Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3ba3a460-26d5-359a-b6a1-22dd8a952355.roa
File:                     3ba3a460-26d5-359a-b6a1-22dd8a952355.roa (raw, json)
Hash identifier:          Gc6CqdtXIgCsORF9SbTKmd/lWUYMS2dn9fZKBSd5+0U=
Subject key identifier:   5C:09:86:54:26:64:2D:1A:2C:C1:B5:FF:5D:D9:8A:B2:E3:D9:61:9A
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285847E35F66F4EF0AA5E8717F0470
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3ba3a460-26d5-359a-b6a1-22dd8a952355.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     54994
IP address blocks:        174.35.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:66:f4:ef:0a:a5:e8:71:7f:04:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=fca6b6a7-99d5-434f-a524-e93916210557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:69:a0:85:a8:90:e3:68:1e:12:22:dc:4c:
                    1a:2b:7b:ab:02:9d:17:d1:f3:ae:a7:44:61:46:97:
                    e1:c1:ae:39:e4:e9:59:ca:7a:a0:b6:26:9e:84:76:
                    71:85:c8:0c:27:25:ad:2d:cc:06:c0:71:2a:f1:86:
                    c2:aa:b1:40:1e:c1:a4:d8:a6:b5:2d:bf:47:70:24:
                    a2:f2:3b:92:80:91:73:7d:82:a3:57:00:11:9c:82:
                    23:b2:05:ab:26:d8:c8:64:2b:43:37:55:33:0b:9d:
                    95:96:91:8d:85:15:cb:3b:ec:9f:29:1d:3c:3d:e1:
                    3e:b6:0e:f6:f9:62:4a:c6:d0:a8:fb:b4:1d:bb:e8:
                    1c:15:ce:fd:67:08:27:9e:de:1d:e0:9e:a6:ac:d6:
                    ec:ef:65:df:64:d5:37:5e:d1:e8:29:78:02:c1:50:
                    89:96:8c:d9:06:ba:64:30:12:08:6b:a4:da:d0:28:
                    a9:10:f6:42:16:0c:4c:eb:9e:8d:95:da:a7:0b:d6:
                    53:84:24:16:d0:6c:16:6e:ed:ca:80:25:03:ba:97:
                    4b:1d:ab:86:31:b9:37:93:f9:82:0e:af:0d:80:c1:
                    47:34:84:fc:ba:6a:c1:0f:36:87:81:6f:6d:49:39:
                    92:7f:4d:39:5a:9b:34:0b:12:2f:b9:7b:d5:d5:c8:
                    c6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:09:86:54:26:64:2D:1A:2C:C1:B5:FF:5D:D9:8A:B2:E3:D9:61:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/3ba3a460-26d5-359a-b6a1-22dd8a952355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3d:cf:d3:67:0f:ec:9f:20:4f:5a:95:40:f0:ff:57:46:8a:
         52:09:3e:1a:16:62:a5:14:ce:b5:67:e3:4a:f6:f1:4b:3d:ff:
         1d:24:91:48:24:f7:f2:3f:84:f6:d2:ed:52:57:b2:8d:a8:0e:
         53:5c:ba:1e:0a:de:65:26:a2:ff:4b:bf:e0:89:e5:7e:8a:dc:
         01:06:95:1c:a2:9c:ef:e2:50:6d:20:6c:ec:db:1c:d7:92:a1:
         4c:94:30:5d:7b:05:0e:6d:0d:7b:b0:a8:7b:2e:31:7e:df:52:
         4e:b0:b8:24:95:7f:76:bb:08:58:d9:fd:30:93:3b:4c:5a:a8:
         33:98:51:e0:9a:92:bb:d0:c3:cb:2f:b1:70:da:15:4d:3a:6d:
         a0:09:9e:d5:39:51:10:e2:b6:d3:2f:f7:4e:8c:d3:1c:c9:39:
         2e:40:26:a4:f5:31:74:a2:5e:a4:6d:ac:d5:0e:53:f2:e8:c7:
         c2:e8:bf:47:72:d7:ad:10:35:6b:9f:af:b1:97:9e:ed:7c:ed:
         34:24:6a:23:53:ec:ff:ff:c2:69:33:2d:19:7f:59:5d:af:2a:
         f1:26:bc:5e:47:00:9b:83:82:24:f3:1f:da:70:24:2b:dd:dc:
         22:c7:a2:7e:c5:e4:02:df:c6:00:2e:d6:55:24:5a:fa:5d:60:
         92:32:03:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:37 2024 by rpki-client on console-fra.rpki-client.org