Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8eccaf05-6061-364e-8dcc-09fa5072f0a6.roa
File:                     8eccaf05-6061-364e-8dcc-09fa5072f0a6.roa (raw, json)
Hash identifier:          6WpOmgZBr6XBQux2JdHt2QsZPdCpiJmrZoLI6TazjPE=
Subject key identifier:   95:D8:A7:23:C0:68:D3:4C:00:5D:71:2D:C5:A9:7A:4B:17:68:90:B2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B4DAFF78FF82553128ED00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8eccaf05-6061-364e-8dcc-09fa5072f0a6.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     21552
IP address blocks:        207.35.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:da:ff:78:ff:82:55:31:28:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=fdd0763f-e440-4f59-bda6-7d1a20b32593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:37:09:bf:3f:eb:70:7e:85:41:22:e5:21:
                    c2:d3:ec:ef:94:24:53:38:3d:a4:86:b9:51:81:2d:
                    7f:73:b8:73:e8:a3:62:84:43:da:97:ec:9f:b6:c8:
                    e6:38:08:84:57:97:6b:af:32:29:66:97:42:ce:20:
                    1f:73:bb:9d:39:71:e3:2e:64:9b:1a:fb:26:79:69:
                    2c:6e:84:b2:a2:af:5f:9e:4f:f6:36:5e:2d:ac:89:
                    ea:25:2f:34:df:8f:ce:b1:d3:a7:6f:fb:24:7a:8b:
                    79:7c:ce:ee:13:35:34:e6:b5:a5:9a:7f:ad:fb:79:
                    29:b7:30:17:0f:bd:6b:3c:78:0b:b4:9d:f4:fe:d7:
                    cb:59:ca:7b:b0:8b:a4:a1:47:5d:d5:b7:08:11:51:
                    74:1a:8c:ee:b5:78:44:ef:c8:c1:ad:6b:07:2b:2e:
                    e4:f5:9d:2d:79:be:5b:bb:0d:6d:04:cb:1c:21:94:
                    ff:c8:8c:35:c0:3a:d4:d6:6f:59:84:4d:fe:e5:92:
                    82:e6:ed:93:81:87:0d:4f:59:9a:35:0f:b3:40:89:
                    e4:0f:8e:48:dc:58:0d:f4:2b:4c:df:b9:54:a9:45:
                    84:91:f7:74:36:ab:32:16:d3:a4:95:8b:06:82:a5:
                    77:b7:fe:9d:d6:40:8b:b4:0c:c5:8b:c2:ba:0a:91:
                    18:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D8:A7:23:C0:68:D3:4C:00:5D:71:2D:C5:A9:7A:4B:17:68:90:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8eccaf05-6061-364e-8dcc-09fa5072f0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:bf:38:1e:56:50:54:5c:19:fe:42:db:d8:c2:17:71:2b:fb:
         d6:83:da:df:3f:41:f9:f7:42:ba:3d:7d:19:32:d8:9c:ae:34:
         24:f3:6d:f7:f8:9c:7c:5b:b6:2b:28:3f:e3:0c:55:1d:fc:5b:
         a3:ca:bb:72:90:dd:70:b7:c0:dc:d0:95:40:ed:93:2c:c5:d2:
         00:d0:ad:b6:b7:56:32:cd:d4:6d:66:99:6e:4c:ef:35:e5:ba:
         8b:a7:1e:05:22:67:86:65:62:4e:9d:b3:ca:d0:f1:83:8c:32:
         c7:13:e8:a6:ef:96:9b:e1:cb:50:ad:ab:5f:65:e3:08:eb:60:
         ec:ec:6e:c8:e4:80:82:fe:09:e6:93:a0:15:2f:5e:c1:8f:48:
         29:76:5b:70:76:d0:98:3d:22:62:81:04:bf:73:1d:ec:22:e6:
         f6:d1:41:e2:f4:66:e7:b4:bc:85:3e:b1:5b:b9:1f:69:9c:bc:
         5b:06:4d:84:eb:58:19:0f:a7:6d:3f:c4:e3:32:25:62:a4:f5:
         2d:59:2a:27:8d:e9:de:29:7f:1b:96:f0:1c:1e:05:d8:95:94:
         aa:6f:ad:e8:7d:4f:47:3e:f9:07:3d:b5:38:38:58:fa:d8:eb:
         31:a3:7d:c9:8f:a5:ce:7d:32:f2:fa:aa:83:4d:2e:e8:4e:62:
         58:18:81:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWtNr/eP+CVTEo7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmRkMDc2M2YtZTQ0MC00ZjU5LWJkYTYtN2QxYTIwYjMyNTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPU3Cb8/63B+hUEi5SHC0+zvlCRTOD2khrlR
gS1/c7hz6KNihEPal+yftsjmOAiEV5drrzIpZpdCziAfc7udOXHjLmSbGvsmeWks
boSyoq9fnk/2Nl4trInqJS8034/OsdOnb/skeot5fM7uEzU05rWlmn+t+3kptzAX
D71rPHgLtJ30/tfLWcp7sIukoUdd1bcIEVF0GozutXhE78jBrWsHKy7k9Z0teb5b
uw1tBMscIZT/yIw1wDrU1m9ZhE3+5ZKC5u2TgYcNT1maNQ+zQInkD45I3FgN9CtM
37lUqUWEkfd0NqsyFtOklYsGgqV3t/6d1kCLtAzFi8K6CpEYaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJXYpyPAaNNMAF1xLcWpeksXaJCyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGVjY2FmMDUtNjA2MS0z
NjRlLThkY2MtMDlmYTUwNzJmMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyMUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEu/OB5WUFRcGf5C29jCF3Er+9aD2t8/Qfn3Qro9fRky2JyuNCTzbff4
nHxbtisoP+MMVR38W6PKu3KQ3XC3wNzQlUDtkyzF0gDQrba3VjLN1G1mmW5M7zXl
uounHgUiZ4ZlYk6ds8rQ8YOMMscT6Kbvlpvhy1Ctq19l4wjrYOzsbsjkgIL+CeaT
oBUvXsGPSCl2W3B20Jg9ImKBBL9zHewi5vbRQeL0Zue0vIU+sVu5H2mcvFsGTYTr
WBkPp20/xOMyJWKk9S1ZKieN6d4pfxuW8BweBdiVlKpvreh9T0c++Qc9tTg4WPrY
6zGjfcmPpc59MvL6qoNNLuhOYlgYgcs=
-----END CERTIFICATE-----
Generated at Sat May 18 01:32:37 2024 by rpki-client on console-fra.rpki-client.org