Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18e5c480-faf3-329d-b08f-a45b15e6ec65.roa
File:                     18e5c480-faf3-329d-b08f-a45b15e6ec65.roa (raw, json)
Hash identifier:          jPbGhLcAaxZhjyPnkBxH1baR63IR2bNUVIg/7fn099k=
Subject key identifier:   FD:14:D2:F6:01:15:D8:8F:9E:5D:61:62:94:DF:0B:FE:71:E3:51:CD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B4D6B5BBEA52352C526500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18e5c480-faf3-329d-b08f-a45b15e6ec65.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        207.35.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:d6:b5:bb:ea:52:35:2c:52:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=e1f0097b-9ee6-4ec8-944d-3ca4244c3742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:14:cf:1c:84:21:a9:0b:72:cb:d9:3a:2b:
                    1f:ff:be:dd:c1:97:34:19:52:f2:b8:7d:f2:e0:4d:
                    01:ca:7b:bc:c8:b2:bc:b9:3b:39:75:d0:98:fa:6e:
                    3f:23:c9:31:8c:e5:18:1d:c4:c6:c7:6b:7c:97:1b:
                    e3:0f:e8:69:dc:d3:47:1c:61:34:e8:fd:c7:d7:b9:
                    67:52:51:9f:5e:58:e4:58:f7:ef:e1:4f:c6:02:a6:
                    5b:dc:54:e3:bd:0f:84:42:10:3f:79:35:a0:0b:46:
                    80:1a:8b:a2:ab:6f:39:60:34:9f:4a:df:3e:20:95:
                    06:d5:e2:ea:84:b5:2f:f4:b5:4f:5d:e0:80:ea:86:
                    b1:e9:74:6a:58:65:93:e2:15:4f:70:62:58:83:36:
                    c5:48:2f:73:79:0a:8a:11:06:a2:db:7e:48:be:a1:
                    53:d2:6a:34:a6:26:ab:59:e8:e2:bc:22:73:7d:90:
                    2e:ae:83:44:74:98:92:a7:49:ca:8d:8a:cf:6a:93:
                    d0:78:86:56:87:81:3f:05:7a:be:90:ad:16:df:0d:
                    2a:60:7b:1d:63:83:b1:26:9d:d4:bc:ad:1b:17:87:
                    f8:1e:b5:63:1f:51:36:c4:32:b8:0d:72:f9:06:3d:
                    bb:0c:89:db:23:f9:06:3a:2f:7f:7c:f1:26:5e:1a:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:14:D2:F6:01:15:D8:8F:9E:5D:61:62:94:DF:0B:FE:71:E3:51:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18e5c480-faf3-329d-b08f-a45b15e6ec65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f9:0e:02:02:44:08:9c:8e:2a:4c:76:f2:86:0d:f7:16:48:
         67:13:43:7a:d8:04:69:cc:d1:14:c9:63:fd:77:0f:ad:24:3c:
         38:95:50:ba:eb:de:7a:95:06:cd:d6:25:0f:4d:25:2e:db:97:
         fa:76:76:c5:7f:fb:1f:a4:15:2c:16:1d:c3:d7:91:6b:7c:a4:
         cb:14:9e:e9:17:23:1c:67:e6:0e:36:34:c6:42:c4:35:72:22:
         65:d4:5f:a1:b5:52:a4:63:66:f3:95:98:6a:95:da:43:98:e7:
         4c:fc:e5:c7:a7:ea:d6:e3:ff:0e:09:15:29:ff:8a:d4:7f:28:
         e9:f1:3c:ef:c6:b3:20:c3:62:ec:af:32:51:3a:57:3b:99:09:
         cc:46:ea:a2:bf:62:64:4c:e6:0f:72:6a:b4:b1:9c:84:53:69:
         a7:a3:e5:8e:64:bc:77:82:a1:94:5b:fb:53:62:6d:1f:e3:b3:
         14:ed:60:39:f3:0b:3d:c7:3e:61:c0:4c:c0:70:7b:90:c7:a0:
         53:69:1c:88:64:7e:32:6e:c4:2b:00:6d:5e:ca:9c:3d:3b:8e:
         08:4e:79:45:dc:d9:40:e4:a8:64:2e:5c:0c:db:bd:9b:98:6b:
         16:1f:9f:13:61:f2:29:e0:b9:70:31:67:69:20:39:53:40:a8:
         1a:dd:48:4b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVWtNa1u+pSNSxSZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTFmMDA5N2ItOWVlNi00ZWM4LTk0NGQtM2NhNDI0NGMzNzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUoUzxyEIakLcsvZOisf/77dwZc0GVLyuH3y
4E0Bynu8yLK8uTs5ddCY+m4/I8kxjOUYHcTGx2t8lxvjD+hp3NNHHGE06P3H17ln
UlGfXljkWPfv4U/GAqZb3FTjvQ+EQhA/eTWgC0aAGouiq285YDSfSt8+IJUG1eLq
hLUv9LVPXeCA6oax6XRqWGWT4hVPcGJYgzbFSC9zeQqKEQai235IvqFT0mo0piar
WejivCJzfZAuroNEdJiSp0nKjYrPapPQeIZWh4E/BXq+kK0W3w0qYHsdY4OxJp3U
vK0bF4f4HrVjH1E2xDK4DXL5Bj27DInbI/kGOi9/fPEmXhpDQwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP0U0vYBFdiPnl1hYpTfC/5x41HNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMThlNWM0ODAtZmFmMy0z
MjlkLWIwOGYtYTQ1YjE1ZTZlYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzyMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIfkOAgJECJyOKkx28oYN9xZIZxNDetgEaczRFMlj/XcPrSQ8OJVQuuve
epUGzdYlD00lLtuX+nZ2xX/7H6QVLBYdw9eRa3ykyxSe6RcjHGfmDjY0xkLENXIi
ZdRfobVSpGNm85WYapXaQ5jnTPzlx6fq1uP/DgkVKf+K1H8o6fE878azIMNi7K8y
UTpXO5kJzEbqor9iZEzmD3JqtLGchFNpp6PljmS8d4KhlFv7U2JtH+OzFO1gOfML
Pcc+YcBMwHB7kMegU2kciGR+Mm7EKwBtXsqcPTuOCE55RdzZQOSoZC5cDNu9m5hr
Fh+fE2HyKeC5cDFnaSA5U0CoGt1ISw==
-----END CERTIFICATE-----
Generated at Sat May 18 15:26:53 2024 by rpki-client on console-fra.rpki-client.org