Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/14b21d30-bc19-31be-b809-0883d5e19f96.roa
File:                     14b21d30-bc19-31be-b809-0883d5e19f96.roa (raw, json)
Hash identifier:          3UIk9rO8cHhM6J3D3eikHVF22fCCQgKu8whVvyngs6M=
Subject key identifier:   4A:E0:F1:C4:43:FE:DE:F6:87:C2:EE:16:C3:1A:4F:5B:72:D0:D9:1C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A187412B8639E3CBA2E400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/14b21d30-bc19-31be-b809-0883d5e19f96.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        35.132.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:87:41:2b:86:39:e3:cb:a2:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=89af5711-d2e4-494e-83d4-c6aa8efaf891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dc:75:57:cc:a8:80:7a:ac:cc:49:90:c3:4f:
                    7d:31:cd:fc:61:96:bb:e9:37:55:98:21:04:de:44:
                    ac:08:10:97:70:9d:88:7e:fd:7e:25:14:bc:46:56:
                    52:2d:66:ab:80:37:cd:fe:80:9e:07:f6:d0:f3:8f:
                    8e:27:d3:30:26:8b:6d:41:6c:b3:1d:20:48:b9:ae:
                    ac:16:87:e3:fb:83:d8:7c:a9:11:b7:25:93:ca:47:
                    7b:81:2f:75:99:35:a0:6c:9d:e5:9c:b8:37:12:45:
                    5b:a5:26:b5:a9:24:f6:5f:75:72:02:5d:86:be:6e:
                    ee:68:c8:c5:c2:c5:47:01:81:b7:fc:de:b6:e4:3e:
                    05:4a:1e:fe:bb:f1:78:3c:ef:87:2c:7d:7b:8f:af:
                    1b:ff:01:cd:fa:5d:a9:74:bb:2f:a1:6b:c4:a1:26:
                    f2:81:a2:9a:bd:0f:b5:91:00:d0:62:fe:b0:be:f5:
                    a5:b7:82:d8:90:ed:9b:8f:30:bb:35:ef:06:c9:3d:
                    8e:ae:7f:7c:9b:97:88:78:06:e7:81:3f:5d:90:cb:
                    c3:b2:5f:1b:6e:06:7d:ca:fd:21:94:79:54:19:d8:
                    6b:55:47:c2:8c:7a:8f:6c:02:8e:e9:32:b6:98:04:
                    d4:7a:1a:a1:12:89:0d:0d:b9:b5:c3:f9:7a:ee:c1:
                    f8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E0:F1:C4:43:FE:DE:F6:87:C2:EE:16:C3:1A:4F:5B:72:D0:D9:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/14b21d30-bc19-31be-b809-0883d5e19f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.132.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b8:38:3e:87:19:e0:e0:d0:da:08:06:34:db:6c:55:fe:8a:
         40:d6:4c:3f:78:fd:9a:6c:29:05:b8:f7:9e:07:0b:a5:78:80:
         d7:46:0a:96:05:93:03:02:43:84:ca:2d:9b:0e:87:8b:4b:21:
         b3:ac:80:b8:61:b2:b4:b5:06:20:f4:c5:64:94:ac:d6:5e:a0:
         b2:54:09:10:1b:82:25:ea:33:a0:f0:f0:54:de:59:eb:02:8f:
         14:14:12:2f:93:45:ce:e7:f1:36:5c:7c:a3:4a:d1:0f:ec:42:
         40:eb:5a:49:cb:2e:1f:59:5e:af:1a:48:c0:92:03:a6:ca:e4:
         15:4e:0e:6d:6b:3e:03:71:53:7a:65:52:54:89:3d:c4:3a:10:
         2b:b8:c6:c2:a1:20:de:fc:6f:54:3d:49:55:26:07:22:37:aa:
         a5:66:af:ad:38:29:10:c0:7b:0a:e5:33:fd:df:23:54:4d:65:
         51:1f:15:3f:d3:83:93:2e:4a:0d:4c:b2:3f:01:69:aa:61:6d:
         22:3c:cc:91:8a:c0:58:6c:6b:a1:cd:67:5a:32:e6:c1:8c:c6:
         2f:a1:93:28:c3:a4:50:97:48:23:57:57:26:25:b2:78:24:b2:
         c8:39:f8:ff:e6:0e:74:ec:37:5b:61:63:92:ed:05:04:42:84:
         0c:8c:ba:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:02 2024 by rpki-client on console-fra.rpki-client.org