Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f1ecc66-16c8-329c-92b9-dbd3638d66b7.roa
File:                     4f1ecc66-16c8-329c-92b9-dbd3638d66b7.roa (raw, json)
Hash identifier:          jjcRPamZcFs8KEuA5ju18EEkpuDybne0dNmz2oRAFH0=
Subject key identifier:   A1:94:70:E6:B5:5C:70:41:2C:21:42:40:53:91:0E:CE:09:A8:53:6B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A784DEDF53BAD1070504C688
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f1ecc66-16c8-329c-92b9-dbd3638d66b7.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        35.203.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:de:df:53:ba:d1:07:05:04:c6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=92c47e61-8b22-4eac-a67b-4ae5c56390d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:3b:7b:ef:85:12:fd:54:41:6b:af:b9:fd:
                    9a:2e:6c:e2:52:27:82:04:bd:2c:01:ba:34:ee:1e:
                    85:f1:c7:3d:52:51:b8:e6:b6:8c:2f:08:f3:29:29:
                    88:4b:32:ef:6b:cd:ae:c8:17:ec:dd:96:d9:e3:52:
                    ae:51:32:a2:bd:9c:00:a8:75:09:42:33:ff:5c:17:
                    bd:ad:8a:19:f0:66:e9:fa:37:df:fc:ff:d1:0d:9b:
                    ab:1c:1e:6a:4a:15:13:b4:00:78:6e:af:47:d6:f5:
                    13:4d:9b:3d:81:ad:5c:44:b9:0f:a2:80:c1:1e:a7:
                    2d:91:df:46:b5:1f:c1:3c:86:40:96:b3:51:5c:fd:
                    5a:5b:89:1a:e5:ca:54:84:2f:9b:2a:f9:ee:43:b4:
                    73:9c:dc:d5:fa:32:7f:87:13:c3:0e:46:95:48:f5:
                    21:a2:fb:74:d8:eb:31:04:f5:d9:42:08:e7:f9:1e:
                    ee:f8:23:6d:40:bc:92:68:08:39:a4:6b:93:da:43:
                    47:6e:38:69:83:7f:58:c6:7f:1d:b6:f7:fd:df:51:
                    02:0f:f0:0e:75:7e:5b:d0:c3:cc:94:a7:e3:d0:c5:
                    41:0d:fc:b0:d9:66:d9:11:86:57:df:eb:08:f0:34:
                    14:c6:7a:5e:47:c8:10:db:d3:4b:33:17:12:a9:29:
                    9d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:94:70:E6:B5:5C:70:41:2C:21:42:40:53:91:0E:CE:09:A8:53:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f1ecc66-16c8-329c-92b9-dbd3638d66b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.203.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:f7:f2:8a:75:e1:f4:6b:85:47:8b:0b:49:17:57:fe:ee:dd:
         fb:33:44:bf:46:5d:83:0f:75:a3:c8:cd:d3:0b:7a:d3:86:20:
         0c:49:5f:dd:5c:71:99:d2:58:56:f3:cb:49:64:00:3f:99:10:
         3d:d4:11:f7:33:20:68:cf:05:b2:28:68:7d:74:97:89:6c:c1:
         4a:b5:03:3d:80:84:24:36:02:d3:f4:5e:4a:7b:aa:0a:85:48:
         71:f5:07:7d:d1:3f:b1:e1:fd:e2:50:e2:b1:94:bc:2d:d1:11:
         b0:e3:64:78:c3:40:a2:37:4b:b3:ba:b9:7f:6f:c7:d5:dc:64:
         46:dd:a9:39:6a:c3:84:e8:3e:00:a1:41:3f:b6:fa:25:a2:38:
         7a:11:fb:df:92:af:87:cd:0a:98:42:16:86:a1:3a:bd:ec:99:
         50:a0:d2:54:1e:66:e2:79:4a:e0:b3:67:1a:dc:8d:67:01:86:
         91:79:8f:7a:8a:83:ab:cc:3d:9a:43:f3:55:93:ed:83:7c:9c:
         c6:48:bf:54:1e:fb:54:dc:2b:8a:58:a1:34:28:23:e1:d6:2f:
         8d:91:54:a4:05:31:79:ad:7b:91:29:72:1d:c3:26:fb:bf:df:
         b8:7c:23:45:cf:ac:91:f4:9f:13:9c:3f:67:61:a9:2a:2d:68:
         e8:7f:a9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:46 2025 by rpki-client