Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6cc89dc5-a296-331f-8d24-bff3f798813e.roa
File:                     6cc89dc5-a296-331f-8d24-bff3f798813e.roa (raw, json)
Hash identifier:          r216V1u7ONLLd3IZZ0HQr1VwgRzf0cp33k/F1r/lo9I=
Subject key identifier:   96:D1:74:F8:C6:8C:5C:35:0B:00:82:2E:1D:69:8B:78:30:2E:1C:57
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858492134509126B2EC41E9C81600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6cc89dc5-a296-331f-8d24-bff3f798813e.roa
Signing time:             Sun 09 Mar 2025 10:20:54 +0000
ROA not before:           Sun 09 Mar 2025 10:20:54 +0000
ROA not after:            Sat 07 Jun 2025 10:20:54 +0000
asID:                     21552
IP address blocks:        207.35.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:50:91:26:b2:ec:41:e9:c8:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:54 2025 GMT
            Not After : Jun  7 10:20:54 2025 GMT
        Subject: CN=41a28a4e-4b7d-4326-b3c1-dd12ec41e096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:4e:ab:1f:fb:6e:b8:95:9a:4c:27:cd:a4:
                    a0:8d:28:55:73:55:96:bf:fe:bd:e2:8b:08:5f:48:
                    04:c1:4d:a5:0e:5f:14:55:a2:3c:b5:2b:ba:86:c9:
                    d8:a0:da:ab:6a:f5:ab:d7:cb:d1:3f:7c:be:c8:23:
                    7b:e7:95:ef:6e:85:a2:fd:b9:e7:04:a0:5e:64:92:
                    dc:4f:05:a5:72:3a:1d:63:81:80:0f:41:7d:c4:1f:
                    58:9b:2b:54:49:ed:f2:ab:ac:b7:83:5a:01:30:3c:
                    e1:93:d0:09:50:95:da:09:30:41:13:74:25:e6:ce:
                    7f:09:97:1f:33:16:63:0d:ec:ec:4a:88:5f:18:f8:
                    53:46:d6:5f:4b:6f:db:d4:c3:75:5b:c9:6c:cc:30:
                    15:64:ff:69:09:27:8a:e0:3e:13:4a:35:6d:2e:56:
                    c5:ba:e7:63:39:a0:83:b6:70:9e:a0:d3:6f:29:f2:
                    83:78:5c:ff:34:57:ea:2c:45:2d:ea:c1:9e:5e:69:
                    12:aa:d6:eb:f7:b3:99:ee:7a:fc:94:96:6c:17:14:
                    05:5e:37:90:32:7a:ea:6a:14:45:e1:41:b1:f7:1a:
                    1e:3f:aa:82:53:fd:c2:6e:b7:db:37:50:e5:eb:7a:
                    d6:03:07:cc:86:f1:57:83:be:fb:9d:06:e9:5d:fc:
                    a6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D1:74:F8:C6:8C:5C:35:0B:00:82:2E:1D:69:8B:78:30:2E:1C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6cc89dc5-a296-331f-8d24-bff3f798813e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:bd:30:fa:fe:da:2f:1e:4e:c8:7f:96:f7:64:f2:08:0f:ff:
         79:9b:82:ef:08:e9:61:e1:0a:4a:9e:80:e0:2c:15:f5:14:56:
         3e:ab:fd:83:b1:d2:26:e4:ac:b4:7e:ac:ae:85:9c:5c:92:fe:
         55:f0:82:b5:53:ec:72:ad:a5:69:5d:46:68:61:2f:16:41:9f:
         25:c2:77:ca:b1:0f:bf:4b:2c:ab:d2:28:df:1b:93:32:0e:f5:
         2d:e2:40:63:b1:ca:79:75:ba:dc:53:17:2a:10:9d:da:d8:80:
         d8:bd:6e:2f:d3:d3:32:b4:5e:88:fb:77:62:b3:0d:34:a8:d1:
         24:55:96:9e:23:e9:ad:50:c1:68:b1:3d:42:db:b8:d2:39:e0:
         a1:9e:d1:59:6f:36:88:1b:98:e4:96:bc:ef:38:29:35:c7:0b:
         8c:c2:e5:95:71:00:4b:47:5a:13:c6:81:fe:d2:2f:90:9a:28:
         3d:d5:50:a9:6f:44:d1:d5:f4:e4:c5:9c:e4:51:b4:17:44:2e:
         8a:3c:1b:bd:71:b4:f5:cc:2a:81:96:b6:a1:d2:20:53:53:e0:
         95:c5:82:36:41:4a:0e:76:b2:f7:20:f2:78:50:8b:ba:f3:0b:
         a4:01:42:fa:05:8d:d9:52:a8:d6:78:cf:04:58:b8:e2:95:80:
         c7:1c:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:23 2025 by rpki-client