90:14:CE:13:86:28:A1:EE:43:94:04:53:28:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de1ba926-af05-3ccd-a587-476dfebed522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.216.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ad:19:55:3f:c5:25:16:fe:12:39:5c:f2:b2:2f:68:0c:93:
         eb:12:85:6a:5d:20:ea:8b:82:17:1c:f3:8c:1e:0a:96:1b:bd:
         ce:0a:63:fc:b4:a1:2d:69:40:8e:29:62:54:bb:56:1f:7d:a1:
         dc:4f:45:35:b9:99:92:6f:93:37:16:85:87:4c:a3:ef:b8:71:
         9d:ff:fe:ae:77:e7:62:24:d2:60:ac:fa:b3:8c:95:86:79:55:
         2a:03:48:3a:00:0f:b1:55:f5:fb:43:71:4b:93:e5:e6:6b:6b:
         a5:54:bb:97:9c:92:d8:db:71:86:e2:80:be:c7:ee:f1:47:70:
         2d:27:75:95:05:04:0d:de:c7:66:7c:a3:95:74:35:ff:17:32:
         2c:7b:f6:da:59:91:bf:bc:74:84:34:74:7e:0e:2a:77:e3:34:
         1d:ed:3a:69:df:98:c8:67:be:c4:f2:5a:a1:1f:73:7f:a7:d5:
         35:f8:55:08:fb:17:d3:14:86:b8:91:27:e6:fb:56:77:c9:b7:
         1e:da:8c:e1:8c:50:d6:7a:a2:43:b7:b7:ea:c4:28:5d:08:f7:
         b1:42:fc:b2:16:b3:c4:ea:51:db:25:aa:fa:06:3b:9f:fe:8a:
         4b:2c:02:92:1f:ce:17:c1:a3:28:d6:a8:fe:b4:4c:f6:61:cd:
         f1:e4:ba:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:05:35 2024 by rpki-client on console-ams.rpki-client.org