Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46c2c2d7-44b6-3313-a439-afb5da70842f.roa
File:                     46c2c2d7-44b6-3313-a439-afb5da70842f.roa (raw, json)
Hash identifier:          uekE5VllPA2apqL1aX0dJjqDJPcU8feNUndQWeX8hOQ=
Subject key identifier:   22:6B:54:F5:44:39:20:84:BA:85:20:FE:5D:68:AF:77:7D:AA:64:33
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213450290D709F84BC12C5F2
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46c2c2d7-44b6-3313-a439-afb5da70842f.roa
Signing time:             Sun 09 Mar 2025 10:20:54 +0000
ROA not before:           Sun 09 Mar 2025 10:20:54 +0000
ROA not after:            Sat 07 Jun 2025 10:20:54 +0000
asID:                     21552
IP address blocks:        207.35.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:50:29:0d:70:9f:84:bc:12:c5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:54 2025 GMT
            Not After : Jun  7 10:20:54 2025 GMT
        Subject: CN=7be61a7a-2964-4d6f-b2fe-c91c621f886f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:62:eb:69:82:eb:73:c9:da:af:d0:1b:fa:28:
                    03:2e:af:28:d1:f7:d2:7d:42:77:74:74:4f:0c:e3:
                    d3:c7:39:43:98:0e:5e:51:17:81:88:23:e8:50:f0:
                    75:40:a4:f4:79:05:bc:ae:12:d3:c6:59:41:9f:47:
                    d6:ab:88:23:df:29:4a:97:46:da:37:07:cc:b2:c0:
                    d1:a5:c8:a6:2b:d9:ba:25:0e:18:57:4e:97:da:55:
                    25:ac:e3:90:d6:aa:04:cd:7c:44:42:41:b0:5a:14:
                    22:21:ca:59:28:43:ac:7e:d3:22:b7:3f:12:18:e0:
                    e8:e8:3c:11:27:4e:15:62:02:22:9f:d2:4d:7e:6a:
                    d2:52:b8:e3:be:f3:28:43:aa:ba:99:fe:d4:c7:fb:
                    c6:cf:bb:54:36:95:18:01:8d:4c:8c:17:1f:8a:12:
                    25:0c:7f:71:2a:e8:da:3e:4f:7e:ff:03:8f:57:45:
                    e0:be:c4:3c:21:90:fc:3d:4d:7b:23:6e:8c:3a:ec:
                    b2:8f:d1:0d:27:4b:cc:c4:68:76:9d:8c:bb:6a:cd:
                    cc:da:94:9b:3a:4d:53:c2:9b:2e:90:31:e1:6d:f1:
                    a7:82:58:fc:41:58:2b:ff:80:fe:08:41:ec:9c:23:
                    66:70:9b:22:48:82:e7:3f:75:cd:ea:58:2c:20:ff:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6B:54:F5:44:39:20:84:BA:85:20:FE:5D:68:AF:77:7D:AA:64:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46c2c2d7-44b6-3313-a439-afb5da70842f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:73:2e:17:57:bf:0a:0e:05:96:96:9d:75:47:27:a2:4f:65:
         b0:d8:1a:40:05:fe:23:06:01:1e:de:1e:54:ce:6e:61:c8:8d:
         85:f1:63:17:24:d4:fd:f1:c6:42:fe:48:22:0b:17:e1:e7:c9:
         a2:af:2c:a1:a5:d0:9f:68:71:ad:6c:1c:aa:15:13:d0:9c:29:
         7c:0a:fa:90:e6:d5:7d:0e:5f:07:c3:53:85:ce:2d:98:22:96:
         d4:26:07:c2:36:a3:37:92:4a:ab:94:9f:e9:b3:a2:d0:b9:2f:
         c8:ea:ad:18:19:bc:03:9e:66:25:38:56:18:59:70:58:ba:a5:
         45:b2:39:e2:c4:60:e3:2e:04:ae:d5:53:c9:2d:b3:de:ab:2f:
         b4:fd:1e:11:40:e9:f6:e6:e5:59:50:d8:26:a6:94:ff:7e:6b:
         dd:4f:fc:d0:88:6f:1c:92:e6:cd:53:7e:8a:82:9c:cd:1f:ac:
         0c:4b:1a:61:bf:c1:c1:61:7d:ce:d3:ca:2c:2e:23:7e:e4:f4:
         67:74:66:d2:94:0a:5e:86:f5:a0:72:8e:a8:32:f6:11:36:07:
         79:df:b3:41:a8:86:60:83:a6:9a:2b:a2:ef:90:0f:58:60:82:
         85:74:d1:5b:9f:44:dc:e2:17:00:fc:04:4b:d8:a4:d7:d2:7b:
         9b:32:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:51:00 2025 by rpki-client