Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/311f668a-8140-3e75-b054-f8d76c14ed88.roa
File:                     311f668a-8140-3e75-b054-f8d76c14ed88.roa (raw, json)
Hash identifier:          AQoO4OlkEv5e/MuZ4ApFayuFIZR5ro7v3/48D3JJo7s=
Subject key identifier:   E1:FE:CA:A6:C7:B9:F8:43:B3:D0:EE:39:BE:F3:72:76:AF:E3:79:06
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BF54545E6B7B5C2844A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/311f668a-8140-3e75-b054-f8d76c14ed88.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.203.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:f5:45:45:e6:b7:b5:c2:84:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=9b7b9772-d3e1-4b3a-b0b5-28b31aabe82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:03:8a:22:c7:a9:5c:98:79:f4:19:c9:f7:c7:
                    8e:08:ce:d2:b2:61:95:dd:df:11:41:40:0f:f5:9e:
                    c4:84:cb:51:49:f2:7c:8a:d1:0c:a7:e4:24:39:16:
                    69:55:c7:d6:77:95:55:12:0c:dd:dc:00:a5:b0:29:
                    83:dc:cb:ba:8d:9a:85:e9:63:bf:d2:6b:64:82:96:
                    13:52:ee:eb:a5:07:6c:0d:8f:17:0b:85:67:d9:b3:
                    87:65:ea:7c:f1:c3:28:4a:26:15:47:73:05:d1:07:
                    dc:dd:99:c2:98:42:01:d4:6e:8d:ea:92:bf:72:89:
                    70:db:a7:8b:6a:40:3f:f9:91:62:4c:23:e2:29:d7:
                    3d:42:49:e0:87:d2:90:2e:44:e0:2c:0e:fa:fc:64:
                    e5:9f:9f:de:b2:14:85:c2:af:4f:44:df:a2:94:5f:
                    10:1a:50:17:fb:7b:3f:d1:86:5d:73:b1:18:eb:e0:
                    c7:75:1f:37:45:1d:60:d8:fb:b8:24:4c:83:3c:b7:
                    c0:cb:85:6c:c7:54:e6:ad:ad:0d:77:42:46:63:d7:
                    f1:23:66:cd:aa:6d:d0:de:ef:04:05:e1:87:fe:49:
                    f2:f1:a3:0f:ba:8f:c2:5e:0c:80:fe:29:b9:e7:7f:
                    9f:83:4b:ac:e6:7d:6c:3a:c4:b2:cc:5f:aa:26:2a:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FE:CA:A6:C7:B9:F8:43:B3:D0:EE:39:BE:F3:72:76:AF:E3:79:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/311f668a-8140-3e75-b054-f8d76c14ed88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.203.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ad:42:43:9f:08:91:55:f3:26:d7:69:e3:a9:49:7a:76:ab:
         4d:96:ba:72:5f:51:20:b3:95:a6:0a:0e:ed:a3:23:33:2e:22:
         1f:f0:50:f2:82:29:47:f6:08:55:68:95:10:f8:8f:b7:46:72:
         d0:fb:49:11:f9:29:9e:d9:b2:ef:e0:46:d6:5c:1a:8e:be:ce:
         08:83:68:3d:af:5e:b9:e0:95:1c:90:47:57:73:33:78:3c:74:
         81:0d:40:9b:06:cd:7d:1b:ce:64:d2:da:3c:05:26:bd:62:0a:
         b9:0b:24:3c:2a:b2:dd:40:b0:8f:d6:2d:45:b9:72:3e:93:db:
         34:e7:a0:ec:90:51:1d:98:eb:2b:e2:9d:34:17:22:b2:99:c0:
         91:48:1f:ad:bf:8c:06:b1:dc:43:89:34:b1:65:92:78:b5:1e:
         63:ba:69:dc:31:93:97:b2:07:e5:f8:1e:d5:dd:f2:bd:e8:cb:
         4d:32:6e:b6:a6:62:be:69:49:78:db:4f:68:7e:ca:93:ea:6c:
         2c:16:1f:83:df:38:9f:0a:49:73:92:ee:c9:e6:fe:ad:80:72:
         e0:07:7d:b1:e0:94:f6:5f:9f:24:1f:d5:be:00:6a:e7:b8:41:
         52:6a:13:52:80:25:ec:d3:6b:cc:3d:d8:a8:0b:79:59:b0:19:
         c9:94:d6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:01:08 2025 by rpki-client