Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa
File:                     520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa (raw, json)
Hash identifier:          kM/LLPxIAm4tNhb1HNqOs6mTvfoohjh8HZCsmFtmYUc=
Subject key identifier:   BE:46:E4:42:3F:FF:07:CC:4F:FA:7B:AD:47:28:0F:1C:AA:0E:8A:1E
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F43285845118F471F1EAAA4F5452E0B00
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa
Signing time:             Sat 02 Mar 2024 00:43:30 +0000
ROA not before:           Sat 02 Mar 2024 00:43:30 +0000
ROA not after:            Thu 30 May 2024 23:43:30 +0000
asID:                     398324
IP address blocks:        206.168.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:8f:47:1f:1e:aa:a4:f5:45:2e:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Mar  2 00:43:30 2024 GMT
            Not After : May 30 23:43:30 2024 GMT
        Subject: CN=04fc4c78-b3ed-40f0-8694-ea6ba8b3e347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0c:49:a9:47:79:d4:58:4d:dc:34:60:95:38:
                    08:48:41:32:06:c6:25:17:37:d2:5f:be:b8:b3:36:
                    85:40:63:aa:d4:7c:19:fb:97:3d:d1:5a:87:ec:20:
                    3e:b3:dd:0f:0d:1a:f0:03:6c:4d:c0:c8:6e:6a:0b:
                    99:85:65:02:71:ba:1e:7d:c2:5f:b5:f4:26:6f:42:
                    19:02:cf:f3:3b:4a:b4:0f:33:02:1d:65:e3:6f:0f:
                    4d:2a:68:37:84:d2:bd:27:9f:e6:59:af:84:68:19:
                    23:51:d5:a1:ae:4f:32:ac:23:0e:bc:94:c8:71:6e:
                    24:1d:b9:50:99:e6:b2:1c:0c:98:a5:d9:16:74:53:
                    7a:3b:63:6b:75:87:02:9c:da:6f:b4:7c:41:7f:45:
                    2f:00:fd:5f:01:e6:6c:9f:4d:83:8b:e4:1d:0f:e3:
                    59:12:64:4d:ec:d5:d1:70:85:98:8a:d7:cc:70:bc:
                    60:a9:e4:44:cd:93:ed:00:76:08:8b:88:70:e3:19:
                    b3:39:43:83:4a:f8:91:d0:5c:bd:58:e9:3e:97:a3:
                    bb:46:37:64:7f:f2:f8:1b:7d:5c:b9:61:7f:c4:5b:
                    d5:04:6d:8e:36:ea:97:81:81:dd:c4:0e:c2:20:f8:
                    45:45:58:f5:fa:e4:0f:bb:38:b4:1c:9b:50:74:63:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:46:E4:42:3F:FF:07:CC:4F:FA:7B:AD:47:28:0F:1C:AA:0E:8A:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:3a:33:b6:07:45:a4:49:73:a7:0c:ab:2b:57:d7:25:e6:06:
         49:e7:84:b4:77:cb:8b:bb:d1:11:b4:a1:a4:21:92:cc:48:58:
         3e:b1:ed:fd:29:ee:d4:04:9d:17:8b:4c:3c:a8:8f:de:f2:bf:
         75:ef:be:0e:c2:97:80:89:48:43:04:02:7a:c4:4c:58:b8:82:
         cc:16:e3:98:1b:7e:c6:6c:6d:e1:c8:13:46:d9:1c:5d:b6:92:
         2e:87:14:bf:2d:3c:9b:90:1f:29:4b:ee:c5:c2:10:9d:8a:ff:
         13:4c:dd:73:7b:fb:ac:a8:8e:aa:1d:d3:a5:7e:c6:5d:de:39:
         c7:a1:53:67:d1:e5:e4:f8:fe:31:00:66:a5:c8:db:5e:8c:86:
         69:3a:83:96:4f:0d:18:d7:55:8b:5a:0f:20:e7:85:e5:e1:fc:
         0e:f6:43:eb:84:95:84:96:a5:ff:e6:4c:74:c0:7d:06:8f:14:
         c9:72:2c:70:3a:28:bc:b5:98:08:fd:15:83:e8:62:ee:4e:cf:
         2c:1c:5e:1d:11:a3:e5:75:20:26:3e:00:e5:2e:b7:e2:2e:52:
         f7:95:24:98:5a:56:10:16:fc:54:da:40:1a:57:57:fd:3a:70:
         cf:92:0b:67:c3:be:48:16:80:64:82:71:14:1e:41:a6:18:99:
         76:14:39:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:19 2024 by rpki-client on console-ams.rpki-client.org