Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa
File:                     e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa (raw, json)
Hash identifier:          v9Pjg8XybC2xWhw/TGxsJoiaIBLjWYTWAuF/dDhoBYc=
Subject key identifier:   17:3C:75:EC:18:76:26:7E:6A:44:68:48:87:92:12:A0:11:20:E8:94
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F432858454272C17E6DBA10AFCBC560A0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     54994
IP address blocks:        174.35.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:c1:7e:6d:ba:10:af:cb:c5:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=a8e1dc57-d5de-4fad-9907-0a1499b4e350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:38:1d:e9:0c:13:f8:e5:dd:e9:76:99:80:cf:
                    a1:22:a3:ec:22:53:ae:d3:e0:90:40:d9:52:9f:54:
                    11:ed:60:6f:82:21:b0:9f:f7:ac:f4:ed:28:c6:10:
                    ee:42:05:25:51:32:bf:94:19:e6:17:38:ab:89:8b:
                    9d:81:cc:6d:88:7d:16:26:62:73:cb:c5:07:8c:2d:
                    70:c1:7c:f6:a6:65:02:be:91:66:62:3a:0b:05:5a:
                    9a:f0:ff:a9:34:ba:d0:39:a8:18:bd:42:2b:8b:e3:
                    8d:b6:80:61:75:2b:4f:c8:b1:f9:d4:10:b8:d2:17:
                    5b:ba:bb:15:d1:0f:77:90:39:d0:e6:ec:bc:8e:b2:
                    24:73:b3:0a:9b:01:69:5e:f5:2e:3d:81:8d:6b:87:
                    3c:8b:e9:fd:1f:06:61:d6:aa:bd:93:d9:11:25:db:
                    3a:8c:eb:16:aa:5a:3b:a6:b4:26:65:fc:c8:12:8c:
                    29:07:65:b3:fa:d9:d1:8f:3e:0f:a6:b7:cf:ec:8b:
                    12:42:2b:7b:ff:b6:39:e8:17:7b:5e:24:a5:91:08:
                    f2:54:aa:5a:b9:92:b3:c5:b8:b6:e5:51:cf:75:36:
                    5f:0c:81:59:56:30:11:57:22:51:56:04:37:fe:c4:
                    a2:33:b3:b2:bd:61:d6:64:55:c1:9b:2f:eb:e9:97:
                    0d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3C:75:EC:18:76:26:7E:6A:44:68:48:87:92:12:A0:11:20:E8:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/e00cf4a1-2a21-350a-b6a6-b0936a8db6ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ab:d9:43:3a:10:2b:2e:3a:06:ef:72:37:01:22:fd:1f:84:
         bd:79:3b:50:e2:8a:4e:83:c7:d9:17:17:d7:0c:e7:09:d4:4a:
         6a:9a:bc:af:61:11:6f:19:3c:5b:67:3e:e7:3b:d3:4d:2e:0a:
         6b:cc:e3:20:84:d8:b3:b3:f7:88:ca:47:97:4b:a0:80:11:01:
         44:f2:19:a7:9e:54:15:9e:e5:c0:f8:59:83:48:8b:f2:48:1a:
         53:f8:3b:6b:95:84:21:f7:63:2f:29:7a:ab:28:86:94:f1:98:
         06:65:9d:50:fd:28:f9:91:96:31:07:0f:6a:f5:ba:fc:d6:ba:
         0e:e9:c9:ab:6a:1b:f5:48:fd:26:08:9e:d0:ca:57:ce:3c:91:
         a9:55:6f:81:05:f7:d6:9d:60:96:ee:3a:58:f5:64:1c:d7:3e:
         0c:1b:ec:9d:64:e9:15:dd:d4:88:8b:d1:ad:81:f3:45:b9:e1:
         88:d6:64:83:bb:1c:91:32:0a:7d:64:a4:3a:40:7d:fa:d4:bf:
         41:09:7a:f5:6d:83:85:15:41:bb:94:98:ec:4c:bc:3c:41:fb:
         ea:14:40:2f:b6:b4:76:d4:12:ef:00:5c:11:7c:14:d2:9e:c7:
         4c:e8:6d:07:23:db:71:cf:14:13:8c:34:7f:b6:3e:b1:21:78:
         83:3f:c9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:53:09 2024 by rpki-client on console-fra.rpki-client.org