Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8fbacb0-05f5-31c7-b5bf-79e66bcf9371.roa
File:                     f8fbacb0-05f5-31c7-b5bf-79e66bcf9371.roa (raw, json)
Hash identifier:          Re20E5rfR669O0lb3bRJlEfkKLagtmdDkZ5vfIb8KZU=
Subject key identifier:   1E:5B:1F:D7:DA:D2:97:AC:90:58:56:0B:3F:D2:CB:56:5D:77:18:68
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858471E7072AD474525C1549AEF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8fbacb0-05f5-31c7-b5bf-79e66bcf9371.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        35.197.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:72:ad:47:45:25:c1:54:9a:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=e2adc71f-7cd9-42ce-9060-877bdc9c41e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:c5:3f:33:06:94:9b:75:11:c2:f6:79:18:
                    de:a7:91:16:9e:2a:47:91:c4:03:55:ff:94:66:11:
                    d6:43:6a:29:7f:35:4a:6b:5d:a2:fa:4c:1c:93:04:
                    bd:8d:61:73:24:65:89:d0:0b:a3:d5:c3:41:f8:9f:
                    f3:e1:cb:df:aa:74:7d:10:50:f3:e4:5a:ba:42:d9:
                    33:ef:8c:d3:12:33:35:fc:0a:1d:15:4f:47:cc:b1:
                    e4:5d:52:a0:e4:6e:9e:ed:87:5d:fe:5d:a4:fd:ee:
                    10:1f:64:ee:2d:b5:db:bd:df:17:69:e6:85:19:41:
                    cc:09:2c:b4:f1:a6:61:cf:1f:32:81:2d:2c:cb:49:
                    56:be:88:7a:ac:df:d8:f1:66:ad:48:8e:41:db:d4:
                    ae:9b:ad:9c:5d:e0:b4:a2:db:6a:a7:87:df:a7:16:
                    63:7c:b2:4b:0e:90:9c:92:59:b6:f0:da:d0:60:6e:
                    d6:84:e1:13:fc:6d:1a:a6:e4:3d:46:16:92:28:71:
                    4a:4b:a6:1c:bc:36:00:39:e4:2d:fb:58:77:79:e8:
                    81:97:61:47:59:32:b4:32:7c:12:0f:2e:cf:af:85:
                    c6:4b:56:cc:2f:e5:b2:9f:a4:01:7e:da:65:da:18:
                    95:80:84:d7:cf:b3:17:88:b1:b5:42:a9:fd:3d:45:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5B:1F:D7:DA:D2:97:AC:90:58:56:0B:3F:D2:CB:56:5D:77:18:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8fbacb0-05f5-31c7-b5bf-79e66bcf9371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.197.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:68:65:6a:51:5f:e2:fa:0b:20:90:c5:73:bd:78:0c:89:96:
         aa:8c:24:a7:34:2d:ae:da:95:42:ac:6a:6f:55:db:65:96:ef:
         f1:69:54:99:ab:1b:ee:5e:29:33:23:aa:39:2f:8c:94:44:4c:
         d9:6b:05:f8:fe:77:5c:50:a1:3f:28:54:1d:de:f9:4a:f6:30:
         05:97:5a:c3:06:7a:4f:fd:5d:95:fc:76:c2:a7:4f:5e:da:d4:
         62:3e:b5:a4:d8:d2:e2:e6:77:ab:5e:8c:11:58:3b:37:94:fe:
         96:cf:fc:73:51:bb:5a:ac:a2:99:df:9a:ce:64:0e:75:a7:bf:
         29:7e:19:2c:75:fb:30:d9:2a:0f:8e:de:09:a3:89:a1:e0:ee:
         47:7c:27:cd:b3:bb:e3:6e:20:4d:79:d4:a9:ce:b9:83:5c:67:
         06:dd:3f:8f:29:4a:4a:ff:c1:43:c2:0a:2a:20:62:19:18:d8:
         c6:20:29:20:4d:99:cc:82:82:02:c6:3a:73:df:d9:47:47:62:
         01:3a:56:77:18:a6:32:02:33:a2:06:f0:e8:fc:03:4e:bb:cb:
         78:49:69:1d:31:70:e7:aa:e2:53:75:d2:9d:9f:95:79:8f:b0:
         b9:8f:36:8b:ee:75:6b:59:dc:dd:25:07:e9:80:45:ff:8f:49:
         5c:34:51:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:58 2024 by rpki-client on console-ams.rpki-client.org