Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/f497cc1c-66b4-3b53-905e-8b8a34cf8583.roa
File:                     f497cc1c-66b4-3b53-905e-8b8a34cf8583.roa (raw, json)
Hash identifier:          k3y6j7xf5lXGvjbv7ExNApwbDXsIZCdjyj+Nq6H4m4g=
Subject key identifier:   7A:7B:B0:33:EA:BE:2F:FE:41:87:B5:52:3B:69:15:D8:9D:11:84:95
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285845280AFA5EC5BB6DD2ECCDE2C0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/f497cc1c-66b4-3b53-905e-8b8a34cf8583.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     54994
IP address blocks:        174.35.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:fa:5e:c5:bb:6d:d2:ec:cd:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=20798f05-ec74-4f45-a992-b95a19dcc0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:79:a2:01:71:c9:49:42:16:6d:3f:52:0a:
                    03:88:de:1c:db:3e:e2:8a:c9:66:b4:92:5a:96:f5:
                    be:4e:d6:22:27:48:0f:0f:80:ec:90:bd:b6:da:31:
                    d1:ef:25:8d:e9:00:3e:0d:8b:9b:a9:1d:d9:83:8d:
                    48:00:61:c6:89:6b:22:44:12:d0:24:43:fe:a0:70:
                    eb:c0:73:9c:10:57:6f:82:ab:aa:92:ef:87:6d:99:
                    1f:70:f1:9a:13:1f:0b:1e:54:ce:3e:52:6f:80:c0:
                    46:09:06:64:b8:55:67:76:36:89:7a:e6:3c:87:77:
                    0c:5e:c2:71:7f:95:f4:20:b3:51:fa:4a:28:c7:cf:
                    fc:7c:10:97:dc:86:eb:db:dd:fb:81:3f:cc:42:22:
                    94:ff:11:a9:ea:e1:72:e5:95:96:62:6b:a4:82:6f:
                    c3:62:95:aa:61:7b:e5:75:82:76:f6:c3:21:6e:49:
                    46:ed:34:51:47:cc:b3:92:d5:0f:e8:38:ae:9a:9d:
                    2c:f5:09:a9:6c:e3:5d:8c:9e:a7:2e:ba:18:6d:36:
                    61:e0:09:6b:12:cf:d3:03:6b:f2:f2:18:d7:8b:68:
                    22:3c:b2:b5:93:19:5b:65:ea:60:77:73:1b:0d:ba:
                    87:9c:30:84:a5:66:71:04:4c:42:3a:14:79:17:38:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7B:B0:33:EA:BE:2F:FE:41:87:B5:52:3B:69:15:D8:9D:11:84:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/f497cc1c-66b4-3b53-905e-8b8a34cf8583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:89:69:fc:cf:27:18:c7:ba:e3:a9:e0:d3:09:59:a1:93:b4:
         54:21:66:9d:88:22:a8:e3:dc:54:0e:67:45:0f:4d:96:8d:d6:
         66:76:a1:dd:6e:ad:77:61:c9:ad:57:0e:54:89:3e:cb:9a:56:
         70:65:5e:df:ed:a3:b1:68:54:08:f7:d5:b4:66:e2:6b:07:e1:
         16:8d:2c:1d:0e:7a:73:de:ae:0e:c5:25:f3:47:8f:01:83:4e:
         4e:3d:22:69:5f:55:7e:e9:71:f0:45:46:92:c8:7d:eb:0f:4f:
         8b:2c:f6:4f:89:01:77:bc:0a:47:30:46:cc:a6:e1:f4:0d:6b:
         f7:0a:03:e1:5f:a1:a0:a0:d0:54:45:fb:f1:8d:a3:d0:01:b3:
         69:57:3f:b4:18:f2:0e:e2:e6:b7:5b:d3:02:80:4b:6b:a0:7c:
         ff:8f:a2:56:07:62:35:cd:25:71:25:ed:3b:21:57:6d:7e:fc:
         19:80:46:05:5f:01:3c:84:72:40:37:f3:d5:aa:58:8a:fa:00:
         b2:11:5f:89:26:4c:ad:41:15:7e:7b:d1:4c:7a:f3:15:c6:ca:
         00:4c:bd:69:75:38:20:5c:2c:9e:58:ac:74:e4:93:f4:ba:02:
         3b:c8:1b:b4:95:b7:11:60:ed:00:4d:ec:ee:6f:5f:eb:c6:73:
         f4:88:5f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:05:14 2024 by rpki-client on console-ams.rpki-client.org