Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa
File:                     b0293e2a-b333-3875-817a-b2830f596b7b.roa (raw, json)
Hash identifier:          oSyrkw5lFKp8KVXEMwNsuwut9i7KmWAU1MQ7Xnpk7u8=
Subject key identifier:   91:70:A2:F1:BB:03:1B:01:CE:16:6A:90:3D:BF:2A:DB:AF:77:12:3C
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285847B9616A4BE0ED451A8D194AA0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     48737
IP address blocks:        174.35.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:6a:4b:e0:ed:45:1a:8d:19:4a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=70dd39f6-2be7-44c7-8e5c-aa8fb6b294c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a2:e3:14:6d:91:15:1f:84:f0:c8:7e:35:8a:
                    e4:a9:9a:c0:02:70:b8:25:ba:22:a2:20:b0:1f:20:
                    ed:e4:07:48:2a:12:d2:d0:8b:6d:4c:73:1f:a9:c0:
                    c0:b9:48:6f:20:6e:cc:dd:07:fb:d1:44:73:2c:03:
                    aa:e3:77:01:38:2f:38:f8:7b:b8:ec:d9:96:42:2d:
                    d3:02:b8:88:13:8b:1a:7c:15:e0:45:8e:36:1d:c1:
                    b5:81:70:c9:d2:b3:17:3d:58:b7:ec:1c:61:27:fe:
                    d9:58:16:f1:0d:3b:17:d5:81:af:02:e4:35:be:44:
                    fc:2a:bd:7d:42:1a:b9:31:4d:18:35:cc:47:22:0f:
                    32:9d:f5:b3:c6:f7:80:81:79:52:d8:82:84:c1:e1:
                    a1:26:33:33:d1:34:d0:43:90:65:e7:ee:f4:b7:b4:
                    85:60:33:55:50:14:40:aa:bf:fd:c3:8c:00:0f:20:
                    83:12:74:27:c0:cf:fd:41:5c:2e:b5:18:86:3d:02:
                    10:05:91:6b:d4:47:3c:01:9c:4a:4a:95:5a:2f:7c:
                    e7:a8:92:dd:fc:41:e0:2b:92:45:f6:67:83:72:40:
                    c5:1b:a5:66:b2:80:8a:06:ad:e6:bc:4a:00:dc:3d:
                    60:13:cd:45:89:79:99:d8:cd:52:c1:c6:a8:fa:77:
                    aa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:70:A2:F1:BB:03:1B:01:CE:16:6A:90:3D:BF:2A:DB:AF:77:12:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/b0293e2a-b333-3875-817a-b2830f596b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:15:2e:9f:0a:f9:9f:fa:31:be:69:e9:6e:69:7b:28:ef:5d:
         34:2a:68:cb:c9:1e:53:10:1e:8d:1a:74:8c:d8:88:88:ff:c9:
         d5:01:6d:f0:24:27:dc:5c:23:29:a0:02:e6:89:5f:1a:3c:33:
         7f:43:0b:ee:84:c9:39:31:be:9d:4c:1d:80:5e:0b:27:27:2b:
         3d:16:47:20:1f:68:68:6a:77:9d:ae:29:01:ea:fe:94:70:53:
         e0:a7:d2:0b:a5:56:60:98:c5:19:29:f6:b8:73:e9:3a:e0:03:
         9b:a2:7c:25:d0:79:7d:80:e3:93:d7:65:a6:4f:ff:9d:a1:de:
         56:09:eb:1f:b8:dd:c4:4d:11:4c:33:d7:3d:b3:90:5e:2d:89:
         56:76:40:97:e6:76:c3:e6:dd:7d:20:0d:83:a6:49:df:fb:9f:
         e9:ef:f0:52:80:e9:79:7e:53:75:28:32:e1:9e:47:9c:5b:63:
         2e:53:6f:4e:55:c7:b9:97:70:52:d5:cc:0f:6e:72:3d:e6:ee:
         0e:01:b4:c8:9a:57:f6:2c:cc:f1:3c:52:72:02:c5:27:8f:4d:
         da:b6:f1:ec:eb:17:2e:fd:04:65:30:f7:de:14:c0:f5:4d:e9:
         15:df:49:d7:c7:34:7b:06:68:79:73:5a:61:84:79:d2:d9:e0:
         e3:95:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:00 2024 by rpki-client on console-ams.rpki-client.org