Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/1065242d-4d0e-3e8a-bf20-da0cbeac4faa.roa
File:                     1065242d-4d0e-3e8a-bf20-da0cbeac4faa.roa (raw, json)
Hash identifier:          /jamojyAniTdZUIp6kPKXcLRYmUH+Qa2jbpMe7PC7y4=
Subject key identifier:   97:5F:FC:42:B3:3C:27:5F:48:47:F7:5E:0E:BD:00:E9:8C:4E:60:98
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584563F314BD8FBB94B59A8A1E20
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/1065242d-4d0e-3e8a-bf20-da0cbeac4faa.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     2914
IP address blocks:        174.35.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:14:bd:8f:bb:94:b5:9a:8a:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=d5bf6a25-d8fd-4110-8b49-1d7c15771c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:25:62:b4:fc:19:3b:f0:d8:8f:72:15:43:7f:
                    6f:50:b3:3b:21:c3:bb:52:b6:f9:ea:f6:60:e2:40:
                    28:6f:00:2b:a0:50:48:8a:64:62:f8:a5:8e:17:72:
                    fa:15:55:61:d9:b8:53:d8:48:64:f0:98:e8:50:6e:
                    ea:37:3a:ef:92:1e:b1:eb:8f:82:0a:a4:f8:6e:4f:
                    d1:24:cd:90:ef:e1:30:53:9a:ef:7b:d9:92:4e:76:
                    31:bf:e5:10:f1:3a:47:95:86:2d:35:d4:11:62:a2:
                    22:ac:2c:00:47:de:6e:26:59:4d:30:63:b6:43:53:
                    ea:42:e0:84:dd:c2:52:3b:29:9f:d3:65:fc:9a:06:
                    2c:83:8a:4d:63:62:2a:e0:7e:b4:9f:d6:61:4e:be:
                    97:61:e2:d6:87:7d:73:d0:25:96:56:0d:33:b0:e1:
                    c0:48:6b:48:c1:7a:01:b2:06:65:b2:1a:b8:0a:a7:
                    7a:ec:14:1b:b1:f1:e6:01:41:02:5d:bb:67:a7:53:
                    1a:ed:a0:84:af:b0:d1:25:31:bf:1c:f5:14:08:77:
                    99:1c:a4:cf:07:83:96:e3:2a:92:7a:65:7a:bd:8d:
                    80:2f:c0:7c:1e:81:04:8e:e8:9d:4f:1b:33:f4:d5:
                    9f:e8:fc:cd:7c:1b:92:84:fc:28:d5:28:e6:00:e5:
                    a3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5F:FC:42:B3:3C:27:5F:48:47:F7:5E:0E:BD:00:E9:8C:4E:60:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/1065242d-4d0e-3e8a-bf20-da0cbeac4faa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:22:a6:93:b0:14:b7:66:9c:72:a5:8c:80:e6:e5:84:91:8f:
         c9:4f:7a:d0:aa:ab:eb:1c:52:de:32:8e:2d:a2:3f:d4:86:56:
         2f:ad:a5:23:a0:4c:e1:b8:d7:96:fa:59:56:bd:a1:0a:8d:61:
         2d:53:59:56:58:76:5f:4b:3b:63:ca:ee:0c:0e:2f:d5:c9:60:
         a5:65:c9:30:b2:bc:69:d2:e5:c5:39:ec:e1:20:fd:65:3f:c6:
         a8:bc:71:c7:00:a7:bf:9e:df:76:5f:91:42:9d:d8:97:f1:4c:
         2d:d5:c6:db:59:9c:87:8d:f5:be:58:b3:99:25:0d:d0:51:79:
         0b:4f:59:d3:0f:08:98:ae:e3:f7:87:60:74:5c:a9:3a:26:87:
         f9:66:fb:b2:e6:09:0d:2d:6d:6a:1d:52:8d:71:5c:03:15:52:
         ad:0c:46:78:c6:26:76:f4:46:f7:b7:e6:c1:4b:24:43:35:a5:
         4c:f9:80:75:ad:d4:d0:21:36:bd:58:0b:fc:81:98:3f:89:e2:
         11:45:54:51:07:61:1e:01:7c:69:53:c2:45:29:14:1f:ca:a6:
         04:bf:39:f7:34:ee:77:39:36:aa:16:1d:4c:1c:14:fb:28:f6:
         47:a8:df:15:eb:85:63:ca:8e:3b:8a:f2:fd:59:6e:18:6b:54:
         85:7c:2a:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8xS9j7uUtZqKHiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk
ZDViZjZhMjUtZDhmZC00MTEwLThiNDktMWQ3YzE1NzcxYzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSVitPwZO/DYj3IVQ39vULM7IcO7Urb56vZg
4kAobwAroFBIimRi+KWOF3L6FVVh2bhT2Ehk8JjoUG7qNzrvkh6x64+CCqT4bk/R
JM2Q7+EwU5rve9mSTnYxv+UQ8TpHlYYtNdQRYqIirCwAR95uJllNMGO2Q1PqQuCE
3cJSOymf02X8mgYsg4pNY2Iq4H60n9ZhTr6XYeLWh31z0CWWVg0zsOHASGtIwXoB
sgZlshq4Cqd67BQbsfHmAUECXbtnp1Ma7aCEr7DRJTG/HPUUCHeZHKTPB4OW4yqS
emV6vY2AL8B8HoEEjuidTxsz9NWf6PzNfBuShPwo1SjmAOWjHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJdf/EKzPCdfSEf3Xg69AOmMTmCYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvMTA2NTI0MmQtNGQwZS0z
ZThhLWJmMjAtZGEwY2JlYWM0ZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriNCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAippOwFLdmnHKljIDm5YSRj8lPetCqq+scUt4yji2iP9SGVi+tpSOg
TOG415b6WVa9oQqNYS1TWVZYdl9LO2PK7gwOL9XJYKVlyTCyvGnS5cU57OEg/WU/
xqi8cccAp7+e33ZfkUKd2JfxTC3VxttZnIeN9b5Ys5klDdBReQtPWdMPCJiu4/eH
YHRcqTomh/lm+7LmCQ0tbWodUo1xXAMVUq0MRnjGJnb0Rve35sFLJEM1pUz5gHWt
1NAhNr1YC/yBmD+J4hFFVFEHYR4BfGlTwkUpFB/KpgS/Ofc07nc5NqoWHUwcFPso
9keo3xXrhWPKjjuK8v1ZbhhrVIV8Ks8=
-----END CERTIFICATE-----
Generated at Sat May 4 15:04:31 2024 by rpki-client on console-fra.rpki-client.org