Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6cc89dc5-a296-331f-8d24-bff3f798813e.roa
File:                     6cc89dc5-a296-331f-8d24-bff3f798813e.roa (raw, json)
Hash identifier:          a5us6kpJ0EQRod5sOE52rLU+gSUrOa+cZvLPr31DMI0=
Subject key identifier:   5B:68:68:DC:4B:04:1A:B0:74:27:3F:1D:4F:B5:58:F7:C6:5E:9D:A9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970F85217A1A45AE8EFB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6cc89dc5-a296-331f-8d24-bff3f798813e.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     21552
IP address blocks:        207.35.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:0f:85:21:7a:1a:45:ae:8e:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=1ecbe575-21f2-4ea5-b896-4ff7e17fcfca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:e8:e6:40:0f:ed:c5:13:98:98:d9:fb:08:
                    2a:fc:b9:30:8a:33:38:2d:30:71:f5:ff:76:9a:da:
                    e0:f8:fd:f8:da:d0:be:77:aa:65:7f:f2:4b:ad:ea:
                    fc:fe:06:30:f4:c7:7e:5d:f9:74:2e:9f:43:3f:65:
                    91:2d:a4:95:11:f5:36:5f:2c:a3:9f:74:76:2f:09:
                    42:e9:f7:a6:69:78:4e:02:53:8a:4d:3a:2f:83:a0:
                    b1:8e:20:80:4b:c6:a2:b2:97:9b:83:41:b9:8a:3d:
                    f7:8a:54:11:aa:4a:7f:4c:f4:8b:97:5a:41:3e:76:
                    98:a1:bd:d6:be:c2:ce:c3:65:80:7f:2b:d7:fd:4d:
                    97:24:8c:b1:2b:05:03:77:bb:df:82:83:13:0d:6d:
                    f5:a3:71:e3:f1:57:2f:c3:77:7b:05:d7:2b:cc:14:
                    b6:29:70:fb:5c:94:45:ff:23:da:e1:77:61:6e:7c:
                    d9:ce:dc:35:2a:1c:76:ae:e8:2b:5e:9f:61:4e:87:
                    7d:2a:ce:a9:f5:15:93:98:f5:17:93:ea:36:fd:d1:
                    02:a9:c9:44:2d:ce:10:75:d9:43:08:47:d1:88:33:
                    c7:a3:e4:22:b1:b4:e6:ce:3b:c1:89:0e:48:6b:dc:
                    99:dd:c4:01:9f:86:5b:ee:af:64:d0:0c:db:e8:45:
                    01:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:68:68:DC:4B:04:1A:B0:74:27:3F:1D:4F:B5:58:F7:C6:5E:9D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6cc89dc5-a296-331f-8d24-bff3f798813e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:19:cc:7e:ce:7f:c8:30:97:ea:02:dd:66:e4:0e:83:7c:f3:
         11:ed:e8:87:79:ae:31:cb:87:7f:6c:5e:1a:f9:11:84:fb:11:
         b3:86:69:3a:66:54:6c:11:14:37:5c:21:f5:65:d7:b9:62:52:
         7d:de:a4:5f:c7:a0:13:19:96:c3:d6:f7:05:02:5e:9c:b7:7d:
         91:93:77:a3:1e:d7:37:48:10:1e:e3:6f:ef:9b:87:61:ef:1c:
         af:95:e2:4b:13:bd:05:d7:66:15:eb:d0:49:7d:96:56:c2:4c:
         f5:1b:7f:57:c8:95:79:21:b8:e0:47:55:c0:dd:b7:d6:10:30:
         63:7c:11:da:34:d3:65:aa:1e:12:e5:f7:42:e7:19:d6:52:96:
         07:7a:d2:61:eb:d8:0f:0c:cc:46:b9:5a:61:c5:0f:d0:1c:1d:
         07:e3:2e:74:8d:b9:ec:29:a9:09:3b:24:fc:df:56:7a:3c:aa:
         f6:94:3a:9e:3b:0e:b1:3f:ed:9f:88:3d:12:62:fa:fe:cf:34:
         03:cf:ba:44:5a:47:d9:d7:df:cc:83:f5:e8:06:69:d7:d0:fc:
         d8:09:af:3e:bc:14:03:b2:bc:ce:11:aa:ab:69:4a:db:bd:53:
         51:ea:a5:b1:ed:65:16:6d:89:a0:14:92:d5:82:62:93:6a:5a:
         4a:e0:0a:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlw+FIXoaRa6O+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
MWVjYmU1NzUtMjFmMi00ZWE1LWI4OTYtNGZmN2UxN2ZjZmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOLo5kAP7cUTmJjZ+wgq/LkwijM4LTBx9f92
mtrg+P342tC+d6plf/JLrer8/gYw9Md+Xfl0Lp9DP2WRLaSVEfU2Xyyjn3R2LwlC
6femaXhOAlOKTTovg6CxjiCAS8aispebg0G5ij33ilQRqkp/TPSLl1pBPnaYob3W
vsLOw2WAfyvX/U2XJIyxKwUDd7vfgoMTDW31o3Hj8Vcvw3d7BdcrzBS2KXD7XJRF
/yPa4XdhbnzZztw1Khx2rugrXp9hTod9Ks6p9RWTmPUXk+o2/dECqclELc4QddlD
CEfRiDPHo+QisbTmzjvBiQ5Ia9yZ3cQBn4Zb7q9k0Azb6EUBPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtoaNxLBBqwdCc/HU+1WPfGXp2pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNmNjODlkYzUtYTI5Ni0z
MzFmLThkMjQtYmZmM2Y3OTg4MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyMXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkZzH7Of8gwl+oC3WbkDoN88xHt6Id5rjHLh39sXhr5EYT7EbOGaTpm
VGwRFDdcIfVl17liUn3epF/HoBMZlsPW9wUCXpy3fZGTd6Me1zdIEB7jb++bh2Hv
HK+V4ksTvQXXZhXr0El9llbCTPUbf1fIlXkhuOBHVcDdt9YQMGN8Edo002WqHhLl
90LnGdZSlgd60mHr2A8MzEa5WmHFD9AcHQfjLnSNuewpqQk7JPzfVno8qvaUOp47
DrE/7Z+IPRJi+v7PNAPPukRaR9nX38yD9egGadfQ/NgJrz68FAOyvM4RqqtpStu9
U1HqpbHtZRZtiaAUktWCYpNqWkrgCrw=
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:17 2025 by rpki-client