Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f9412b4-0099-3656-b05a-17e3d79ee408.roa
File:                     2f9412b4-0099-3656-b05a-17e3d79ee408.roa (raw, json)
Hash identifier:          CB+DJU+gspcU1Gnh6VA2jG6/esIj/dpRt+OuyHXxvPU=
Subject key identifier:   09:99:1B:40:1B:48:06:CA:E5:24:46:8D:2F:41:0B:44:9A:32:01:6A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA708F8B436F6920022C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f9412b4-0099-3656-b05a-17e3d79ee408.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        207.35.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a7:08:f8:b4:36:f6:92:00:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=294dd3d6-e0a6-44bd-a9e1-6e566fd086a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:f7:b8:9f:c5:8f:22:e9:bc:e2:75:e9:10:
                    10:42:fd:23:07:dd:ed:35:13:69:4e:42:a0:8f:34:
                    c5:b0:f6:1e:6b:44:c9:b1:b0:ce:b8:d1:97:f7:09:
                    8a:14:0a:c5:94:a2:69:6c:8e:ed:4e:d7:d9:83:21:
                    c2:6b:45:7d:8b:15:5b:86:26:d7:94:6a:6b:52:fa:
                    26:55:bc:cf:fa:20:c5:af:39:14:6d:a6:e4:91:b1:
                    d2:c5:c3:9b:4f:97:2d:f0:e5:35:d0:80:23:e4:9f:
                    c1:c3:da:76:44:65:49:11:de:b3:a0:61:84:47:7f:
                    75:f4:f4:fd:0d:9f:85:cb:63:56:9d:43:97:b7:6d:
                    56:64:4a:83:d2:39:eb:17:09:a3:b0:08:17:1d:6a:
                    1a:cd:b7:58:06:51:9f:30:04:a7:7d:39:07:77:f5:
                    aa:6b:a5:cd:2b:2a:3e:42:7b:e1:77:0e:19:57:cd:
                    c6:11:d3:9f:02:18:b3:79:35:92:bb:24:07:12:ce:
                    37:43:5a:63:ee:8f:04:e1:67:17:68:d1:78:b1:a9:
                    9f:e8:69:50:fc:5a:eb:6a:0b:9d:2a:7f:e7:f3:d3:
                    ce:97:f3:8d:20:c8:04:ce:fa:a1:bf:0a:3c:1f:47:
                    fa:6f:fa:fd:39:69:33:6f:b3:5b:e4:7f:9a:a9:13:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:99:1B:40:1B:48:06:CA:E5:24:46:8D:2F:41:0B:44:9A:32:01:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f9412b4-0099-3656-b05a-17e3d79ee408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:30:bd:29:da:6e:f9:bb:72:75:7e:58:1f:ce:55:f9:6b:a1:
         cb:2f:71:cd:22:8f:5f:0f:bd:98:ac:61:60:1f:7a:bf:ec:4e:
         3b:61:94:59:ca:90:01:87:f1:bc:58:90:c6:1d:b0:9a:89:cb:
         18:dc:2b:2c:bd:21:9f:34:ec:45:06:2c:6d:da:00:4a:b7:e0:
         84:d0:7d:7c:06:d1:0e:a6:d2:45:25:48:2e:12:0b:a1:9e:b5:
         da:f5:cb:e4:4a:80:30:f3:45:12:5f:9c:0e:c8:a3:a0:a0:79:
         a7:51:24:49:25:9c:19:7e:2b:48:a8:69:69:5a:af:5c:92:44:
         a0:95:a7:44:be:a2:f0:f6:64:47:16:ce:cb:c3:de:20:cc:8d:
         40:0f:a2:e4:b0:e2:5b:0b:cf:09:cb:fa:b9:3c:c8:5e:be:b4:
         6c:32:c2:2f:c5:57:9d:cb:23:92:dd:9f:f0:a9:22:8b:77:25:
         e3:a2:d7:fd:a6:26:86:3e:3c:ee:1d:df:03:34:f7:b2:42:5b:
         dd:14:c7:3c:16:22:34:90:a8:d0:ed:5c:31:8d:df:d7:57:27:
         76:dc:60:9f:cf:c3:82:af:bb:b9:7e:84:25:5a:73:87:77:15:
         36:a0:32:0b:40:42:b1:7a:57:93:80:0b:5d:ac:ca:7b:21:02:
         fd:de:44:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:48:48 2025 by rpki-client