Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/477f454e-6a8c-3897-b376-915b41864437.roa
File:                     477f454e-6a8c-3897-b376-915b41864437.roa (raw, json)
Hash identifier:          c7+a1hfwXFPxGuPdJCXPtQbpW98dmUiQCNdnSRtgsPc=
Subject key identifier:   C8:FA:67:57:2D:5C:CC:E8:92:6E:00:A6:99:32:C8:84:22:51:E2:4A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B4E1EA8A8086E153EF8F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/477f454e-6a8c-3897-b376-915b41864437.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     4540
IP address blocks:        207.35.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:e1:ea:8a:80:86:e1:53:ef:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=187bfe9a-6ff6-4b6e-a6b3-70708226cc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:6c:78:0f:ea:0b:39:65:e6:a4:78:bd:de:
                    d9:2b:27:e4:cc:2d:ae:d3:9e:da:14:c6:1d:a1:ff:
                    d5:ea:48:8a:f9:6b:80:5e:45:1a:4b:03:8d:ff:86:
                    07:0b:6a:7a:f7:e3:3f:76:48:e7:07:73:5f:44:a1:
                    89:75:af:ed:6e:8e:e1:fc:eb:70:c6:77:71:6e:af:
                    5c:dc:2a:4c:a4:b0:87:6b:de:b8:e5:f2:15:15:94:
                    0d:70:46:41:7a:fc:6b:10:b8:73:13:86:fe:60:59:
                    20:66:2c:b0:50:91:42:60:fe:6d:0c:dd:8e:e3:bf:
                    59:cf:1c:8b:3f:13:c3:44:dd:58:df:a5:ef:62:ef:
                    c6:e2:ef:29:2c:72:dd:8c:f9:c1:54:95:1b:6a:d1:
                    47:36:76:89:a5:09:c8:e1:f4:cf:91:3c:31:b0:2f:
                    12:c3:a0:e5:41:2e:93:6d:d4:5b:aa:5d:c5:99:1b:
                    4a:56:ee:98:96:f6:7c:bc:7c:48:53:3d:cb:93:70:
                    de:e9:a9:bb:cf:a9:84:5f:24:bf:96:ce:1d:73:be:
                    4e:88:0f:8c:a7:70:57:90:17:ea:ad:79:46:0c:e6:
                    8d:ab:46:c7:51:73:19:5a:31:a5:9f:dd:0a:6d:c8:
                    86:13:84:f5:53:34:f2:f8:1b:2d:2e:f4:ec:c1:e2:
                    39:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FA:67:57:2D:5C:CC:E8:92:6E:00:A6:99:32:C8:84:22:51:E2:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/477f454e-6a8c-3897-b376-915b41864437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d5:5f:ad:b2:57:3f:be:c4:d5:fd:4c:3c:eb:31:e5:fb:bf:
         fe:df:49:2a:74:67:2a:48:14:c2:78:62:09:49:6f:0a:c3:1b:
         4d:04:11:38:c7:77:f3:21:4d:6e:61:74:59:24:ba:2e:dd:a5:
         54:41:0f:09:77:a7:8a:99:7e:86:66:4d:5a:fc:14:e1:bb:06:
         4f:7b:79:87:d0:c8:77:b6:f2:dd:40:dc:15:dc:c8:04:cc:84:
         1e:e1:6d:b6:39:c6:35:74:b4:c9:75:77:a3:af:06:0c:e4:b7:
         c1:bf:8e:50:c5:f8:b1:75:ec:9c:a0:36:f5:bb:6d:b0:cf:1a:
         85:00:57:1f:17:db:92:9b:2e:cb:45:dc:b9:8e:6d:bd:91:fc:
         14:c6:f6:72:7e:04:21:08:63:48:30:47:52:0c:ef:f9:e2:12:
         11:42:c2:ae:49:87:de:80:05:18:a6:70:64:15:37:12:c4:c5:
         2e:b4:22:8d:13:48:c0:56:e2:36:05:c3:ae:25:68:c6:a9:73:
         fd:70:6c:28:f1:c4:e6:99:bb:af:8f:56:13:fc:99:0c:44:51:
         26:61:3f:71:6e:b1:60:89:d4:06:04:7d:f2:ae:dc:f5:ae:44:
         41:1b:7c:86:f8:81:18:35:17:38:f5:9c:33:fc:3c:8a:c3:bd:
         8f:e2:f5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:59 2024 by rpki-client on console-fra.rpki-client.org