Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35665e9c-b5c8-3b11-9c78-b10481ef5d5f.roa
File:                     35665e9c-b5c8-3b11-9c78-b10481ef5d5f.roa (raw, json)
Hash identifier:          r5pLZlkBRgfGxCxqmHn7io8je1UqUiXL5CkMv8TDmf8=
Subject key identifier:   A4:F3:82:01:08:D6:14:0E:06:BF:75:25:9F:76:84:94:35:F5:BB:49
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970938E2E6F0115F74AD20
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35665e9c-b5c8-3b11-9c78-b10481ef5d5f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        206.47.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:09:38:e2:e6:f0:11:5f:74:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=65db68d1-f5ef-4c14-87d2-8506f5e16038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:04:43:e7:fd:a6:02:79:65:e5:d3:cf:52:92:
                    f5:0a:6f:61:8d:ac:43:5a:65:3c:4a:34:3f:29:04:
                    69:6d:62:87:43:bd:f8:71:a3:ac:5a:c7:43:eb:13:
                    b0:25:23:aa:d2:bd:95:5b:53:26:c6:b9:cc:38:34:
                    28:b2:a5:a3:4e:b6:37:14:f2:65:43:79:ef:fb:69:
                    6a:82:98:06:30:8c:9e:92:60:1b:a7:f0:7c:6f:dd:
                    e4:a7:46:54:31:88:1f:45:1c:e6:e9:5a:75:90:bf:
                    d9:56:f3:63:c8:8b:d1:ed:c7:bf:f9:eb:4d:3a:51:
                    7d:85:30:55:aa:07:fa:27:ad:c7:6b:bd:55:39:65:
                    35:c7:fb:96:c2:c9:58:a0:53:7d:ba:70:ea:e3:88:
                    27:2d:da:6a:ff:3c:45:dd:5b:d2:b9:08:3f:41:a3:
                    a0:d7:98:0c:44:4a:5b:98:49:10:a4:f8:01:eb:89:
                    ba:12:38:65:c2:c0:b0:cb:86:0d:95:1b:43:fe:87:
                    94:a9:fd:96:fc:dd:a2:c1:a0:fa:ee:97:44:29:9d:
                    e4:64:96:2d:c7:22:00:26:6e:19:1f:89:5e:2f:ea:
                    7d:c6:27:21:bd:9d:b6:38:20:ae:63:5b:3c:6f:a4:
                    76:f9:ec:0a:c3:85:d5:32:11:65:e8:33:d2:20:8a:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F3:82:01:08:D6:14:0E:06:BF:75:25:9F:76:84:94:35:F5:BB:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35665e9c-b5c8-3b11-9c78-b10481ef5d5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:30:ad:b9:8c:be:fe:5f:d4:24:b9:f5:e4:dd:f8:df:de:cc:
         f4:2b:d0:ed:f5:71:75:9a:dc:d3:59:a2:c6:da:fb:2a:da:62:
         36:7b:6b:4a:06:cb:a6:8a:98:ef:0c:01:49:7a:61:fe:2e:38:
         74:14:41:36:a1:34:c0:85:af:e2:59:71:01:63:55:89:81:e6:
         66:a8:a1:ff:43:82:3e:1d:48:4d:a7:01:75:3f:b4:2a:51:c1:
         64:b1:92:40:4b:46:72:88:d7:94:bb:85:41:80:b3:de:81:d7:
         a7:5b:d8:2c:36:8b:6e:36:25:0b:05:12:8a:5f:ba:47:1e:e5:
         c0:90:da:63:4e:5b:7e:20:f4:d8:24:0b:4e:8e:c6:13:41:1e:
         c2:96:f8:ac:dc:87:a7:e0:56:00:fc:28:5c:9b:5f:3d:e9:ca:
         db:40:5e:8c:a6:f3:f0:51:9d:7e:80:57:ab:17:79:d7:e2:9a:
         26:44:e9:b2:6d:56:77:e6:a7:d1:0a:a0:b2:56:59:b1:37:42:
         ac:29:71:c7:79:39:1f:52:55:4f:84:07:a8:95:d0:39:f7:45:
         7e:87:02:08:6a:df:07:d7:75:7a:25:70:1a:ff:db:91:a1:d7:
         ca:b9:81:62:8a:49:e9:9d:85:38:bc:a7:25:91:4f:67:0e:a3:
         b7:de:35:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlwk44ubwEV90rSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
NjVkYjY4ZDEtZjVlZi00YzE0LTg3ZDItODUwNmY1ZTE2MDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwRD5/2mAnll5dPPUpL1Cm9hjaxDWmU8SjQ/
KQRpbWKHQ734caOsWsdD6xOwJSOq0r2VW1MmxrnMODQosqWjTrY3FPJlQ3nv+2lq
gpgGMIyekmAbp/B8b93kp0ZUMYgfRRzm6Vp1kL/ZVvNjyIvR7ce/+etNOlF9hTBV
qgf6J63Ha71VOWU1x/uWwslYoFN9unDq44gnLdpq/zxF3VvSuQg/QaOg15gMREpb
mEkQpPgB64m6EjhlwsCwy4YNlRtD/oeUqf2W/N2iwaD67pdEKZ3kZJYtxyIAJm4Z
H4leL+p9xichvZ22OCCuY1s8b6R2+ewKw4XVMhFl6DPSIIoq7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKTzggEI1hQOBr91JZ92hJQ19btJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMzU2NjVlOWMtYjVjOC0z
YjExLTljNzgtYjEwNDgxZWY1ZDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi+xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0wrbmMvv5f1CS59eTd+N/ezPQr0O31cXWa3NNZosba+yraYjZ7a0oG
y6aKmO8MAUl6Yf4uOHQUQTahNMCFr+JZcQFjVYmB5maoof9Dgj4dSE2nAXU/tCpR
wWSxkkBLRnKI15S7hUGAs96B16db2Cw2i242JQsFEopfukce5cCQ2mNOW34g9Ngk
C06OxhNBHsKW+Kzch6fgVgD8KFybXz3pyttAXoym8/BRnX6AV6sXedfimiZE6bJt
Vnfmp9EKoLJWWbE3Qqwpccd5OR9SVU+EB6iV0Dn3RX6HAghq3wfXdXolcBr/25Gh
18q5gWKKSemdhTi8pyWRT2cOo7feNUg=
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:28 2025 by rpki-client