Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/49ef1c6c-cd8e-3388-8d67-9505c4b01c40.roa
File:                     49ef1c6c-cd8e-3388-8d67-9505c4b01c40.roa (raw, json)
Hash identifier:          f/cY13H4ITT4PhlRDN8dTmGT6S+PBmCyicF10Rc4Br4=
Subject key identifier:   31:79:4F:53:0A:52:A2:69:4E:33:37:63:D8:38:06:F4:14:0B:E3:37
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA64886E390A316EA8E00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/49ef1c6c-cd8e-3388-8d67-9505c4b01c40.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     19842
IP address blocks:        207.35.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a6:48:86:e3:90:a3:16:ea:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=f9cb24a5-7e5a-44ce-87ad-ca6d3e6600af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:d6:e0:39:24:31:bf:77:a2:21:49:62:d9:
                    71:14:70:8e:f7:e7:ec:c7:1e:cc:e0:0d:57:03:0e:
                    25:7b:2a:03:0b:ae:d3:17:91:ea:17:c7:a2:20:f3:
                    0f:f4:25:c8:85:37:7f:f9:91:ec:45:fd:2f:23:50:
                    3d:e6:8b:18:f7:ad:e6:71:47:c3:27:61:28:ef:14:
                    c4:e8:53:a4:c6:07:0a:ef:35:4f:32:76:af:fc:7d:
                    8f:3c:68:68:65:95:69:ec:f6:8e:b4:ee:29:bf:9a:
                    2f:18:2f:e4:d9:4d:cd:71:2b:ac:51:78:9f:38:97:
                    28:bd:90:31:42:e2:66:60:d6:a8:c5:22:52:5b:37:
                    03:3b:ec:83:20:14:ac:6c:2f:0d:76:46:cd:a3:6e:
                    34:5d:73:5a:aa:3d:98:6f:84:b0:b2:d8:ff:8e:5d:
                    25:43:fb:05:8b:2b:59:16:b6:29:1d:c1:0e:78:7b:
                    95:96:4f:91:bf:6b:e7:9d:2d:22:11:5a:10:1b:09:
                    70:4c:67:a6:b9:e2:63:63:ba:93:f9:ac:df:e4:fb:
                    54:31:56:8c:ac:ac:92:ad:7b:48:3c:f4:a6:95:fc:
                    ab:9c:e8:d1:84:ca:2e:d5:86:73:d4:ab:b0:ec:45:
                    b7:94:2a:a3:0d:0f:51:b5:f7:c5:c4:bd:d6:11:17:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:79:4F:53:0A:52:A2:69:4E:33:37:63:D8:38:06:F4:14:0B:E3:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/49ef1c6c-cd8e-3388-8d67-9505c4b01c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:01:ac:04:10:92:2b:ca:8d:ea:cf:b1:b3:57:6d:22:7c:64:
         b2:92:62:a0:d1:66:a4:3e:43:86:96:92:2b:bd:71:c1:8f:6d:
         8a:a1:3c:3b:5c:cd:f1:24:34:2e:30:21:da:6c:25:84:9c:1b:
         5a:22:1e:07:ac:05:4d:df:6d:da:96:35:3c:6f:d1:1f:08:eb:
         8e:e9:aa:96:5b:cc:0b:8a:0c:9a:d7:71:7e:52:07:85:16:72:
         d0:60:5c:ed:92:4f:e0:6c:53:40:cd:e6:9e:af:35:fd:f5:6e:
         05:88:03:66:33:03:eb:79:50:f3:14:8e:46:fb:22:8c:28:cd:
         fd:3e:b5:7a:8c:4f:d9:69:e2:04:02:44:0f:4e:09:c2:d0:a3:
         af:8c:c8:ee:8f:6b:16:38:e2:e4:1a:12:12:16:16:b6:bd:30:
         d6:50:f3:34:c6:85:7c:31:09:c8:c1:19:37:84:d0:1a:25:69:
         a4:4b:f1:0f:9c:d9:ae:ef:d5:f2:fc:9a:7c:c9:96:e9:38:16:
         1d:1e:2a:3c:0d:1e:42:5b:68:49:d8:b6:d9:60:64:bc:1f:eb:
         05:3d:ca:61:00:03:c7:69:2c:92:a8:e5:74:60:8b:63:32:7b:
         62:6d:48:b2:93:58:93:56:2f:80:89:b2:8d:af:dc:f3:52:36:
         ae:62:40:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:10:33 2025 by rpki-client