Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa
File:                     8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa (raw, json)
Hash identifier:          2pkGV02HgrTIa7oGzcXVbvLyRIhSvudmS8wNFG+x/Xo=
Subject key identifier:   FE:B5:FB:6A:B6:18:10:7F:F9:10:98:C0:75:EA:D9:D1:AD:6E:AD:39
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584548081CC108C7FC48D3DA6940
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     2914
IP address blocks:        174.35.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1c:c1:08:c7:fc:48:d3:da:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=1dd3bbdc-66e5-42a2-b104-a7ec91366c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:80:f9:23:1e:4e:6a:3f:35:5c:98:0d:6b:
                    78:20:67:71:1f:ae:51:39:da:ae:cb:fa:fb:86:17:
                    10:ba:ae:49:21:a8:0c:c4:80:11:57:2d:30:73:f3:
                    85:69:a5:6d:01:6f:07:49:08:71:ff:76:b8:60:04:
                    c0:46:b0:b8:5e:fa:64:36:04:f4:a6:23:0c:ea:41:
                    43:e3:c2:5f:48:41:22:51:78:0c:af:ca:d9:9c:3e:
                    c2:df:8b:2a:17:56:b9:e0:24:ea:77:a4:6e:e7:6a:
                    b7:97:d3:04:b2:d1:17:58:57:2d:97:8d:61:2f:8a:
                    57:bf:1d:82:c3:87:35:7a:ff:00:74:4e:7b:39:19:
                    fb:a0:57:8f:29:0e:16:41:54:cd:ee:5f:17:37:dc:
                    10:48:ed:cd:27:7f:4f:0e:42:30:d5:e0:f5:23:1a:
                    73:65:ec:e9:41:f0:36:c4:fa:55:26:32:82:e9:d0:
                    74:38:2e:b2:ae:c7:9f:e9:f2:1e:03:70:2b:17:08:
                    e8:5b:11:d7:4a:1c:89:88:5a:31:06:8e:f0:e8:9f:
                    31:36:82:89:61:11:78:f3:e9:a8:32:01:c8:7c:14:
                    41:cb:21:34:ab:19:c2:15:3f:eb:e2:af:e8:2d:a4:
                    6b:c2:76:6a:d4:b0:90:24:fd:2a:56:88:cb:99:9a:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B5:FB:6A:B6:18:10:7F:F9:10:98:C0:75:EA:D9:D1:AD:6E:AD:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8ed4d0f2-43fe-3f33-966d-53cf3234980f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:81:10:e1:c5:cd:31:23:cc:63:42:d7:cd:85:83:f9:18:fa:
         e1:8d:52:1e:fc:67:74:23:95:34:7e:97:87:99:f5:e8:e3:bb:
         de:6b:ef:5b:d1:e0:44:71:ba:52:36:a5:cd:a8:2a:23:7e:a1:
         d0:59:dd:9f:cb:59:e7:a9:bf:a1:d4:36:06:b9:0d:20:2e:95:
         9e:e0:eb:5a:cb:f2:6c:70:0f:6d:76:e7:6e:02:92:ce:12:f2:
         95:07:4e:6f:5f:69:ec:d2:f8:fb:a9:e0:20:4b:dc:b8:88:46:
         46:19:9e:50:a6:08:7c:59:45:f0:99:21:b4:22:25:6a:db:c2:
         56:3c:cf:33:ed:8a:36:42:4a:90:45:7e:6b:ba:4d:d6:32:77:
         5e:ad:de:d9:c9:8f:db:eb:3b:a3:fb:42:45:58:f9:83:f5:39:
         69:19:8f:21:56:34:af:da:a2:37:d1:8b:ee:75:4a:b8:c5:b7:
         91:52:5c:49:6d:ae:e8:37:4c:9f:4a:9f:fd:cd:50:4d:c8:86:
         e8:ca:ca:8f:7a:61:88:26:fe:68:f3:4c:21:f3:aa:5a:d4:19:
         67:0a:7f:ef:b0:8a:78:62:42:a6:44:2f:be:1d:63:37:fa:63:
         4a:58:26:75:65:a0:bc:d3:c5:c9:62:b6:86:82:94:e0:d0:39:
         0d:c4:a2:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVICBzBCMf8SNPaaUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI0MDMyMTEzMDAzM1oXDTI0MDYxOTEzMDAzM1owLzEtMCsGA1UEAxMk
MWRkM2JiZGMtNjZlNS00MmEyLWIxMDQtYTdlYzkxMzY2YzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCuA+SMeTmo/NVyYDWt4IGdxH65ROdquy/r7
hhcQuq5JIagMxIARVy0wc/OFaaVtAW8HSQhx/3a4YATARrC4XvpkNgT0piMM6kFD
48JfSEEiUXgMr8rZnD7C34sqF1a54CTqd6Ru52q3l9MEstEXWFctl41hL4pXvx2C
w4c1ev8AdE57ORn7oFePKQ4WQVTN7l8XN9wQSO3NJ39PDkIw1eD1IxpzZezpQfA2
xPpVJjKC6dB0OC6yrsef6fIeA3ArFwjoWxHXShyJiFoxBo7w6J8xNoKJYRF48+mo
MgHIfBRByyE0qxnCFT/r4q/oLaRrwnZq1LCQJP0qVojLmZoFLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP61+2q2GBB/+RCYwHXq2dGtbq05MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvOGVkNGQwZjItNDNmZS0z
ZjMzLTk2NmQtNTNjZjMyMzQ5ODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriMJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqBEOHFzTEjzGNC182Fg/kY+uGNUh78Z3QjlTR+l4eZ9ejju95r71vR
4ERxulI2pc2oKiN+odBZ3Z/LWeepv6HUNga5DSAulZ7g61rL8mxwD212524Cks4S
8pUHTm9faezS+Pup4CBL3LiIRkYZnlCmCHxZRfCZIbQiJWrbwlY8zzPtijZCSpBF
fmu6TdYyd16t3tnJj9vrO6P7QkVY+YP1OWkZjyFWNK/aojfRi+51SrjFt5FSXElt
rug3TJ9Kn/3NUE3IhujKyo96YYgm/mjzTCHzqlrUGWcKf++winhiQqZEL74dYzf6
Y0pYJnVloLzTxclitoaClODQOQ3Eou4=
-----END CERTIFICATE-----
Generated at Fri Apr 26 06:19:56 2024 by rpki-client on console-ams.rpki-client.org