Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/105fced1-2dc7-38cb-9523-28a80669f20d.roa
File:                     105fced1-2dc7-38cb-9523-28a80669f20d.roa (raw, json)
Hash identifier:          24vZZoCs9HVIpO1zcKJy6lnOjTH1Qhv9lOQynx3YDZk=
Subject key identifier:   38:8D:94:AB:8C:32:44:6D:83:9C:84:41:B0:63:A7:D7:A2:A3:75:89
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A183B0C7CF9E6B3CBE4450
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/105fced1-2dc7-38cb-9523-28a80669f20d.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        35.148.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:83:b0:c7:cf:9e:6b:3c:be:44:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=d631e86f-226a-43f1-9fc7-bd49cd1cdaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:43:d3:30:fb:30:a2:5f:70:c2:c3:db:8f:
                    ac:74:a0:39:a1:e7:75:64:0d:9a:14:5c:31:cf:4b:
                    06:d6:cd:57:55:ad:c5:92:74:b3:87:b1:b6:7b:d0:
                    12:dc:1b:14:cd:c8:03:da:86:f3:82:db:b7:37:6f:
                    01:94:0a:d0:1b:39:41:cb:54:9e:ec:2e:cb:e7:2f:
                    7b:6a:9c:de:12:c9:98:43:0a:49:8d:e3:39:4f:04:
                    db:e4:65:7e:62:b5:fe:17:37:e9:85:c4:0e:b9:1b:
                    67:6e:03:f9:5c:9a:37:1b:2d:9f:30:b8:09:ec:e6:
                    88:ea:87:5b:d3:ba:84:93:fe:bc:eb:3e:00:9c:bc:
                    f9:8d:6d:b5:68:b1:5c:b3:a1:ca:3b:27:04:dc:c3:
                    28:53:7d:3c:e5:48:01:fc:50:1d:ec:22:c3:36:2e:
                    46:03:7a:4c:f8:8c:f9:2d:04:fd:f0:84:43:0d:e9:
                    0a:b6:80:cc:f8:20:03:a7:9f:5d:d0:81:05:e9:db:
                    5d:21:92:b9:e6:86:82:27:d5:bc:89:68:33:0e:1a:
                    b3:74:67:5c:53:1d:70:8d:9d:b5:c3:f5:5e:12:d8:
                    59:f9:6e:52:ee:f3:81:9b:fe:03:16:6e:2b:5c:9b:
                    82:65:25:fa:1c:34:b5:3a:c6:64:47:d2:ce:0e:40:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8D:94:AB:8C:32:44:6D:83:9C:84:41:B0:63:A7:D7:A2:A3:75:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/105fced1-2dc7-38cb-9523-28a80669f20d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.148.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:40:2e:be:61:c7:9a:02:7b:e1:54:f3:c6:79:4c:32:9b:66:
         2e:e4:d6:c9:03:31:e3:7a:c4:41:0c:bb:a4:84:32:a3:cd:67:
         8f:c1:9b:d2:92:67:89:c4:a6:32:79:d9:a8:80:62:24:a5:5a:
         de:66:07:ee:ac:31:da:5f:21:8e:83:86:62:2a:6a:e0:7d:80:
         36:02:48:69:db:b5:a0:05:a9:d3:3f:ab:c9:b8:e3:2c:05:63:
         b2:d2:b0:aa:11:b7:26:62:0f:49:e6:c6:27:8d:17:8a:3d:80:
         62:a3:3c:59:6b:2f:5c:62:03:c9:d1:f6:43:61:d6:22:aa:8b:
         72:a0:d2:49:ac:c1:bc:8c:17:76:0d:b9:01:50:9f:7d:57:ba:
         4a:bd:3e:c0:93:83:0f:56:4d:c6:19:cb:fc:47:ff:dc:15:04:
         9f:97:98:59:c3:73:0c:00:ac:69:8d:c7:e6:c6:c6:06:82:bb:
         a5:43:e1:d6:12:04:fe:fc:1f:ae:68:71:ac:2c:cd:5f:0d:55:
         d1:ea:fc:56:94:6a:f2:04:21:8a:8e:d1:b0:90:65:a3:b4:85:
         61:82:ba:2a:a3:98:e6:d3:c3:92:06:0c:bf:74:a0:43:1a:5d:
         53:eb:b5:d0:32:8f:a0:77:e2:9c:e5:de:14:b0:0a:17:aa:e0:
         27:ef:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:50:29 2024 by rpki-client on console-ams.rpki-client.org