Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1cb8b5b-7c17-3c8e-a8a0-6f6dd389864f.roa
File:                     e1cb8b5b-7c17-3c8e-a8a0-6f6dd389864f.roa (raw, json)
Hash identifier:          Fvzx6axJW5X1Xjl/2u1nTRrMsE07vMx7daqwWc9QRXA=
Subject key identifier:   88:0D:6D:10:AF:7D:5C:D5:65:D1:BD:F8:BB:4A:81:C5:9B:D2:51:1A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584548FE276E3C16D063AEAB3E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1cb8b5b-7c17-3c8e-a8a0-6f6dd389864f.roa
Signing time:             Thu 21 Mar 2024 21:16:22 +0000
ROA not before:           Thu 21 Mar 2024 21:16:22 +0000
ROA not after:            Wed 19 Jun 2024 21:16:22 +0000
asID:                     15169
IP address blocks:        35.206.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fe:27:6e:3c:16:d0:63:ae:ab:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:16:22 2024 GMT
            Not After : Jun 19 21:16:22 2024 GMT
        Subject: CN=5d1369e9-5f99-47f1-9022-67f01c38cb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ec:28:2b:2a:af:a2:96:5b:0c:59:1f:39:5a:
                    6d:1b:cf:37:3a:4f:e1:ae:66:a0:2c:90:e1:d2:29:
                    d2:85:09:1d:55:d8:c3:84:13:2d:a1:6e:dd:89:7a:
                    d0:d5:a7:29:c4:9d:56:6f:0e:ab:3f:01:e7:19:4f:
                    26:40:c8:e9:f3:49:61:66:be:17:03:56:78:c8:d9:
                    31:e9:7b:27:6f:9e:53:53:71:aa:71:74:14:c9:16:
                    fd:d8:e9:75:e5:d5:3b:46:3c:0a:89:c0:61:5a:66:
                    43:47:58:e4:14:b3:91:60:16:5e:d0:56:e5:43:85:
                    69:09:ee:a0:3b:49:08:0b:05:79:9b:c1:26:2a:5d:
                    26:7a:2c:a9:bb:9e:c6:64:58:b6:f4:dd:52:1e:7b:
                    b0:b0:8a:36:af:32:5a:4e:c9:88:f5:d5:96:b3:df:
                    88:b8:14:d1:e8:70:f8:02:40:3a:e7:3d:bb:2f:13:
                    d8:59:fc:55:06:4e:f4:d8:2e:5f:7d:86:6c:ef:6f:
                    29:b4:7d:fc:e1:99:d8:45:e0:93:db:d3:94:90:dc:
                    78:f2:a8:1b:76:7d:59:91:20:1a:fb:71:99:cf:a2:
                    ea:2a:07:76:7f:e9:da:7b:f8:4b:a6:b0:bb:03:de:
                    9c:4c:1f:89:56:ac:70:ed:1f:b8:82:db:34:d6:c9:
                    de:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0D:6D:10:AF:7D:5C:D5:65:D1:BD:F8:BB:4A:81:C5:9B:D2:51:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e1cb8b5b-7c17-3c8e-a8a0-6f6dd389864f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.206.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:f0:ba:3d:4c:ec:26:fd:2d:7e:e0:6f:d7:93:d7:bb:32:95:
         b1:fa:63:38:14:87:4b:97:63:19:24:67:b1:b7:88:dd:b9:98:
         72:bc:26:53:b6:06:b0:56:00:db:95:dd:b8:80:cc:09:8b:dc:
         9f:4c:db:d0:d3:94:4d:5d:09:43:08:77:24:f5:de:e1:c5:11:
         58:d8:78:53:47:f9:ca:8d:39:d5:8e:38:74:10:2f:3f:d5:72:
         9d:ba:76:da:a2:42:91:ac:d7:f7:14:e4:d0:19:17:2c:99:7d:
         e5:a0:ab:d4:a3:6f:f4:74:81:6f:7e:48:87:5c:c0:94:a3:d1:
         de:32:94:95:08:bb:b1:87:5d:ab:8f:ee:05:81:1f:9d:d1:61:
         12:e2:91:0a:61:6d:fb:22:9b:57:5f:35:4b:d9:69:3a:ea:c0:
         52:4e:cb:16:28:ec:e4:0a:63:88:14:a0:49:18:c7:c5:77:04:
         34:ca:d2:42:a7:52:6a:11:9c:78:51:eb:5b:45:f1:7d:a3:9b:
         d3:64:d7:0d:0b:07:e5:a4:ac:4c:2c:1b:f4:27:d7:24:f9:5e:
         ab:90:ea:bf:fa:8d:6a:89:e7:8e:0a:23:8f:82:47:00:ce:69:
         d6:fb:7a:bb:f9:a9:19:56:bb:11:66:df:3c:f5:e7:8b:5d:35:
         70:5f:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:31:20 2024 by rpki-client on console-fra.rpki-client.org