Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac3a1397-14c8-31a1-8a4c-410306bcbb1e.roa
File:                     ac3a1397-14c8-31a1-8a4c-410306bcbb1e.roa (raw, json)
Hash identifier:          oKjkSXUg6WcrrRnP9T4GNbAgcKZ4KXprVhn+FmCPUM0=
Subject key identifier:   FE:06:D9:DD:9E:52:1B:F7:79:C5:F9:27:A1:83:5E:13:78:03:17:98
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B4E0CC517F3CCCD3D0B180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac3a1397-14c8-31a1-8a4c-410306bcbb1e.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     21723
IP address blocks:        207.35.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:e0:cc:51:7f:3c:cc:d3:d0:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=ee4c3d79-bd0d-45b9-b703-cc5f1f972be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:e5:d4:18:35:88:f5:16:ab:4f:6b:34:11:
                    4c:27:9a:12:59:af:ad:37:27:16:93:6f:59:05:18:
                    c2:93:fc:ac:d0:69:c7:fa:52:5a:ab:c0:48:79:19:
                    52:a2:21:2e:4c:95:4e:b9:de:cc:e2:02:ac:59:9c:
                    db:79:6b:d3:ea:bd:46:0a:19:05:61:2e:49:1f:7b:
                    d9:4b:40:30:90:d1:63:ae:55:6d:a9:bb:0f:54:3b:
                    50:65:17:2e:77:67:35:63:06:0b:79:e7:8f:5f:81:
                    91:22:4a:f1:81:39:91:47:a4:8d:ad:7d:0b:04:18:
                    09:a5:73:2a:87:99:eb:15:83:e8:b4:e6:35:20:93:
                    03:33:3d:18:93:dd:61:e1:67:a3:01:42:11:22:f7:
                    49:a2:37:84:00:f3:01:1d:1d:31:65:6a:f0:3c:53:
                    80:2e:25:86:9a:a6:8d:5a:b9:5e:cc:19:7e:c1:33:
                    03:34:59:5e:2f:ca:fb:29:72:fa:d0:d5:b6:ff:1b:
                    ae:f5:d4:71:8e:75:c0:d8:44:13:23:3b:98:3a:54:
                    12:6e:50:4f:36:4e:ac:eb:f0:bc:c2:57:94:52:81:
                    a6:33:70:ca:1d:d1:40:e1:03:88:4b:b8:01:e7:81:
                    55:7a:21:eb:b2:b9:56:68:1e:a9:c2:d7:3f:b3:19:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:06:D9:DD:9E:52:1B:F7:79:C5:F9:27:A1:83:5E:13:78:03:17:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac3a1397-14c8-31a1-8a4c-410306bcbb1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:89:78:38:73:0c:ce:47:58:42:96:a8:f2:ee:1e:f3:e0:bb:
         e6:9d:f1:03:2b:4b:e8:ff:29:4e:41:52:f2:ac:10:a3:96:05:
         91:c1:41:9f:85:9a:4c:69:d2:e3:26:17:79:f3:38:8f:78:cd:
         4b:47:f2:6f:f3:a3:26:d5:3a:1d:b1:88:b6:02:b9:77:ce:3f:
         06:6c:b5:ae:81:35:42:1e:19:e4:5b:2d:50:0e:11:f1:29:78:
         67:cf:50:41:5f:fc:00:74:89:b0:dc:ce:4e:4e:3a:c9:d4:e6:
         f0:f2:3f:92:ef:5c:5d:d4:b3:2f:b5:dc:f5:3b:e6:da:ab:9e:
         04:ec:72:46:f2:08:08:b1:ab:4f:7e:fc:74:6c:73:ba:92:e0:
         90:fc:f1:c2:a0:b2:38:8b:0e:3c:b7:4c:6d:cf:8e:4d:8c:38:
         e5:37:59:be:c5:39:cf:8a:f4:40:11:86:6d:5e:60:2e:e3:79:
         20:12:f1:43:4f:ad:7b:b6:31:93:57:7e:2e:44:cb:fa:8a:54:
         55:28:94:bd:3f:04:6a:97:f4:9d:c7:e9:9b:3e:0b:9e:f8:46:
         7a:d0:95:ed:c5:fb:bd:46:ac:d3:bd:e4:50:be:a1:7f:ad:b5:
         e7:72:da:a5:6d:da:5d:19:41:d6:8f:0f:da:4b:e6:c9:57:7b:
         8b:5f:e6:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWtODMUX88zNPQsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZWU0YzNkNzktYmQwZC00NWI5LWI3MDMtY2M1ZjFmOTcyYmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI3l1Bg1iPUWq09rNBFMJ5oSWa+tNycWk29Z
BRjCk/ys0GnH+lJaq8BIeRlSoiEuTJVOud7M4gKsWZzbeWvT6r1GChkFYS5JH3vZ
S0AwkNFjrlVtqbsPVDtQZRcud2c1YwYLeeePX4GRIkrxgTmRR6SNrX0LBBgJpXMq
h5nrFYPotOY1IJMDMz0Yk91h4WejAUIRIvdJojeEAPMBHR0xZWrwPFOALiWGmqaN
WrlezBl+wTMDNFleL8r7KXL60NW2/xuu9dRxjnXA2EQTIzuYOlQSblBPNk6s6/C8
wleUUoGmM3DKHdFA4QOIS7gB54FVeiHrsrlWaB6pwtc/sxna0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4G2d2eUhv3ecX5J6GDXhN4AxeYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYWMzYTEzOTctMTRjOC0z
MWExLThhNGMtNDEwMzA2YmNiYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyMXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSJeDhzDM5HWEKWqPLuHvPgu+ad8QMrS+j/KU5BUvKsEKOWBZHBQZ+F
mkxp0uMmF3nzOI94zUtH8m/zoybVOh2xiLYCuXfOPwZsta6BNUIeGeRbLVAOEfEp
eGfPUEFf/AB0ibDczk5OOsnU5vDyP5LvXF3Usy+13PU75tqrngTsckbyCAixq09+
/HRsc7qS4JD88cKgsjiLDjy3TG3Pjk2MOOU3Wb7FOc+K9EARhm1eYC7jeSAS8UNP
rXu2MZNXfi5Ey/qKVFUolL0/BGqX9J3H6Zs+C574RnrQle3F+71GrNO95FC+oX+t
tedy2qVt2l0ZQdaPD9pL5slXe4tf5pg=
-----END CERTIFICATE-----
Generated at Sat May 18 01:32:37 2024 by rpki-client on console-fra.rpki-client.org