Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35ee0666-6dea-3125-9a51-66566b488b04.roa
File:                     35ee0666-6dea-3125-9a51-66566b488b04.roa (raw, json)
Hash identifier:          wIWmE3KCG4CPOLQR1Nu+E3jJmgosqoLgHShzhkPiovc=
Subject key identifier:   46:B1:ED:5A:61:2B:A9:10:32:EE:87:2D:63:9A:F2:2C:3C:12:FC:F6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10CBB455C5B43A098E7080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35ee0666-6dea-3125-9a51-66566b488b04.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     21723
IP address blocks:        207.35.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:cb:b4:55:c5:b4:3a:09:8e:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=b55956d8-cd54-40a2-9ed2-6bc8367c7528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:f3:48:f4:aa:e6:8f:a8:03:c9:29:41:6e:
                    a3:7e:49:bf:64:1b:a7:68:6d:3a:a8:39:02:b7:96:
                    a9:ab:1b:a7:82:ff:1e:cf:04:7b:0a:6d:7b:4f:b1:
                    e9:37:90:22:10:87:e0:e1:8e:39:fd:3f:17:15:2f:
                    43:b9:89:0f:29:4b:b2:da:be:aa:a4:cc:18:4d:b3:
                    18:69:84:dd:b2:42:8a:bb:fd:df:6f:bb:db:13:0c:
                    7c:b2:bc:fa:fe:c5:99:d7:7b:45:96:61:13:05:93:
                    c0:37:d6:67:65:a0:a1:6d:4e:0e:3b:4b:ed:15:ce:
                    a1:e1:f3:9a:d8:ff:bf:c7:cb:e6:b0:cd:e1:73:71:
                    cc:1d:1a:38:fa:6a:99:b6:89:f7:bb:34:aa:ec:cb:
                    01:b9:46:b2:d1:77:43:9e:ac:ea:1a:4e:a2:44:1d:
                    af:1a:6c:51:0f:35:20:72:b5:e8:23:64:4c:37:54:
                    81:0c:9a:f7:5a:7d:d4:66:b4:e0:90:2e:30:3f:7c:
                    07:25:49:91:e8:f4:b5:a4:be:36:c1:dc:fe:12:76:
                    e4:15:06:6a:5c:e3:ab:82:ac:bd:d9:7a:20:e9:a9:
                    fc:07:17:9d:62:62:8d:d1:2d:0d:e5:9f:61:86:1d:
                    78:c3:31:bb:f3:e4:ae:49:f8:bb:8d:ad:8f:7c:a2:
                    0d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B1:ED:5A:61:2B:A9:10:32:EE:87:2D:63:9A:F2:2C:3C:12:FC:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35ee0666-6dea-3125-9a51-66566b488b04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:62:57:db:87:98:32:88:9c:a9:56:92:43:44:50:c6:63:68:
         42:5b:b1:24:d4:58:aa:df:4d:81:6c:11:d4:8d:10:5c:c7:1e:
         6a:18:53:6f:71:96:1d:b3:f6:53:e1:67:ba:5b:12:85:82:0e:
         9a:21:a3:4c:10:b7:c8:e4:e5:b4:99:4b:45:ac:77:64:4a:fe:
         87:46:d7:38:44:90:17:0b:14:1b:62:68:ae:38:9e:db:b7:7a:
         a6:f7:45:35:7f:d5:24:07:43:97:13:ce:c0:82:fc:31:79:d1:
         00:14:b9:02:fe:a9:8f:b1:00:db:09:aa:5f:c0:e2:af:26:c2:
         7c:9f:3d:50:a1:02:5d:ee:ab:8d:37:fd:df:f6:75:e3:91:ba:
         65:fe:b1:89:06:f0:18:f5:57:11:53:ab:1c:5d:96:16:d2:bb:
         46:22:ed:bb:54:45:f7:b1:3e:54:57:d0:46:77:05:c1:f0:3c:
         46:9b:61:19:89:e8:bb:35:5e:fc:d4:67:43:0b:b2:b4:13:86:
         23:dd:e6:b3:25:32:00:9e:17:47:96:a5:fa:c2:af:a8:a4:80:
         61:44:a2:9a:16:fe:d7:41:ed:83:6c:1f:e6:c3:f8:96:d6:0f:
         b5:37:7b:d8:48:3a:e2:52:c6:c5:73:2b:1c:32:d9:52:26:1d:
         e2:1b:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org