Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09cf3dca-1d30-3e3b-9886-e03d6b69623f.roa
File:                     09cf3dca-1d30-3e3b-9886-e03d6b69623f.roa (raw, json)
Hash identifier:          mPn1jt9fUWELqPXtao/DZ6iqt0XV/3C0WWEyQS8Vdek=
Subject key identifier:   46:5C:18:59:B3:B7:A5:1A:6F:31:FD:9D:BB:7F:00:87:83:0F:B7:CF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A785176FF887B3C96FFD6D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09cf3dca-1d30-3e3b-9886-e03d6b69623f.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.203.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:17:6f:f8:87:b3:c9:6f:fd:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=a4cbeef9-3283-4969-b4ad-c94afda17078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6e:e5:91:1b:4c:82:48:fe:0c:ae:a2:09:f0:
                    be:e4:e7:7e:1f:bd:b7:dc:ab:46:85:13:eb:39:79:
                    a0:e9:87:29:3c:03:d9:4c:48:62:87:37:31:f5:a2:
                    6a:f9:1c:86:83:a3:3e:73:d3:66:96:5f:6f:e5:4d:
                    5f:bd:89:2d:b8:ec:61:65:af:7b:c5:8c:82:bf:7e:
                    cf:c0:51:13:c1:6f:41:86:52:b0:cb:c0:75:06:04:
                    ba:7d:e9:70:f7:f6:c4:8e:dc:0e:af:68:d4:6b:f7:
                    1a:0f:65:ca:6f:13:e7:1e:69:26:57:b4:d0:1a:73:
                    ad:01:30:dc:2e:61:4e:65:14:98:68:ba:db:2b:65:
                    82:a4:b5:35:ea:ba:f4:23:91:8e:b9:ad:ef:02:62:
                    5c:4f:c4:36:fb:c7:9d:65:c9:ca:07:b6:f2:ab:62:
                    0d:82:10:82:e0:90:8f:f3:9d:76:52:86:07:2c:13:
                    2e:25:86:d9:86:9e:e4:7d:e6:cc:8b:47:9c:d5:9d:
                    db:c3:ef:2d:2f:9e:64:41:20:71:59:b7:4d:72:ad:
                    1a:0c:51:78:ee:07:7b:fe:c2:8c:a0:6d:80:ab:ce:
                    65:6a:91:f5:2b:61:a9:2c:80:eb:46:ab:7f:44:80:
                    1f:8f:ed:d0:e2:fe:f7:85:5c:a9:d6:ce:2b:16:8f:
                    0d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5C:18:59:B3:B7:A5:1A:6F:31:FD:9D:BB:7F:00:87:83:0F:B7:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09cf3dca-1d30-3e3b-9886-e03d6b69623f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.203.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:7e:39:a0:07:af:1a:76:87:af:51:f3:34:41:f2:df:33:52:
         df:e0:34:81:ff:18:b5:d9:57:39:02:52:fe:77:19:48:a5:0e:
         f1:3d:4c:7c:c6:dc:ac:68:ef:d8:1c:04:eb:d1:49:49:89:b3:
         21:22:dd:48:7a:09:ef:e3:30:16:fb:7a:8a:86:c9:ca:c6:80:
         02:a4:fb:68:e2:a3:2a:5e:f1:0d:b3:b0:07:68:df:6e:c4:41:
         33:2f:6a:07:ab:d3:0b:3d:8e:7b:6f:ec:a5:bc:f4:5c:9f:47:
         b4:8a:df:da:fc:4f:86:1d:20:ee:ce:36:d3:8f:aa:cf:11:6e:
         c2:f3:f5:e0:da:ab:99:42:f5:20:d2:f3:58:fe:c2:1f:53:56:
         09:32:82:7f:b9:c5:09:60:a9:b5:02:d6:7a:cc:94:46:bf:f0:
         a8:aa:95:d9:df:4c:35:16:6b:2d:12:c1:da:c4:ae:47:9e:48:
         96:38:9d:bc:c3:c9:02:06:b2:8f:b3:8b:e5:72:26:9b:72:06:
         15:95:02:ee:22:c7:29:01:62:2f:22:6d:3b:5b:59:7e:35:0d:
         0d:73:f2:af:f6:ac:b4:c5:ce:ac:f7:ce:7a:21:d1:27:4d:87:
         c4:6b:7e:54:5c:53:f7:6e:ed:c8:50:6e:4a:b5:9c:31:5c:06:
         cc:65:a3:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRdv+IezyW/9bQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
YTRjYmVlZjktMzI4My00OTY5LWI0YWQtYzk0YWZkYTE3MDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG7lkRtMgkj+DK6iCfC+5Od+H7233KtGhRPr
OXmg6YcpPAPZTEhihzcx9aJq+RyGg6M+c9Nmll9v5U1fvYktuOxhZa97xYyCv37P
wFETwW9BhlKwy8B1BgS6felw9/bEjtwOr2jUa/caD2XKbxPnHmkmV7TQGnOtATDc
LmFOZRSYaLrbK2WCpLU16rr0I5GOua3vAmJcT8Q2+8edZcnKB7byq2INghCC4JCP
8512UoYHLBMuJYbZhp7kfebMi0ec1Z3bw+8tL55kQSBxWbdNcq0aDFF47gd7/sKM
oG2Aq85lapH1K2GpLIDrRqt/RIAfj+3Q4v73hVyp1s4rFo8NvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZcGFmzt6UabzH9nbt/AIeDD7fPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDljZjNkY2EtMWQzMC0z
ZTNiLTk4ODYtZTAzZDZiNjk2MjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADR+OaAHrxp2h69R8zRB8t8zUt/gNIH/GLXZVzkCUv53GUilDvE9THzG
3Kxo79gcBOvRSUmJsyEi3Uh6Ce/jMBb7eoqGycrGgAKk+2jioype8Q2zsAdo327E
QTMvager0ws9jntv7KW89FyfR7SK39r8T4YdIO7ONtOPqs8RbsLz9eDaq5lC9SDS
81j+wh9TVgkygn+5xQlgqbUC1nrMlEa/8KiqldnfTDUWay0SwdrErkeeSJY4nbzD
yQIGso+zi+VyJptyBhWVAu4ixykBYi8ibTtbWX41DQ1z8q/2rLTFzqz3znoh0SdN
h8RrflRcU/du7chQbkq1nDFcBsxlo5I=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:05:14 2025 by rpki-client