Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa
File:                     b2678a67-8ef4-3062-adc8-762daaa2d576.roa (raw, json)
Hash identifier:          Bfm2mMFVJyl+WydIDg3LYoZmPhTtjL9/MNUu8VlZtBc=
Subject key identifier:   74:73:3A:13:6A:C1:41:84:56:BA:0A:F4:53:22:52:9B:08:05:3A:DC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584549035A16FB2CE83437EC6200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa
Signing time:             Thu 21 Mar 2024 21:26:50 +0000
ROA not before:           Thu 21 Mar 2024 21:26:50 +0000
ROA not after:            Wed 19 Jun 2024 21:26:50 +0000
asID:                     396982
IP address blocks:        35.203.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:03:5a:16:fb:2c:e8:34:37:ec:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 21 21:26:50 2024 GMT
            Not After : Jun 19 21:26:50 2024 GMT
        Subject: CN=286c1e5f-968b-4b79-b767-e977a910408e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:d6:47:e2:61:8e:72:41:fb:36:c7:cb:52:
                    9a:02:a4:6c:87:70:73:40:80:83:16:d9:cc:1b:b7:
                    77:94:b4:d6:c4:9b:57:c3:30:26:cf:5a:84:06:cd:
                    ec:57:1e:ef:b8:63:95:75:8a:7a:7d:2b:2f:cd:fc:
                    70:1a:ec:ab:c6:27:fc:fc:a3:3d:7a:a6:43:d4:f7:
                    b5:f5:0c:a2:bf:71:5c:98:40:e1:d8:cb:30:50:22:
                    4c:a3:fd:cd:db:59:88:e1:c6:d4:e6:83:aa:e3:c9:
                    6c:bc:1e:c6:31:da:93:b2:13:03:76:5c:87:ae:31:
                    24:77:91:b2:6b:43:8b:bc:e9:36:b4:5d:e7:60:f1:
                    1b:a4:7f:61:02:69:ba:33:9d:ed:55:0c:c2:7c:7c:
                    ba:70:60:88:28:81:6b:f1:00:11:7a:25:a5:e3:1a:
                    c1:65:58:4c:0b:c3:ab:ac:aa:c1:d5:28:ad:ab:bc:
                    77:2d:53:d8:e4:a8:17:86:60:e4:e8:61:18:3b:32:
                    db:8e:d9:e3:7e:67:ff:d1:9f:fa:ca:4c:3d:9b:ef:
                    26:05:54:fc:6f:0d:27:68:a2:45:d5:24:bf:65:7f:
                    9e:06:29:ac:de:98:2b:08:87:55:79:27:be:66:b6:
                    e6:56:8b:1e:64:91:1f:6a:2f:9a:65:5e:d2:ef:6d:
                    0a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:73:3A:13:6A:C1:41:84:56:BA:0A:F4:53:22:52:9B:08:05:3A:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.203.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2d:60:3e:96:3a:3e:f0:e6:4b:92:d2:03:6e:9c:fc:40:f4:
         d3:f4:2a:21:16:d2:99:a8:f7:7c:53:12:34:ce:f8:cc:b5:80:
         c4:43:9a:10:40:c9:a6:85:25:d9:20:98:13:b3:28:4f:01:ab:
         d3:9e:42:7a:3a:75:8c:c9:4d:1e:bd:05:e1:48:7e:bf:c7:f9:
         31:53:5e:71:19:60:a3:55:a1:8a:45:8a:39:b3:33:3e:96:2a:
         49:f6:ea:0a:65:e7:23:c1:84:8b:70:87:d1:7d:79:46:59:f6:
         1f:2f:fa:e2:56:9c:00:1f:06:e1:af:78:60:2e:59:40:ca:d3:
         39:b5:dc:a3:7e:4e:80:d7:ca:a6:17:f0:9c:23:cb:7f:cc:ce:
         38:73:37:6c:43:e9:7e:85:5c:d8:b7:eb:b8:2c:4a:cd:e3:c9:
         d1:65:60:57:d7:61:6e:fa:67:8f:5a:a9:60:b4:e5:49:63:a8:
         8e:36:b5:bb:be:bb:db:b3:04:2f:b4:1c:d3:6b:0e:6e:95:86:
         9e:51:77:91:cc:4c:b7:1e:50:26:84:55:54:9a:35:7c:71:57:
         51:54:09:fa:3d:3e:d2:28:29:6f:88:3f:c0:77:eb:83:8b:cd:
         b1:47:42:63:91:83:b6:65:70:82:ec:ca:70:83:11:6f:ed:51:
         96:01:27:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJA1oW+yzoNDfsYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MDMyMTIxMjY1MFoXDTI0MDYxOTIxMjY1MFowLzEtMCsGA1UEAxMk
Mjg2YzFlNWYtOTY4Yi00Yjc5LWI3NjctZTk3N2E5MTA0MDhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKTWR+JhjnJB+zbHy1KaAqRsh3BzQICDFtnM
G7d3lLTWxJtXwzAmz1qEBs3sVx7vuGOVdYp6fSsvzfxwGuyrxif8/KM9eqZD1Pe1
9Qyiv3FcmEDh2MswUCJMo/3N21mI4cbU5oOq48lsvB7GMdqTshMDdlyHrjEkd5Gy
a0OLvOk2tF3nYPEbpH9hAmm6M53tVQzCfHy6cGCIKIFr8QAReiWl4xrBZVhMC8Or
rKrB1Sitq7x3LVPY5KgXhmDk6GEYOzLbjtnjfmf/0Z/6ykw9m+8mBVT8bw0naKJF
1SS/ZX+eBims3pgrCIdVeSe+ZrbmVoseZJEfai+aZV7S720K/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRzOhNqwUGEVroK9FMiUpsIBTrcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjI2NzhhNjctOGVmNC0z
MDYyLWFkYzgtNzYyZGFhYTJkNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwtYD6WOj7w5kuS0gNunPxA9NP0KiEW0pmo93xTEjTO+My1gMRDmhBA
yaaFJdkgmBOzKE8Bq9OeQno6dYzJTR69BeFIfr/H+TFTXnEZYKNVoYpFijmzMz6W
Kkn26gpl5yPBhItwh9F9eUZZ9h8v+uJWnAAfBuGveGAuWUDK0zm13KN+ToDXyqYX
8Jwjy3/MzjhzN2xD6X6FXNi367gsSs3jydFlYFfXYW76Z49aqWC05UljqI42tbu+
u9uzBC+0HNNrDm6Vhp5Rd5HMTLceUCaEVVSaNXxxV1FUCfo9PtIoKW+IP8B364OL
zbFHQmORg7ZlcILsynCDEW/tUZYBJzM=
-----END CERTIFICATE-----
Generated at Sun May 5 15:49:51 2024 by rpki-client on console-ams.rpki-client.org