Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/78bd543a-9f02-31fb-8127-8515f4f9fc06.roa
File:                     78bd543a-9f02-31fb-8127-8515f4f9fc06.roa (raw, json)
Hash identifier:          rAaTPWmk7SEAiO+jX/nUmINvKkrjocTMqLamWCFiJPg=
Subject key identifier:   56:0D:09:DF:EC:67:FE:57:37:56:C5:B5:F3:E0:F7:26:8E:40:3D:F7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213450FFC38FF0A72ECDFB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/78bd543a-9f02-31fb-8127-8515f4f9fc06.roa
Signing time:             Sun 09 Mar 2025 10:20:55 +0000
ROA not before:           Sun 09 Mar 2025 10:20:55 +0000
ROA not after:            Sat 07 Jun 2025 10:20:55 +0000
asID:                     16532
IP address blocks:        207.35.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:50:ff:c3:8f:f0:a7:2e:cd:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:55 2025 GMT
            Not After : Jun  7 10:20:55 2025 GMT
        Subject: CN=47d92be5-8ec6-48d4-854b-aa5f6260da3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:65:be:31:92:f1:48:e0:a7:1d:67:3a:18:a5:
                    0e:86:e7:cf:45:b3:70:db:fc:f5:9b:dd:7f:b9:ed:
                    40:5d:fc:c7:c5:b8:64:76:c1:1b:51:c7:c7:68:26:
                    3b:25:ac:d9:89:1c:fa:fc:c9:45:6b:5d:17:e2:18:
                    80:5a:cd:ca:84:57:f4:9e:25:d2:06:09:56:96:1a:
                    46:62:ec:18:88:79:1d:52:90:b5:95:0e:48:ef:1b:
                    37:86:69:f4:da:db:d1:c5:23:52:91:4c:48:41:96:
                    31:36:70:e5:a4:6e:5f:f4:40:09:82:f7:58:b1:32:
                    43:dc:00:8d:95:c8:c2:f9:2f:2c:a3:ea:62:4b:70:
                    a6:b7:61:7a:c7:cb:9d:01:8d:de:db:34:41:cc:fd:
                    b6:0a:22:f0:e9:92:51:f0:dc:02:f5:78:84:11:72:
                    4a:ae:6a:d7:c0:c7:ae:6a:1b:37:05:50:b1:4e:f1:
                    8a:bc:69:d6:e9:d3:61:71:e8:7d:5b:a3:37:00:44:
                    7d:6e:8a:19:42:6a:6d:89:b2:19:cd:6c:43:d1:cd:
                    cc:e6:7b:ee:de:0f:20:fe:06:4c:7d:71:f2:ff:a3:
                    69:f6:02:ea:f2:62:b8:0c:97:67:90:ca:5c:2f:68:
                    4d:fa:6a:4d:e2:3a:a0:91:44:7d:53:45:2c:c3:c5:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0D:09:DF:EC:67:FE:57:37:56:C5:B5:F3:E0:F7:26:8E:40:3D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/78bd543a-9f02-31fb-8127-8515f4f9fc06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ad:2b:66:3a:49:9d:9f:da:8e:e9:73:70:8a:23:e7:ae:bd:
         9f:24:05:8e:62:36:07:dc:12:50:29:71:78:68:6e:1b:27:4c:
         b3:a6:b5:ba:e0:c5:ab:03:61:1e:90:bc:b0:76:1c:0c:95:94:
         67:1d:64:aa:dd:92:98:8e:27:ac:94:dc:d9:8f:b7:6e:a9:34:
         e8:cc:21:2f:fb:94:6d:31:97:e9:45:fb:50:34:d1:ee:18:7c:
         7e:55:4b:35:26:2d:1d:2e:ac:b8:b0:06:a2:0a:69:e8:c5:42:
         91:09:62:f1:18:28:56:88:a2:d2:20:a7:64:fa:94:e7:bd:8f:
         82:ad:60:de:9b:cf:dd:9c:5a:89:d0:03:65:44:73:e1:b9:66:
         2a:a3:b1:eb:b6:ad:a4:c6:ea:05:9c:8f:40:93:1a:47:e4:00:
         4e:00:ec:6f:ea:d6:49:45:a1:49:36:6d:4c:5a:44:54:7a:30:
         67:3d:0a:53:92:7b:36:bf:8e:23:8a:dc:19:84:98:3a:80:3c:
         1a:b0:4e:14:eb:50:f7:5b:47:4a:07:95:d5:c6:7b:e4:5f:d9:
         4e:ea:ae:68:1b:b2:3c:37:5e:75:b5:6c:b3:fd:a4:f3:f6:a8:
         4f:71:78:3a:b6:c9:13:d1:fc:4e:45:8d:43:bf:f9:7b:6d:9d:
         e7:1d:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:25 2025 by rpki-client