Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f797bfd8-c314-333c-8050-442d888e309b.roa
File:                     f797bfd8-c314-333c-8050-442d888e309b.roa (raw, json)
Hash identifier:          +NYMfvEbRnpob9JVlOHINaySvhKjtAGnWY7qtyiS5+0=
Subject key identifier:   1E:9D:74:AB:E3:FD:34:3F:51:46:EA:A1:BC:CE:3E:78:58:FC:B6:6F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970CDCC23633E3B48D3240
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f797bfd8-c314-333c-8050-442d888e309b.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     4540
IP address blocks:        207.35.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:0c:dc:c2:36:33:e3:b4:8d:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=e0bf9b75-5241-4a78-822d-b08834b76e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:80:b9:5e:74:d0:d4:28:08:46:8e:b3:bc:16:
                    5f:9d:9d:5f:00:7c:11:49:17:7c:7e:c0:4f:45:25:
                    d0:ad:e7:5d:83:52:19:c9:ce:24:7f:58:21:d8:39:
                    f5:8b:5b:5a:7a:2c:94:9e:5d:eb:5a:68:18:7f:b9:
                    ac:5e:43:06:6d:12:7c:fd:c4:ae:50:64:6d:47:d1:
                    82:60:2e:8c:09:f9:8a:7f:b9:b8:4d:59:d9:c6:89:
                    1a:de:3e:b6:b2:b2:32:96:dc:fd:7c:0c:57:01:54:
                    28:38:89:a1:81:62:92:cf:2a:dc:5e:6b:d5:87:ab:
                    ee:c0:bd:8b:ee:17:91:5f:f6:9f:7b:3c:da:78:7c:
                    bd:4b:51:10:22:bc:3d:b4:9a:5e:d6:6e:2a:f3:00:
                    17:8a:37:64:ad:73:5e:ea:c4:1b:97:f5:09:6e:08:
                    07:45:83:21:17:0d:19:fc:63:96:a6:16:52:24:7d:
                    f8:40:ac:93:08:35:9a:dd:6c:98:0f:00:ed:3e:32:
                    0b:bb:ab:c8:78:49:96:c2:35:e4:29:88:9f:41:01:
                    e3:17:af:64:4a:7c:11:0d:08:fb:03:f3:a1:8c:ce:
                    dd:a5:e0:ca:80:a0:89:9a:85:0b:11:e6:3e:73:98:
                    b7:18:24:e9:b6:03:ff:75:cf:3f:cb:20:c2:ec:f2:
                    da:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9D:74:AB:E3:FD:34:3F:51:46:EA:A1:BC:CE:3E:78:58:FC:B6:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f797bfd8-c314-333c-8050-442d888e309b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:5e:7f:5f:11:bc:47:57:a6:cb:f5:1e:9e:b6:81:28:1f:55:
         cc:b2:98:0f:82:86:3e:9d:53:ff:4c:64:19:32:0f:f9:ec:a7:
         b1:d9:fa:35:ed:ce:98:c6:6d:eb:6a:51:eb:b3:61:9b:27:39:
         4d:0c:99:44:85:b4:a3:9c:b2:95:0f:a2:47:b5:09:1a:f1:01:
         bf:82:38:da:a7:32:ef:b0:e5:b0:24:4f:2f:52:6c:8e:fa:58:
         17:12:8a:e4:49:4f:69:45:f1:2d:d6:03:a9:d6:8f:42:fb:f1:
         98:79:7b:b2:02:0d:8d:54:b4:09:4b:73:da:30:ee:03:4a:8f:
         c2:20:9a:bf:2e:11:4b:8b:84:90:a6:a1:a7:d1:bc:ce:93:09:
         db:16:71:d3:a4:32:0f:19:76:ee:d4:c6:13:ab:aa:f1:55:10:
         67:f3:cc:12:65:c1:d5:03:f1:7c:8d:ea:70:d3:f2:f3:c6:7f:
         ee:5d:75:8c:72:2d:bf:6c:74:8e:2e:3e:9e:02:b1:20:78:b5:
         66:3e:d1:be:bb:75:a6:e2:fb:6f:21:be:5c:e6:0c:e4:d5:8f:
         de:4e:8b:1c:6e:e3:46:ca:0c:b3:ac:c5:3c:c5:d8:e5:25:c6:
         10:cb:db:69:3e:fd:4d:87:3e:11:a7:0b:1e:f0:10:9f:94:e9:
         a5:66:cc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:00:03 2025 by rpki-client