Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9e883f59-1324-385e-8ccd-a4d3699eb439.roa
File:                     9e883f59-1324-385e-8ccd-a4d3699eb439.roa (raw, json)
Hash identifier:          68wbn6GS+UaB3t5RWFTBFszjYf5wEL1XQ5KYfjTm/zs=
Subject key identifier:   ED:4E:58:E5:43:67:AF:D5:3A:48:5B:23:51:99:43:51:E3:5C:4F:09
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E33704DD1C8C4B2EDCE80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9e883f59-1324-385e-8ccd-a4d3699eb439.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        35.140.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:33:70:4d:d1:c8:c4:b2:ed:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=b3232c5b-ef53-4239-bda6-cbbba234af00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:47:3f:01:f9:f8:b6:ce:af:28:c6:fe:c1:0c:
                    f8:c4:29:63:ea:6d:31:37:f9:b4:0e:69:4c:73:57:
                    a6:94:ea:6a:08:24:cf:c3:e1:06:f6:be:15:e6:08:
                    6e:91:4d:95:ea:c2:6a:cb:52:02:34:48:5c:63:09:
                    2e:24:79:4b:ad:f1:2a:ae:6b:d0:2a:fc:79:5f:01:
                    01:4c:d4:56:77:e1:48:3e:5e:4b:26:4a:cc:5a:19:
                    97:d6:fc:a7:db:90:44:db:61:a9:83:9e:33:24:99:
                    40:9f:b0:2c:f4:98:de:4d:c7:56:bd:d9:fc:bd:f4:
                    d0:11:3c:a9:bf:90:f5:9f:e4:86:7f:80:72:cb:dc:
                    8e:9f:45:56:05:26:a5:36:08:ed:2a:d6:47:1e:e8:
                    ed:6e:e9:d6:33:9a:62:f9:80:71:c5:08:d8:21:5e:
                    7e:5c:ec:15:58:52:9c:97:5c:8b:eb:fc:02:5b:b3:
                    8a:b5:b1:2c:f1:47:ea:be:f6:bb:d1:34:f0:34:09:
                    2d:7c:a1:17:2f:af:c8:e9:4c:2d:a0:69:60:1e:b9:
                    75:88:6f:a9:26:1a:2e:a4:53:54:2f:65:c2:e2:78:
                    db:2b:0a:d1:8d:6e:ca:55:b4:ec:e7:c5:49:b2:d9:
                    12:db:83:ea:9c:97:1d:67:7a:ff:89:e9:b2:e4:88:
                    39:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4E:58:E5:43:67:AF:D5:3A:48:5B:23:51:99:43:51:E3:5C:4F:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9e883f59-1324-385e-8ccd-a4d3699eb439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.140.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:5c:6a:7f:f2:e2:bf:c4:20:85:bc:54:5e:ce:c0:5c:d2:cc:
         cb:12:d3:8b:3d:79:7d:88:ac:c7:44:e8:e0:74:10:e0:be:e7:
         e8:ad:c5:cb:e9:68:33:9f:0a:a1:46:1f:7a:8a:31:d4:f1:c8:
         c7:c4:ff:ea:53:62:a7:51:33:9f:4b:77:50:dc:39:31:02:7c:
         fb:eb:a2:b3:fd:bd:ea:3a:ee:ee:c3:85:1e:b5:1d:b6:e7:81:
         1d:e3:57:12:51:8a:82:bc:12:d4:25:8c:37:e0:3e:70:88:64:
         52:bc:e0:04:aa:c4:38:47:81:36:ac:e7:c3:cb:b7:67:6e:ba:
         7e:3c:49:5c:a1:c4:8d:01:47:68:c0:22:4f:3e:ff:58:5a:2d:
         25:5b:46:53:2a:a3:5a:e8:68:d3:3e:50:fd:d9:fe:8a:d1:be:
         96:83:5a:fe:ad:6d:c9:55:ec:53:0e:be:14:4e:fc:2a:81:0c:
         5e:af:6f:8c:e7:bd:23:04:cb:5c:ff:7e:bc:1b:a2:e3:96:04:
         f5:59:7f:96:d8:35:6d:2e:63:e1:8c:fd:58:85:ce:fa:01:4b:
         78:41:0c:2a:aa:4a:09:b7:91:23:2b:6e:77:a9:42:79:0b:8f:
         45:00:0f:eb:89:7d:fa:e6:04:29:3b:e6:af:73:5a:e2:73:5e:
         af:4c:f3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 19:42:30 2024 by rpki-client on console-fra.rpki-client.org