Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5dd7fa65-7856-3b7a-aa05-9c978c6acfdd.roa
File:                     5dd7fa65-7856-3b7a-aa05-9c978c6acfdd.roa (raw, json)
Hash identifier:          W4hTKGskLvnIG1AT+loDVgD6HYTpAsexOkfnOTxz24M=
Subject key identifier:   FF:19:75:BC:7F:85:87:E0:BC:74:76:52:2B:FA:FB:30:34:02:CF:7A
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584546A2B106157C52124F2B0C80
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5dd7fa65-7856-3b7a-aa05-9c978c6acfdd.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     54994
IP address blocks:        174.35.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:b1:06:15:7c:52:12:4f:2b:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=1198148f-b23f-41c0-ac72-04ef19255881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:2c:59:a2:0a:df:e7:db:cf:a0:21:98:ae:
                    1f:0e:bb:4e:9e:67:22:be:4e:be:6d:98:be:b2:92:
                    69:60:1f:90:2a:54:ab:26:18:26:e3:6f:ac:a1:45:
                    f2:43:25:d8:43:af:2b:60:38:28:5c:de:01:87:78:
                    d1:1a:24:eb:0d:ac:c9:d1:59:e3:7d:48:f2:7c:e9:
                    34:c2:d6:ae:28:9f:a4:70:84:76:43:b0:6f:2e:f9:
                    29:03:9c:87:6a:2f:a4:be:bb:28:ea:0b:f0:8b:fe:
                    21:84:71:e1:9d:d8:b1:ab:84:0f:38:22:28:0f:38:
                    e0:60:c9:fb:c1:ec:cb:5d:b5:b5:ce:3c:b7:4c:01:
                    73:23:e2:9d:8f:9e:68:5b:6a:f3:16:9c:72:b5:a3:
                    89:5f:5a:10:64:0f:07:10:2a:0b:cb:42:06:4a:97:
                    5f:d5:60:78:86:8f:2f:8c:6b:f7:73:b1:20:c5:4c:
                    cf:76:5f:65:09:34:1f:5a:ed:9e:ae:d6:d5:b9:4f:
                    99:b5:1a:10:cc:69:dd:c8:de:f3:4d:1e:b9:92:46:
                    e8:d9:a8:51:69:b6:a1:7b:3f:55:72:63:29:71:95:
                    52:d9:4d:3d:8d:07:b6:f7:e9:46:2f:cf:01:7e:f8:
                    17:38:36:50:a2:e4:71:c4:2c:de:0b:00:3b:bd:c1:
                    dd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:19:75:BC:7F:85:87:E0:BC:74:76:52:2B:FA:FB:30:34:02:CF:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5dd7fa65-7856-3b7a-aa05-9c978c6acfdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:15:3e:c7:61:d9:b9:f7:b8:08:9c:f2:c2:6d:29:e5:6e:4b:
         d1:27:ef:91:d2:5c:c9:9b:95:43:88:35:1e:e6:35:32:ba:c7:
         ea:91:57:19:a8:ef:18:82:1a:cf:43:b6:36:1b:2e:33:de:3e:
         07:ce:92:80:1a:c4:fe:88:63:3b:f8:93:8c:22:41:6b:6a:0c:
         bb:46:59:d3:0b:81:2a:2f:a8:12:18:7a:33:40:c3:db:66:fe:
         e1:4f:67:4e:76:fe:85:e6:98:83:49:a4:a7:a9:27:22:62:6a:
         da:44:80:43:3c:fe:2d:d0:5f:59:b7:3b:ad:23:ec:0c:ae:be:
         e1:da:4a:62:f5:04:d6:c7:20:5a:1f:ec:70:eb:56:90:f0:0d:
         97:04:92:39:e5:d4:58:fa:b3:07:50:74:89:bc:94:17:0d:70:
         ed:f8:89:de:f1:af:e3:d8:3e:fe:ac:77:c9:31:20:ee:44:f2:
         76:74:c7:32:70:1b:da:ae:19:3c:13:b7:f3:c5:fc:8a:b6:d2:
         90:45:05:d8:3c:7b:ff:bb:b3:aa:fb:8b:4f:30:26:db:0c:27:
         bb:18:c8:bf:66:6d:04:96:4e:36:c2:32:7b:fd:6d:79:18:50:
         b4:84:5a:07:c0:9c:a6:f7:6b:62:f5:9b:b8:7f:9a:23:c6:59:
         bd:9e:f4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:05:14 2024 by rpki-client on console-ams.rpki-client.org