Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/972257f6-53b1-3388-bb62-7e784ea5b728.roa
File:                     972257f6-53b1-3388-bb62-7e784ea5b728.roa (raw, json)
Hash identifier:          geIKP31f3+5isJUOM86ETRPgc/8rV9pditEycoJlpV0=
Subject key identifier:   54:DF:EA:E7:BC:9A:D1:FB:B0:6B:B8:81:D0:A7:62:DD:F8:65:09:AE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1967B6A0720CDF0EE04C800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/972257f6-53b1-3388-bb62-7e784ea5b728.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     21723
IP address blocks:        207.35.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:7b:6a:07:20:cd:f0:ee:04:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=3aaa3157-63ae-437a-9d33-bbd0d1fd0db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:5e:ea:4d:76:fc:5d:62:7c:ff:96:d2:96:
                    ea:14:bb:41:d2:22:cc:a9:b8:8a:07:0b:99:78:75:
                    f9:2d:10:05:4f:a3:20:31:07:77:34:c3:6c:99:f9:
                    ce:c8:3a:88:97:b9:7f:ff:ef:bc:9b:f2:11:bb:a1:
                    e4:d1:cd:52:dd:8c:87:fb:2c:e8:4d:dc:e6:4a:89:
                    40:0e:ed:65:ff:b5:c7:c6:51:14:e1:8c:1f:28:e3:
                    ec:28:74:8d:70:ca:83:d7:20:ae:fb:a6:dc:c2:82:
                    1c:b6:0d:17:7a:93:ce:20:b8:bf:9c:f2:3b:e3:bf:
                    6e:91:06:ed:aa:61:cb:e4:fe:b7:47:4d:cb:9f:ca:
                    46:72:5d:dc:42:79:a6:bf:5a:09:f0:7f:40:64:c7:
                    f7:e4:ca:66:8c:d6:33:1e:f1:70:ef:04:04:db:88:
                    6e:90:98:e7:1d:45:79:73:fc:0b:42:8e:ba:51:d2:
                    21:aa:2a:1c:2a:eb:90:3b:d5:27:d1:d2:80:f7:82:
                    e4:db:53:bf:7c:c9:41:54:8b:ef:ba:33:ce:c5:bf:
                    77:6c:51:c3:98:70:c2:8d:94:3a:74:5a:ee:83:fd:
                    f4:ae:31:f2:02:01:8c:49:9f:01:ad:72:e9:f1:30:
                    f3:ff:e9:5e:d7:fd:a3:7c:a9:37:20:98:e7:92:57:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DF:EA:E7:BC:9A:D1:FB:B0:6B:B8:81:D0:A7:62:DD:F8:65:09:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/972257f6-53b1-3388-bb62-7e784ea5b728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2d:17:7a:d2:51:e1:9a:ce:9d:74:37:19:95:6e:a7:5e:3a:
         73:94:da:31:59:57:7e:a4:26:60:2a:24:d2:39:ac:ee:ca:6d:
         f2:a9:32:36:6f:da:b9:e0:24:4e:78:5a:52:97:77:c8:fc:f6:
         2c:ef:dd:8f:ec:4f:0a:4e:58:2a:95:34:54:18:b5:bb:c4:31:
         0e:17:bf:c5:5c:92:d9:3d:93:cf:c2:90:44:ae:40:07:4a:c2:
         c7:e4:82:82:eb:79:ef:c4:3d:61:66:88:34:7c:7a:ca:2d:0a:
         80:e1:59:59:10:1c:3d:51:7a:c8:ba:c3:d0:5b:a2:92:27:a4:
         2e:f3:27:19:68:4f:ed:cb:9c:09:20:20:5d:5e:fa:c7:14:39:
         66:a8:35:7c:d5:e6:54:d9:17:2b:1a:b0:39:5d:1f:88:cb:e7:
         64:cf:67:9c:81:af:d0:9d:fa:3e:d7:92:1a:48:f3:ce:cd:83:
         fa:37:f9:bb:77:2a:56:06:48:d6:f2:b7:f7:38:c8:2e:dc:4f:
         49:1e:95:6a:da:46:69:8d:b2:4f:44:b6:a3:8c:70:54:88:13:
         18:3b:57:d0:86:ef:c5:8e:42:b5:c6:7a:7e:92:18:04:4c:8b:
         69:9e:fc:02:e0:b6:27:01:ce:db:6a:80:fe:22:1c:75:e3:fa:
         e7:c3:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:14:47 2025 by rpki-client