Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e6dd1796-d0c9-322e-9dfd-254e4466df57.roa
File:                     e6dd1796-d0c9-322e-9dfd-254e4466df57.roa (raw, json)
Hash identifier:          EFLlkSfVDGtcuENRdQzMdN5LlJV3CSXODeDdCWY++SI=
Subject key identifier:   85:C5:74:8A:B8:C7:5E:01:1C:F1:F0:13:F6:78:CF:DC:B6:93:D1:1F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A103B774AADB3C3D4FE5C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e6dd1796-d0c9-322e-9dfd-254e4466df57.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        35.148.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:03:b7:74:aa:db:3c:3d:4f:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=e7c92781-fd06-47a6-aa3b-9ace52fa5767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:85:fa:5e:aa:76:17:e4:c1:ca:c6:3f:cf:28:
                    b0:7c:98:ed:1a:8f:65:7d:13:f1:3f:4b:cb:79:13:
                    e1:ab:42:c7:d4:3d:2c:af:fa:66:06:9c:0e:29:16:
                    53:54:e7:6e:d5:34:f8:1c:19:9c:24:3e:71:4b:e1:
                    5f:99:b1:c8:df:4a:4d:dc:f0:bd:d4:b9:28:f9:67:
                    0f:e8:76:90:40:db:24:3e:46:e5:ca:de:ae:1f:29:
                    a8:62:47:8f:22:40:e2:5d:e4:19:73:2a:61:fb:98:
                    92:6f:d1:80:cf:71:f4:8f:91:76:57:78:d8:91:8b:
                    98:c7:7d:b6:63:ee:00:e1:75:f6:80:98:c9:95:b8:
                    60:e3:fe:4e:62:73:84:7b:db:72:5c:53:7a:2a:df:
                    d3:7d:3e:05:96:ea:fc:5f:3c:07:6b:0f:0f:3a:c4:
                    fa:02:f8:ce:d9:64:85:1c:2e:bf:60:83:5d:ae:9f:
                    54:b3:cf:73:a2:32:1a:15:d9:b1:a3:42:ca:07:e0:
                    af:9b:18:34:05:43:4b:c7:70:c5:3b:95:26:fe:7e:
                    8b:c8:72:eb:01:6c:b1:57:92:2d:89:a8:94:5d:60:
                    8e:1c:85:e9:fb:82:a8:60:2d:ee:1a:05:55:59:f1:
                    09:e8:dd:b6:ca:45:e5:af:b4:70:b1:7a:ef:f7:5f:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C5:74:8A:B8:C7:5E:01:1C:F1:F0:13:F6:78:CF:DC:B6:93:D1:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e6dd1796-d0c9-322e-9dfd-254e4466df57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.148.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:17:16:aa:7d:a3:55:09:16:48:a8:6c:7e:56:a2:02:a5:d7:
         aa:95:ee:6c:ca:8b:31:3c:5e:ce:b7:02:54:f1:b3:7c:3b:2e:
         c8:9d:f4:dd:02:8b:0e:68:00:f5:22:9c:16:d2:9c:0a:72:5a:
         8a:f8:4f:57:15:24:ff:f8:d5:5b:3e:0d:d9:6a:b9:f4:1a:47:
         d5:a6:e3:b9:8d:08:b0:c1:a9:13:ad:17:c8:80:db:29:22:5c:
         16:48:a5:fa:c1:5b:04:0a:ff:88:8e:c5:c3:36:f8:46:d1:95:
         6a:f8:36:58:44:07:7e:4a:a1:a1:ab:4a:7c:50:79:8f:e0:37:
         49:93:96:a3:66:25:26:cc:36:f3:3c:14:3d:ea:cc:18:9e:48:
         18:95:a3:c4:eb:5d:cd:77:47:8f:76:24:ae:9e:19:5a:a2:58:
         72:5a:08:0e:86:ba:8b:82:9d:84:bb:eb:ad:1e:90:ac:17:61:
         f0:70:e4:b7:52:45:8b:7a:2c:fb:56:b8:89:b2:2d:e0:41:5d:
         8e:97:83:0e:2d:c7:7d:2e:de:4c:ec:67:27:e4:85:5a:77:90:
         e9:4d:5a:0a:48:41:50:74:e8:ea:6e:53:5f:17:a5:80:0c:aa:
         a4:11:f0:bf:cb:ab:57:74:8b:86:d9:a9:a9:ab:69:a1:f0:9a:
         28:e7:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:23 2024 by rpki-client on console-fra.rpki-client.org