Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa
File:                     574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa (raw, json)
Hash identifier:          HN9pnRjBlxvAnbMY/sx1rryNKN/3p0XYn6VfkQzwBVQ=
Subject key identifier:   43:19:14:74:27:94:B5:92:12:6F:8B:53:EF:9D:11:52:35:79:6F:3E
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285845A428B2B9B93C7ECC491A1A00
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     54994
IP address blocks:        174.35.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:b2:b9:b9:3c:7e:cc:49:1a:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=ba687efd-d404-4c1d-89c8-3ba45f45a849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:32:9d:c6:d1:05:e9:49:c7:62:da:20:af:fa:
                    93:44:8f:01:8c:8f:84:9f:36:44:66:ee:da:23:49:
                    e6:95:eb:5e:0a:7a:71:7a:85:be:93:39:94:91:b5:
                    ed:8b:2b:7f:1f:09:05:f6:d4:2a:16:a5:10:09:f9:
                    f3:33:fc:fa:15:e0:3f:f4:95:dd:78:a5:cd:02:4d:
                    00:62:9f:14:c5:3a:3c:ad:cf:a7:3d:ec:01:a1:63:
                    41:29:47:6e:3a:53:61:50:dc:73:a9:03:a8:9a:8c:
                    c2:3c:61:c4:c9:8c:fd:bb:26:c9:61:ef:bf:24:6b:
                    2d:5f:fb:63:69:0c:21:9b:10:62:d3:70:de:ef:47:
                    bc:27:ea:5f:19:03:aa:e2:bc:f2:86:04:08:c9:92:
                    e3:e3:ed:2f:0e:db:5b:b2:7b:2b:79:3c:41:15:4a:
                    98:44:65:af:83:97:ec:17:d8:c4:9a:40:62:7e:31:
                    f9:22:2f:53:45:43:b1:2d:d9:93:68:38:be:19:a3:
                    fe:e6:4e:94:97:35:76:b4:64:2a:a6:af:f3:f3:b3:
                    97:ac:55:f2:0e:f0:da:ac:9d:16:e3:02:f1:ab:05:
                    67:6e:08:9a:c2:bd:cb:2d:4b:31:5c:aa:cb:93:50:
                    23:3f:35:f4:5e:e8:ea:9d:1e:02:f6:eb:12:30:53:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:19:14:74:27:94:B5:92:12:6F:8B:53:EF:9D:11:52:35:79:6F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:25:2c:26:5d:c8:12:50:e1:42:04:54:e9:95:a0:2f:45:ed:
         eb:f1:9a:ac:6f:51:62:44:fa:40:70:b5:b1:69:31:86:1e:a2:
         2a:44:3d:a0:52:9d:b8:5c:71:8f:45:9b:e1:13:e5:a7:a2:74:
         07:0e:e0:47:0b:f7:05:fa:fd:2b:5a:e9:79:d2:91:27:25:07:
         de:a0:2b:0b:8f:cd:81:53:9d:ac:10:90:bc:dd:88:36:ea:96:
         6a:35:d5:cb:fb:f9:8c:53:c4:2b:de:55:06:d9:2e:f1:c1:24:
         cc:76:64:4b:37:09:b9:77:eb:81:3a:27:69:f6:48:da:95:26:
         8a:c3:b2:0c:a3:c7:ad:18:b5:df:cf:82:e7:a8:35:67:6e:b8:
         f8:68:76:46:3b:fa:3a:c3:83:04:53:86:3d:17:77:5a:cb:5e:
         67:0e:cc:30:d4:b9:2c:20:20:14:33:7e:16:4d:b4:35:3c:09:
         af:9c:ed:fd:e6:65:8b:d8:eb:c7:38:a6:d9:78:f7:00:ca:0d:
         b8:89:c2:8e:16:74:e9:b5:02:cd:d7:b1:1b:05:08:04:50:34:
         19:d9:0b:57:08:9a:7d:73:01:b5:da:34:ff:f9:ae:47:52:1c:
         44:86:a0:9b:07:6a:52:40:81:d4:41:11:46:16:cc:24:4f:fc:
         0e:f1:64:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:27:47 2024 by rpki-client on console-ams.rpki-client.org