Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e2046b29-ee78-352c-be68-fa9220f3e10f.roa
File:                     e2046b29-ee78-352c-be68-fa9220f3e10f.roa (raw, json)
Hash identifier:          gt3zcd0RLNOn4mMMm17QO0zykJvzYA8Lo7EP6duX+kA=
Subject key identifier:   51:E9:9F:56:03:A9:06:5C:77:AC:C8:48:50:FC:DC:7A:52:F9:BC:34
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F508AC5942D3144B14BE00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e2046b29-ee78-352c-be68-fa9220f3e10f.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.203.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:08:ac:59:42:d3:14:4b:14:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=40a8dd88-a667-4b87-9ec0-5e0914793f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:36:e7:40:0e:34:9b:5b:0d:c8:42:45:c0:8b:
                    e1:83:55:d3:10:e9:1f:9a:df:b4:16:68:66:b8:37:
                    0d:4b:95:d2:f6:42:9f:a8:7c:f3:62:76:98:3e:d1:
                    63:b7:1e:89:58:2b:f5:61:b5:f5:38:5a:66:c4:30:
                    b3:93:10:9f:2d:34:0e:a1:0e:6f:3c:a8:72:76:26:
                    0d:97:06:97:ed:52:64:9b:55:e9:6e:fa:2b:b5:9a:
                    b7:0c:68:91:e1:c1:a6:d3:2a:63:d6:31:f4:a9:92:
                    ba:eb:36:f0:91:0a:db:36:80:93:4c:b3:f1:89:31:
                    5e:3a:fb:14:6d:60:69:06:1c:4e:41:05:44:30:b1:
                    30:45:72:34:50:3c:75:20:4a:91:b5:0d:73:4b:18:
                    ec:91:8d:32:d2:f0:54:0b:e0:8f:06:6f:de:ea:41:
                    59:fe:62:8b:ec:b5:82:a2:aa:8a:9a:01:ac:dd:f9:
                    5a:1c:cb:6c:d7:3f:e5:af:9f:99:a9:c3:82:a2:f8:
                    ca:5d:7d:65:50:13:90:b3:a1:9b:4f:30:4a:f5:16:
                    e1:bc:14:33:a4:26:ad:b4:9b:2c:71:02:31:07:64:
                    d4:e1:e5:0a:60:5e:fb:5d:4c:11:12:69:db:04:7f:
                    22:84:a4:16:d2:3a:c4:06:23:4b:10:ed:bc:98:56:
                    c3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E9:9F:56:03:A9:06:5C:77:AC:C8:48:50:FC:DC:7A:52:F9:BC:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e2046b29-ee78-352c-be68-fa9220f3e10f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.203.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b2:85:70:78:b1:83:c3:e0:68:32:52:c4:55:c7:1a:7c:15:
         36:3e:93:cc:94:ea:3e:ee:81:ad:8c:60:83:1e:1e:8c:17:66:
         68:3f:0a:9e:bd:cb:58:43:73:de:18:64:b1:73:c3:2b:82:85:
         e6:fe:bd:0a:ff:bc:62:cf:9a:3b:e9:64:5e:78:d2:b9:73:25:
         64:1e:c0:f8:dd:ad:05:55:dc:d7:74:00:99:34:4a:ae:f9:e5:
         4b:5e:8a:09:94:51:d6:61:36:d3:47:f8:16:83:f8:af:e7:c9:
         70:a6:fd:76:0e:c8:3b:ef:12:48:3a:b5:d4:28:96:33:7e:7c:
         b5:9c:5a:f8:8d:87:0a:3b:74:f2:29:df:8e:1d:37:9c:6f:c8:
         80:bf:c4:45:50:9e:ac:a0:2c:d3:35:ed:34:84:88:26:18:4c:
         6b:27:7e:9e:01:27:33:48:56:c9:a0:2b:6d:ea:bb:ef:eb:c8:
         d7:13:ee:50:f0:e5:25:20:62:d3:fe:7e:6f:fd:0e:7e:e9:fc:
         80:ef:5f:75:75:7f:e0:83:e6:be:ce:10:91:c9:e3:1c:c5:8d:
         7c:8f:a3:bc:2e:7e:cf:ab:6b:4a:47:b9:07:5b:0c:32:0c:ee:
         bb:88:47:e3:1a:a3:2a:08:81:0e:1d:b4:7d:a6:90:1c:f4:89:
         00:82:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:47:51 2024 by rpki-client on console-ams.rpki-client.org