Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3636530-35cf-36ba-94f7-176a6cdb3d85.roa
File:                     e3636530-35cf-36ba-94f7-176a6cdb3d85.roa (raw, json)
Hash identifier:          mfkfEql3k+lMExqgS4rnq5KB3Xa2gvsQ+x30EyZMglc=
Subject key identifier:   16:31:75:F7:DC:92:FB:29:4F:94:29:76:F7:3D:00:2E:84:6E:83:75
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F5311D62BE4B85A1D5EA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3636530-35cf-36ba-94f7-176a6cdb3d85.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.198.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:31:1d:62:be:4b:85:a1:d5:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=b27ca9bc-a5e5-44e2-acbe-0c78135189ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:28:9c:ea:e5:25:2c:5b:60:61:42:d3:3f:
                    89:2e:13:38:ab:4c:5f:3d:93:dc:bd:90:81:e2:be:
                    8c:39:3a:82:ab:a5:08:93:28:2b:3b:24:ed:61:c3:
                    61:d3:e2:08:65:b0:2e:44:23:f5:72:87:ce:4e:77:
                    05:97:61:4f:ef:6f:86:1c:15:21:bd:7e:90:92:c4:
                    1b:29:f7:78:cc:33:6e:75:f8:43:fe:f4:9f:fa:11:
                    d3:4f:01:c4:f9:39:3e:eb:b4:9d:39:cb:90:77:fb:
                    48:a2:7b:ca:1f:71:46:15:dc:2c:05:1e:37:f9:14:
                    63:4e:e4:92:d3:12:3e:70:87:d6:8b:93:61:2e:64:
                    30:2c:1d:3f:91:dc:dc:53:b3:22:57:90:3e:6b:5d:
                    46:51:f7:83:a1:f1:13:71:ef:ca:cb:3d:34:a3:87:
                    15:12:66:a7:eb:92:8f:55:8e:11:c5:ff:c5:4e:32:
                    2e:83:e5:e7:81:c6:2b:79:4e:d8:a4:41:01:42:67:
                    27:2c:d6:a9:39:43:12:f3:fa:a5:a7:8a:3f:8c:a1:
                    aa:41:5b:06:ae:26:01:74:e4:f0:69:0a:01:4c:f5:
                    33:4e:ef:46:6b:73:3f:46:d8:e8:f0:81:71:3a:1f:
                    fd:da:d4:36:e2:8a:e7:d5:af:89:55:c2:27:18:ae:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:31:75:F7:DC:92:FB:29:4F:94:29:76:F7:3D:00:2E:84:6E:83:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3636530-35cf-36ba-94f7-176a6cdb3d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.198.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b3:a8:51:5a:04:31:c5:b4:fc:3e:cf:cb:be:eb:01:85:2f:
         23:84:3e:07:b4:de:84:bd:a4:d4:98:90:1b:8d:08:67:d8:48:
         27:2e:33:61:c8:a8:74:ce:eb:8d:cf:c3:f6:4f:d7:c2:7e:6a:
         85:c0:76:da:25:8a:71:cc:88:37:7d:0c:7d:16:9a:43:82:c9:
         0c:04:15:e9:57:03:31:80:8c:6b:70:aa:c4:c6:d3:d8:8c:0e:
         63:ce:49:84:43:ae:7f:94:f2:1b:ce:fd:35:8c:56:bc:3f:4b:
         d3:a0:ce:87:4f:ca:29:08:3f:82:09:d2:15:60:d5:15:c6:e8:
         b3:bd:36:72:5c:df:14:4b:90:ae:1b:10:5c:1b:3d:26:a3:2a:
         55:9b:68:cd:a4:40:a1:ac:73:15:d5:d1:b9:86:31:4e:0e:98:
         71:b3:84:85:7b:90:06:6e:c1:37:f4:2d:fe:b6:65:78:74:59:
         7b:3b:f3:30:c4:77:82:d5:71:f5:82:b7:48:fe:05:ec:40:ac:
         bc:6e:51:33:ca:5e:72:da:cd:45:df:b0:3d:f5:84:90:c0:86:
         c2:30:ef:b7:b5:42:a0:4e:7d:70:c9:92:b0:48:cd:f1:fa:c5:
         6f:d5:3f:82:49:97:d0:ab:e7:0a:8b:f3:cf:f5:7d:38:f0:e0:
         47:16:ef:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9TEdYr5LhaHV6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
YjI3Y2E5YmMtYTVlNS00NGUyLWFjYmUtMGM3ODEzNTE4OWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYUonOrlJSxbYGFC0z+JLhM4q0xfPZPcvZCB
4r6MOTqCq6UIkygrOyTtYcNh0+IIZbAuRCP1cofOTncFl2FP72+GHBUhvX6QksQb
Kfd4zDNudfhD/vSf+hHTTwHE+Tk+67SdOcuQd/tIonvKH3FGFdwsBR43+RRjTuSS
0xI+cIfWi5NhLmQwLB0/kdzcU7MiV5A+a11GUfeDofETce/Kyz00o4cVEman65KP
VY4Rxf/FTjIug+XngcYreU7YpEEBQmcnLNapOUMS8/qlp4o/jKGqQVsGriYBdOTw
aQoBTPUzTu9Ga3M/Rtjo8IFxOh/92tQ24orn1a+JVcInGK70yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBYxdffckvspT5Qpdvc9AC6EboN1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTM2MzY1MzAtMzVjZi0z
NmJhLTk0ZjctMTc2YTZjZGIzZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8bgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJmzqFFaBDHFtPw+z8u+6wGFLyOEPge03oS9pNSYkBuNCGfYSCcuM2HI
qHTO643Pw/ZP18J+aoXAdtolinHMiDd9DH0WmkOCyQwEFelXAzGAjGtwqsTG09iM
DmPOSYRDrn+U8hvO/TWMVrw/S9OgzodPyikIP4IJ0hVg1RXG6LO9NnJc3xRLkK4b
EFwbPSajKlWbaM2kQKGscxXV0bmGMU4OmHGzhIV7kAZuwTf0Lf62ZXh0WXs78zDE
d4LVcfWCt0j+BexArLxuUTPKXnLazUXfsD31hJDAhsIw77e1QqBOfXDJkrBIzfH6
xW/VP4JJl9Cr5wqL88/1fTjw4EcW7+4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:06 2024 by rpki-client on console-fra.rpki-client.org