Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f80d192-f362-33d9-8769-ed2f94d3020e.roa
File:                     8f80d192-f362-33d9-8769-ed2f94d3020e.roa (raw, json)
Hash identifier:          2pfY+5ttp/S1wfjcN9zl6nu/h3nAK+2vWTYjYhUnurI=
Subject key identifier:   4E:8B:E7:C4:AC:D3:4F:A6:5B:79:77:A7:B8:80:90:E2:EE:2D:F5:C5
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285845490F4A963A8DAAFC7B02EE60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f80d192-f362-33d9-8769-ed2f94d3020e.roa
Signing time:             Thu 21 Mar 2024 21:50:54 +0000
ROA not before:           Thu 21 Mar 2024 21:50:54 +0000
ROA not after:            Wed 19 Jun 2024 21:50:54 +0000
asID:                     396982
IP address blocks:        35.203.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0f:4a:96:3a:8d:aa:fc:7b:02:ee:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:50:54 2024 GMT
            Not After : Jun 19 21:50:54 2024 GMT
        Subject: CN=73902e94-51a0-45c6-ade0-43647340ecf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:87:1e:0f:d2:64:62:1e:94:94:14:1b:c6:a3:
                    5b:9f:7f:4e:82:d4:32:b0:cd:b4:d5:99:42:8f:fe:
                    79:ac:54:b9:56:a2:bd:94:0d:c6:0b:15:bf:ac:5b:
                    b2:e6:26:4f:65:e1:89:d6:e8:69:35:f7:15:f3:09:
                    26:b9:3a:ac:83:6a:92:a1:4c:ab:39:86:4e:7b:bd:
                    fe:27:35:99:19:04:82:bf:38:76:75:24:ee:5c:d8:
                    11:e8:3e:5c:f4:18:89:d0:12:dc:60:77:16:d4:b4:
                    ea:59:a9:62:db:ad:03:1e:e9:f1:a7:a6:36:8c:8c:
                    85:b7:41:23:2c:44:94:fc:9a:87:81:5e:76:ad:91:
                    f7:e4:4d:51:6e:12:a4:2b:17:14:40:7f:e7:4f:6d:
                    34:27:97:9c:8b:f8:c0:2f:e8:01:7d:a2:59:4a:f8:
                    51:f8:c2:7a:9f:02:b9:43:fb:3e:d1:da:ae:7a:94:
                    f8:94:af:65:d5:41:b1:31:b1:6d:24:65:73:40:d0:
                    b2:dd:76:1f:da:a7:bf:d4:16:91:50:a0:b7:2d:bf:
                    e4:97:68:81:a7:21:bd:05:db:56:29:39:64:97:d6:
                    5e:a2:ce:92:b9:ff:a4:34:d9:c5:14:50:5f:be:cf:
                    5a:61:26:27:f7:36:d1:ec:93:ea:19:ff:47:1e:76:
                    d1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8B:E7:C4:AC:D3:4F:A6:5B:79:77:A7:B8:80:90:E2:EE:2D:F5:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f80d192-f362-33d9-8769-ed2f94d3020e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.203.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c5:38:d0:ce:ba:87:2c:90:07:61:6b:53:d6:9c:80:cf:14:
         16:9d:48:39:d6:95:fa:40:c8:d3:5d:c9:46:c3:49:1f:28:19:
         35:b9:a0:35:a3:87:c6:13:b1:f5:f1:40:d6:45:63:79:e9:ae:
         85:ac:25:1a:b5:17:3e:38:80:7d:8e:25:78:99:e3:8a:57:7f:
         62:c2:1a:3f:30:3b:e4:ac:ea:13:8e:a0:08:ae:20:4b:89:e8:
         b8:5b:67:89:f1:2e:ef:2b:b0:78:c9:98:ba:73:de:0d:c5:b9:
         d9:43:9a:80:53:66:2e:68:6b:d7:e1:f8:ff:b9:5d:f4:1c:cc:
         2b:b0:c9:6a:01:06:a8:c6:66:27:58:49:e0:2d:c2:83:b0:4d:
         20:02:9e:49:b4:38:b5:3c:f5:bc:e8:c4:d6:9e:2e:5c:0a:e7:
         b4:09:73:fd:96:48:2e:4e:9b:af:41:c4:3d:44:e1:d7:91:8d:
         fb:56:f6:c1:e7:4a:32:78:7c:c4:c6:a1:70:cf:fc:3f:c3:39:
         c2:8b:72:1d:aa:94:5e:2f:ac:f0:eb:8c:e7:a6:64:ee:5a:74:
         f6:1f:d7:9a:26:30:e1:c7:28:b6:bd:0b:b8:71:61:1d:8d:75:
         6f:8a:0a:76:fb:58:fc:5a:50:5e:45:61:44:d3:bb:9c:60:5e:
         34:07:a3:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJD0qWOo2q/HsC7mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxNTA1NFoXDTI0MDYxOTIxNTA1NFowLzEtMCsGA1UEAxMk
NzM5MDJlOTQtNTFhMC00NWM2LWFkZTAtNDM2NDczNDBlY2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYceD9JkYh6UlBQbxqNbn39OgtQysM201ZlC
j/55rFS5VqK9lA3GCxW/rFuy5iZPZeGJ1uhpNfcV8wkmuTqsg2qSoUyrOYZOe73+
JzWZGQSCvzh2dSTuXNgR6D5c9BiJ0BLcYHcW1LTqWali260DHunxp6Y2jIyFt0Ej
LESU/JqHgV52rZH35E1RbhKkKxcUQH/nT200J5eci/jAL+gBfaJZSvhR+MJ6nwK5
Q/s+0dquepT4lK9l1UGxMbFtJGVzQNCy3XYf2qe/1BaRUKC3Lb/kl2iBpyG9BdtW
KTlkl9Zeos6Suf+kNNnFFFBfvs9aYSYn9zbR7JPqGf9HHnbRfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE6L58Ss00+mW3l3p7iAkOLuLfXFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGY4MGQxOTItZjM2Mi0z
M2Q5LTg3NjktZWQyZjk0ZDMwMjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHFONDOuocskAdha1PWnIDPFBadSDnWlfpAyNNdyUbDSR8oGTW5oDWj
h8YTsfXxQNZFY3nproWsJRq1Fz44gH2OJXiZ44pXf2LCGj8wO+Ss6hOOoAiuIEuJ
6LhbZ4nxLu8rsHjJmLpz3g3FudlDmoBTZi5oa9fh+P+5XfQczCuwyWoBBqjGZidY
SeAtwoOwTSACnkm0OLU89bzoxNaeLlwK57QJc/2WSC5Om69BxD1E4deRjftW9sHn
SjJ4fMTGoXDP/D/DOcKLch2qlF4vrPDrjOemZO5adPYf15omMOHHKLa9C7hxYR2N
dW+KCnb7WPxaUF5FYUTTu5xgXjQHo74=
-----END CERTIFICATE-----
Generated at Sun May 5 15:35:33 2024 by rpki-client on console-fra.rpki-client.org