Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f50367f9-adaa-3c59-a480-fa48e1089f00.roa
File:                     f50367f9-adaa-3c59-a480-fa48e1089f00.roa (raw, json)
Hash identifier:          wSOv9gmATYe3g/TP5a+OlvazEEM/ZvKM9GJcIWc66ao=
Subject key identifier:   3F:1F:3E:48:00:EA:E9:51:E9:92:93:07:03:84:74:5E:3A:F3:91:23
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA6EC40B97782BF74FBC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f50367f9-adaa-3c59-a480-fa48e1089f00.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     35911
IP address blocks:        207.35.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a6:ec:40:b9:77:82:bf:74:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=cfc0436f-7b41-40b0-b274-853e5c1c796f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e0:33:98:04:ec:a4:fc:91:d2:69:9e:1b:27:
                    60:f0:23:16:0e:40:62:d9:61:8d:b5:d1:65:2e:bd:
                    87:bb:4e:10:1f:4f:46:a0:d4:f6:8f:6a:f7:66:5b:
                    0c:52:d9:8a:40:53:76:f9:db:22:ad:12:ef:3e:91:
                    53:aa:a8:2e:62:69:50:13:78:98:83:73:58:c7:4d:
                    19:4b:80:61:86:16:1f:ba:22:c1:07:5d:77:bd:a6:
                    22:99:30:b5:23:48:4d:ea:98:60:66:ce:13:52:7e:
                    ac:14:16:e8:62:12:d8:a8:05:f1:8c:84:b3:84:64:
                    3a:17:92:2e:60:99:3d:f1:1a:2f:2e:25:1b:43:c4:
                    66:bf:e4:48:fa:32:bc:1f:b5:47:29:f6:ec:35:a8:
                    eb:34:0e:7a:9a:f0:8c:b3:07:62:11:4f:06:50:43:
                    61:fd:9d:70:6d:c0:e7:36:17:5e:1e:d3:cd:7d:be:
                    99:97:e8:9c:6b:9c:20:48:d5:3a:1c:d1:b9:72:67:
                    e6:67:aa:75:15:88:17:25:30:44:48:59:a0:4d:34:
                    ab:ff:9b:b1:f6:05:15:2a:1e:e1:f3:3d:46:30:88:
                    70:f5:3b:67:1f:52:1c:64:ce:d0:1e:2a:66:0a:25:
                    f5:81:bb:08:62:f6:3a:6b:2b:51:0f:34:cb:4c:ef:
                    a8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1F:3E:48:00:EA:E9:51:E9:92:93:07:03:84:74:5E:3A:F3:91:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f50367f9-adaa-3c59-a480-fa48e1089f00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a3:6d:07:ea:05:83:60:de:2d:ad:bf:c1:2f:be:f3:e2:5a:
         2c:ba:46:28:8e:02:a4:c0:5d:f1:bf:a1:ea:30:18:29:a2:e5:
         de:2f:24:a9:3b:af:2b:85:c9:bc:84:44:84:06:89:52:ca:af:
         38:53:24:fb:77:14:df:88:b8:45:e9:ff:c3:3c:c3:f1:9d:d3:
         13:59:7c:be:82:a6:0b:2e:ed:ea:ff:b5:34:81:42:41:24:61:
         0c:d3:9c:ad:ca:61:77:7a:5e:f9:ef:c9:71:65:fe:86:c4:b8:
         f5:10:ee:51:d7:49:9f:0f:4c:85:39:db:f1:b2:f8:32:fb:c7:
         64:47:62:02:ec:8a:eb:62:d0:85:73:d1:45:9f:eb:c4:1e:ef:
         fc:69:aa:dc:d0:9f:21:84:e2:ac:ac:77:46:7d:04:2f:60:91:
         82:09:a5:29:b0:6b:e9:98:e0:08:74:f0:37:03:a3:49:3a:91:
         bb:5d:ef:89:38:ac:81:6d:52:e8:b5:dc:3d:85:74:4d:9a:f0:
         cd:69:49:f1:35:d8:c4:1f:a5:ee:56:6e:5a:99:c2:5d:4d:bb:
         f5:01:4b:3e:78:5d:8d:a9:fd:af:59:b8:60:75:c3:51:e0:3b:
         ee:05:2f:dc:9c:0d:81:e9:5a:3a:0e:4b:07:36:2f:ea:99:d0:
         76:57:4a:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2qbsQLl3gr90+8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
Y2ZjMDQzNmYtN2I0MS00MGIwLWIyNzQtODUzZTVjMWM3OTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+AzmATspPyR0mmeGydg8CMWDkBi2WGNtdFl
Lr2Hu04QH09GoNT2j2r3ZlsMUtmKQFN2+dsirRLvPpFTqqguYmlQE3iYg3NYx00Z
S4BhhhYfuiLBB113vaYimTC1I0hN6phgZs4TUn6sFBboYhLYqAXxjISzhGQ6F5Iu
YJk98RovLiUbQ8Rmv+RI+jK8H7VHKfbsNajrNA56mvCMswdiEU8GUENh/Z1wbcDn
NhdeHtPNfb6Zl+ica5wgSNU6HNG5cmfmZ6p1FYgXJTBESFmgTTSr/5ux9gUVKh7h
8z1GMIhw9TtnH1IcZM7QHipmCiX1gbsIYvY6aytRDzTLTO+orQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD8fPkgA6ulR6ZKTBwOEdF4685EjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZjUwMzY3ZjktYWRhYS0z
YzU5LWE0ODAtZmE0OGUxMDg5ZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyOgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABujbQfqBYNg3i2tv8EvvvPiWiy6RiiOAqTAXfG/oeowGCmi5d4vJKk7
ryuFybyERIQGiVLKrzhTJPt3FN+IuEXp/8M8w/Gd0xNZfL6Cpgsu7er/tTSBQkEk
YQzTnK3KYXd6XvnvyXFl/obEuPUQ7lHXSZ8PTIU52/Gy+DL7x2RHYgLsiuti0IVz
0UWf68Qe7/xpqtzQnyGE4qysd0Z9BC9gkYIJpSmwa+mY4Ah08DcDo0k6kbtd74k4
rIFtUui13D2FdE2a8M1pSfE12MQfpe5WblqZwl1Nu/UBSz54XY2p/a9ZuGB1w1Hg
O+4FL9ycDYHpWjoOSwc2L+qZ0HZXSmY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:15 2025 by rpki-client