Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02cc187b-c7bc-3a68-be7a-8a5fcd8b0c61.roa
File:                     02cc187b-c7bc-3a68-be7a-8a5fcd8b0c61.roa (raw, json)
Hash identifier:          xA5FmzLcBZujoPdmPicb50IWpa9rcxvwNwLgEGzZ6z4=
Subject key identifier:   56:8A:D4:AA:ED:E8:BA:CA:32:85:32:14:13:9B:AF:0C:F8:58:D4:FB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA6595A54BA6B79DD8380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02cc187b-c7bc-3a68-be7a-8a5fcd8b0c61.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     21552
IP address blocks:        207.35.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a6:59:5a:54:ba:6b:79:dd:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=22d32445-f462-4c51-a7d5-9bcf24c0a62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:1d:72:c8:fb:0a:f4:01:9e:41:f6:91:d0:
                    ea:f4:9a:77:18:1b:05:db:17:c5:88:08:e6:96:8a:
                    59:df:0d:f3:06:54:62:ab:5b:ed:84:db:6a:bf:dc:
                    bc:8b:0c:90:39:0a:c8:f0:1f:a3:55:d2:48:0b:02:
                    c9:fe:d2:8f:80:9f:47:0e:dd:9e:f7:e2:75:3e:ff:
                    86:54:18:31:80:f5:98:94:c6:81:f6:9b:ba:31:a6:
                    69:f7:8e:a9:14:01:ef:21:b3:c3:85:7a:62:24:ef:
                    81:14:66:af:75:e3:38:dc:ba:fa:4f:7c:ef:24:32:
                    da:9b:55:bb:61:d2:8a:98:c2:9f:20:92:3e:60:c6:
                    e1:6b:b4:40:85:fe:3a:42:ba:ae:25:c6:e3:5c:23:
                    45:a7:0d:1c:5c:56:61:0c:38:62:28:18:b8:46:59:
                    e0:3a:b0:f0:d6:eb:b4:1e:36:6b:c9:58:2c:c6:e3:
                    72:ae:b1:fb:3b:db:46:12:96:ae:d9:4b:29:26:52:
                    0c:8f:bb:f2:da:f7:22:72:51:b3:f6:23:fc:7b:4f:
                    8f:3b:a7:b5:77:3c:b8:5d:0e:53:a7:7a:1a:f7:dd:
                    7d:c3:3f:b9:e3:30:06:e8:6a:9f:01:d2:3d:09:c2:
                    55:81:be:e0:4e:23:c8:2d:59:98:b1:cf:80:e6:c0:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8A:D4:AA:ED:E8:BA:CA:32:85:32:14:13:9B:AF:0C:F8:58:D4:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/02cc187b-c7bc-3a68-be7a-8a5fcd8b0c61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f5:73:90:b1:60:99:51:4e:2e:66:54:d4:43:7a:d0:4a:02:
         9d:f5:66:e2:e2:1a:0e:e9:97:a3:0b:8a:4a:0d:3e:64:df:97:
         bf:9e:fe:c8:09:e7:22:dd:29:16:d5:04:84:40:c6:7d:51:59:
         bf:be:37:b4:c8:6e:41:19:7b:92:02:8a:f6:57:24:aa:6e:32:
         0d:ab:37:ae:5e:d2:98:33:c0:b9:9a:64:91:16:72:6e:ef:d2:
         0d:d7:fb:de:0d:57:69:43:63:40:68:0e:35:56:b1:a4:ec:42:
         b0:21:f2:b0:34:10:04:1d:c3:74:51:89:9b:ca:01:6a:ed:2a:
         0a:c9:e9:56:35:6d:e4:43:2e:02:d0:df:89:d7:1f:51:2f:8d:
         c5:de:09:9c:2d:6b:36:ff:77:55:10:14:7d:4f:41:d4:1c:ac:
         d2:46:cf:02:89:2e:51:55:0e:1c:81:39:67:e8:77:fe:dd:4e:
         5b:80:34:7f:a0:b1:28:54:0c:f1:0e:87:5a:1f:df:2f:75:18:
         2e:3b:67:28:07:b1:4f:1e:81:ce:99:ba:5d:60:6e:c9:76:63:
         29:0a:22:85:fd:c3:8f:28:aa:df:a5:dd:66:3f:17:95:c9:75:
         04:61:ba:92:81:61:d5:4a:69:ae:10:bf:12:85:20:29:7e:d7:
         2c:6f:93:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:04:15 2025 by rpki-client