Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f5c2204a-c798-3685-8995-a2829476ac78.roa
File:                     f5c2204a-c798-3685-8995-a2829476ac78.roa (raw, json)
Hash identifier:          k49hedwZTuJKGTisELEfTiYDp8mKbqOENJiQoTy9FSk=
Subject key identifier:   4B:20:B7:07:7C:E8:A8:8D:39:FA:D3:09:43:63:40:03:D0:61:A4:1F
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F43285847AA068F8C612D011249CD6800
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f5c2204a-c798-3685-8995-a2829476ac78.roa
Signing time:             Sat 26 Oct 2024 01:00:31 +0000
ROA not before:           Sat 26 Oct 2024 01:00:31 +0000
ROA not after:            Fri 24 Jan 2025 02:00:31 +0000
asID:                     46606
IP address blocks:        72.22.92.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:aa:06:8f:8c:61:2d:01:12:49:cd:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Oct 26 01:00:31 2024 GMT
            Not After : Jan 24 02:00:31 2025 GMT
        Subject: CN=527500ed-e808-46ed-88b0-60efe961a53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6b:e5:05:17:4d:4c:bd:58:1e:73:45:68:50:
                    4c:98:67:ef:70:fb:a3:b4:b8:46:47:51:9a:ac:5f:
                    d3:d2:c7:c0:27:1b:bc:23:03:20:9d:5a:c3:95:76:
                    fd:33:dc:e8:1d:62:82:e5:bf:62:60:c1:c5:59:87:
                    e8:0d:8b:60:f0:a2:52:74:a5:79:5d:0c:04:a5:ef:
                    de:ec:a3:1f:4a:87:a1:61:3b:dd:a7:21:1d:89:a0:
                    83:17:9a:8d:a3:99:c7:f7:e4:b7:0d:e3:a7:eb:86:
                    eb:63:bd:21:78:dd:22:2c:71:a7:9d:44:67:31:58:
                    ff:76:22:f9:bb:68:eb:70:7a:17:c7:a0:c1:51:d7:
                    4b:65:58:1c:50:9c:d6:30:43:b2:cc:89:38:3e:3c:
                    2a:cd:a6:db:d8:5b:ad:f7:a8:c6:2a:34:92:4c:11:
                    21:d6:6c:04:73:00:9c:4c:03:28:31:0f:77:91:cf:
                    6e:c8:e0:71:b8:26:69:8a:45:7c:d8:4c:93:eb:8c:
                    f5:e1:91:5e:46:11:a4:29:13:87:01:8c:cd:a6:a2:
                    46:60:13:04:0f:b7:2f:c2:ba:49:47:d8:38:d0:fc:
                    18:2e:5c:73:74:13:40:fd:72:dd:fc:04:d0:5a:0f:
                    a2:e7:eb:25:fa:40:ac:a0:1e:cc:ec:6e:3d:e2:a0:
                    80:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:20:B7:07:7C:E8:A8:8D:39:FA:D3:09:43:63:40:03:D0:61:A4:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f5c2204a-c798-3685-8995-a2829476ac78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b9:c6:4e:b1:8c:4e:d4:9c:b0:ee:91:bd:59:5d:bf:ce:64:
         30:24:ca:f2:51:fc:2d:7e:1f:3f:7a:86:44:63:9f:28:c5:d8:
         15:e1:ce:05:95:ad:41:8e:89:b1:a0:64:53:a3:6e:df:5b:e8:
         ee:bd:e0:a0:89:42:bb:50:3c:47:ed:60:66:ab:7c:0f:f4:0c:
         0b:ee:9b:d6:1a:81:0d:bc:9f:c4:80:e0:4b:63:a0:ea:58:37:
         c9:54:44:c3:6c:cd:17:12:b1:95:5f:25:7c:5b:c2:8c:89:39:
         65:d5:f5:a2:ef:9e:a0:f4:c2:14:27:2f:aa:d4:65:f0:0d:5d:
         5c:3e:48:8e:f6:13:dc:57:2f:ca:c0:44:28:7c:5c:93:53:f2:
         b0:1b:ba:4a:cb:1c:c3:89:19:88:4a:03:6f:0c:c8:17:7f:34:
         53:23:ce:d2:fb:a5:de:7e:ae:0e:6c:6f:c7:99:b8:40:9f:a3:
         8a:0e:b3:64:21:ab:fc:5f:f9:c9:e8:c9:4c:57:e6:d2:14:54:
         7a:cb:77:07:93:d6:1c:ec:8a:7a:6b:89:0c:55:40:5c:ce:c2:
         6e:41:64:c4:83:b8:87:bd:cd:17:99:5c:2f:f4:ea:ef:b0:cb:
         df:6f:b3:fc:35:7f:9b:9f:35:f5:61:42:de:17:83:31:95:85:
         e3:6a:12:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeqBo+MYS0BEknNaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi
MDhlMB4XDTI0MTAyNjAxMDAzMVoXDTI1MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk
NTI3NTAwZWQtZTgwOC00NmVkLTg4YjAtNjBlZmU5NjFhNTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmvlBRdNTL1YHnNFaFBMmGfvcPujtLhGR1Ga
rF/T0sfAJxu8IwMgnVrDlXb9M9zoHWKC5b9iYMHFWYfoDYtg8KJSdKV5XQwEpe/e
7KMfSoehYTvdpyEdiaCDF5qNo5nH9+S3DeOn64brY70heN0iLHGnnURnMVj/diL5
u2jrcHoXx6DBUddLZVgcUJzWMEOyzIk4Pjwqzabb2Fut96jGKjSSTBEh1mwEcwCc
TAMoMQ93kc9uyOBxuCZpikV82EyT64z14ZFeRhGkKROHAYzNpqJGYBMED7cvwrpJ
R9g40PwYLlxzdBNA/XLd/ATQWg+i5+sl+kCsoB7M7G494qCAQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEsgtwd86KiNOfrTCUNjQAPQYaQfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz
Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvZjVjMjIwNGEtYzc5OC0z
Njg1LTg5OTUtYTI4Mjk0NzZhYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1
ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy
YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4
MTU2MmIwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBZcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+5xk6xjE7UnLDukb1ZXb/OZDAkyvJR/C1+Hz96hkRjnyjF2BXhzgWV
rUGOibGgZFOjbt9b6O694KCJQrtQPEftYGarfA/0DAvum9YagQ28n8SA4EtjoOpY
N8lURMNszRcSsZVfJXxbwoyJOWXV9aLvnqD0whQnL6rUZfANXVw+SI72E9xXL8rA
RCh8XJNT8rAbukrLHMOJGYhKA28MyBd/NFMjztL7pd5+rg5sb8eZuECfo4oOs2Qh
q/xf+cnoyUxX5tIUVHrLdweT1hzsinpriQxVQFzOwm5BZMSDuIe9zReZXC/06u+w
y99vs/w1f5ufNfVhQt4XgzGVheNqEp8=
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:25 2024 by rpki-client on console-ams.rpki-client.org