Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd46766b-398d-35b2-ab7e-995672472dcf.roa
File:                     cd46766b-398d-35b2-ab7e-995672472dcf.roa (raw, json)
Hash identifier:          TNt/vs29hzrJnXtn5/GrAftnhjW3w2fFQnyIaVcTPK8=
Subject key identifier:   40:0C:BC:69:1B:06:A0:E1:17:81:6D:B8:EA:7D:58:18:00:D4:C6:C0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E9254610FD9828A90A580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd46766b-398d-35b2-ab7e-995672472dcf.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        47.35.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:92:54:61:0f:d9:82:8a:90:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=65deda71-91a1-43d3-a715-8509565c23fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8d:f6:52:40:8b:07:77:03:ab:02:55:e0:6d:
                    bf:65:98:e3:e9:85:82:dc:2b:60:05:e1:89:7a:f0:
                    63:77:ef:37:a9:10:90:82:9a:8f:95:c4:d0:90:c8:
                    f6:41:ed:db:dd:b4:5a:3d:44:52:76:99:dc:a5:41:
                    0c:96:04:93:a2:05:09:fb:8e:f6:50:e5:84:31:92:
                    64:c8:bc:3a:ac:7c:f7:04:4f:43:e3:55:25:f2:ce:
                    06:b9:2b:be:07:7a:84:d5:84:4a:93:ab:6e:e5:64:
                    22:46:c4:d3:b1:b4:a1:53:85:12:e5:cd:fb:83:1e:
                    0b:94:16:4b:80:92:6c:4e:a7:0f:35:c5:d1:19:dd:
                    e6:cc:fe:88:e0:0f:fa:58:49:12:ba:c3:a2:21:3b:
                    c8:53:d2:48:8e:80:95:ff:93:4f:c3:1f:69:a5:e8:
                    f8:0c:73:f1:cd:27:1d:5c:5b:a5:51:ea:bb:44:5b:
                    39:23:50:44:a8:1f:fc:6e:39:65:2d:2e:ba:09:70:
                    56:ad:ca:0e:9b:6c:48:58:90:de:e2:6b:c1:3e:46:
                    0a:18:1e:9c:12:ec:35:08:6e:2e:54:10:81:4e:4a:
                    f9:e2:7c:1c:40:0b:ea:49:de:65:69:31:95:e3:8f:
                    6c:35:89:1e:21:3c:4c:4f:7b:07:7f:01:92:83:50:
                    bd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0C:BC:69:1B:06:A0:E1:17:81:6D:B8:EA:7D:58:18:00:D4:C6:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd46766b-398d-35b2-ab7e-995672472dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.35.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:1b:c7:50:a3:04:a5:90:80:11:c3:16:5e:91:d4:10:7c:2d:
         3f:45:f3:32:51:56:a0:06:c9:31:1d:1d:e5:45:ee:d3:d5:9e:
         8e:d0:1d:2d:55:69:a1:5c:56:b4:1f:3e:79:b0:10:d1:e8:13:
         a7:54:64:5b:dc:81:38:b5:11:7c:02:88:a8:22:32:23:c6:95:
         6b:a6:80:70:88:7d:43:c1:f5:4a:3d:fe:b8:f9:1a:77:a9:92:
         52:56:dd:82:bd:fb:1a:f5:68:1a:22:9e:08:10:71:19:0a:8f:
         2d:89:b9:44:48:cd:5f:7b:4b:37:6d:77:01:56:df:97:1d:c4:
         dc:9b:1a:09:29:14:79:ab:22:5c:3e:e4:d2:f8:6e:01:e1:d7:
         d3:b3:8d:cf:46:13:de:39:2f:f9:1a:c7:d0:d5:d6:82:dd:92:
         d1:a9:67:ac:a7:a8:59:e6:77:3a:20:75:63:7c:e6:12:7f:77:
         4a:cf:1f:b9:cb:c7:4f:ad:e4:73:2e:ec:1f:c3:8a:20:b9:35:
         97:f4:9f:f2:86:82:b5:4c:46:fd:a8:b6:9c:08:95:9b:10:f5:
         51:4a:ea:f6:41:37:c5:23:43:a7:12:94:5c:c5:7f:25:7a:b6:
         70:8f:e0:2b:81:cd:29:be:23:b8:3b:5d:c7:a6:e5:77:da:69:
         04:32:ef:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:25:44 2024 by rpki-client on console-ams.rpki-client.org