Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/4069fe48-9a8a-313a-a323-cc2a49626f35.roa
File:                     4069fe48-9a8a-313a-a323-cc2a49626f35.roa (raw, json)
Hash identifier:          IE2iCzjDkTcrIGhXUkQhpn7IT1xDWJR/hmvplma1Tgk=
Subject key identifier:   68:A8:B2:47:4D:A3:EA:99:8C:C5:5F:81:A3:FD:EB:5C:B7:45:79:DC
Certificate issuer:       /CN=5eb94df3-be39-4e1b-b39a-730deb2999f1
Certificate serial:       010D0C9F43285848F65BF5025619AF6F695BF700
Authority key identifier: AA:71:C0:14:37:F4:47:E4:FA:73:5F:AD:CB:90:70:E0:C1:56:66:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/4069fe48-9a8a-313a-a323-cc2a49626f35.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     32768
IP address blocks:        23.29.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/5eb94df3-be39-4e1b-b39a-730deb2999f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/5eb94df3-be39-4e1b-b39a-730deb2999f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:f5:02:56:19:af:6f:69:5b:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb94df3-be39-4e1b-b39a-730deb2999f1
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=053d5508-a72f-4544-ba4d-bca3b8c15d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f3:2f:28:f6:b0:28:98:99:ae:6e:cc:9a:9c:
                    4b:ba:e6:39:ac:3a:99:8e:19:58:e8:3a:ab:41:5e:
                    16:28:79:cf:36:f0:69:dc:30:75:9a:10:62:bb:7b:
                    0e:42:40:77:ca:84:6a:51:c9:91:69:0b:f4:bc:4f:
                    a8:97:92:bb:c6:07:3a:2b:9e:d7:32:53:88:51:3c:
                    0a:b6:79:08:eb:99:44:74:54:77:c2:b1:ba:90:e3:
                    68:09:59:4c:54:ef:1e:78:37:e2:9e:38:ba:3f:e2:
                    8b:19:a3:d9:99:8e:be:ae:7a:50:43:2f:58:92:cc:
                    bf:03:60:86:c1:98:77:7a:41:e9:d6:05:2c:e0:cf:
                    18:0d:4a:8d:b4:41:23:59:23:94:65:b4:b2:74:4a:
                    e6:be:4e:54:39:66:02:73:45:6c:64:0e:71:af:b1:
                    85:66:69:4a:1c:cc:c7:c0:f6:fd:39:4f:60:c0:ec:
                    bf:e4:7a:d1:d3:29:a3:5a:d6:a5:43:7a:7b:ef:d4:
                    e5:58:5e:13:83:e4:6d:4d:74:4a:28:e2:f7:17:ae:
                    30:89:ef:8d:a5:83:5d:1b:b3:9d:d8:0a:28:a3:74:
                    3e:0d:9b:0e:77:8d:fa:19:a6:2d:87:a6:c4:2c:53:
                    84:95:b2:45:bf:fa:8b:c4:d7:30:1c:53:56:e2:43:
                    da:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A8:B2:47:4D:A3:EA:99:8C:C5:5F:81:A3:FD:EB:5C:B7:45:79:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/4069fe48-9a8a-313a-a323-cc2a49626f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/5eb94df3-be39-4e1b-b39a-730deb2999f1.crl

            X509v3 Authority Key Identifier:
                keyid:AA:71:C0:14:37:F4:47:E4:FA:73:5F:AD:CB:90:70:E0:C1:56:66:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.29.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:52:bf:4a:90:4a:6e:c6:cf:78:9c:8c:9c:42:fb:52:2f:19:
         45:c1:f0:ee:c7:c5:cb:11:08:a7:a0:2f:8e:24:cc:ff:9f:f9:
         4f:df:ce:81:e8:6b:6b:47:5c:6c:d7:83:be:82:dc:45:8e:b1:
         c8:83:22:03:e6:42:e8:6c:25:40:6f:8b:70:73:0c:8f:1b:ef:
         e2:3c:86:42:57:23:94:fe:eb:59:3b:21:0b:3e:67:ff:b5:26:
         e1:f0:b5:42:9e:9e:4e:9b:78:b8:13:11:98:d7:c0:9d:3f:cd:
         6e:c3:19:05:8a:2f:a0:05:6a:1d:14:3f:f1:ff:35:72:6c:e5:
         90:98:9f:c2:36:b4:bb:8f:33:cf:5c:60:f2:29:72:2f:d8:c2:
         7b:89:8f:58:5b:84:9f:9d:6d:df:bb:1c:10:01:e0:cb:21:e0:
         f2:c5:d9:9b:45:1a:52:6a:f7:97:07:32:74:06:3d:c9:9a:9d:
         37:b3:05:42:28:1d:fb:56:49:0d:be:00:b4:56:50:4d:d8:9c:
         79:60:13:1c:2e:72:d7:3f:37:96:e9:a6:5c:82:c3:9b:1a:e5:
         46:3a:cc:30:70:9d:b7:62:23:e7:f4:b1:3b:20:91:73:3d:74:
         e6:a9:bc:84:05:63:31:9c:ba:00:c1:94:e9:71:e6:27:d5:7f:
         f0:7a:d2:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/UCVhmvb2lb9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWViOTRkZjMtYmUzOS00ZTFiLWIzOWEtNzMwZGViMjk5
OWYxMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
MDUzZDU1MDgtYTcyZi00NTQ0LWJhNGQtYmNhM2I4YzE1ZDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvMvKPawKJiZrm7MmpxLuuY5rDqZjhlY6Dqr
QV4WKHnPNvBp3DB1mhBiu3sOQkB3yoRqUcmRaQv0vE+ol5K7xgc6K57XMlOIUTwK
tnkI65lEdFR3wrG6kONoCVlMVO8eeDfinji6P+KLGaPZmY6+rnpQQy9Yksy/A2CG
wZh3ekHp1gUs4M8YDUqNtEEjWSOUZbSydErmvk5UOWYCc0VsZA5xr7GFZmlKHMzH
wPb9OU9gwOy/5HrR0ymjWtalQ3p779TlWF4Tg+RtTXRKKOL3F64wie+NpYNdG7Od
2Aooo3Q+DZsOd436GaYth6bELFOElbJFv/qLxNcwHFNW4kPaJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGioskdNo+qZjMVfgaP961y3RXncMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZWI5
NGRmMy1iZTM5LTRlMWItYjM5YS03MzBkZWIyOTk5ZjEvNDA2OWZlNDgtOWE4YS0z
MTNhLWEzMjMtY2MyYTQ5NjI2ZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWViOTRkZjMtYmUzOS00ZTFiLWIz
OWEtNzMwZGViMjk5OWYxLzVlYjk0ZGYzLWJlMzktNGUxYi1iMzlhLTczMGRlYjI5
OTlmMS5jcmwwHwYDVR0jBBgwFoAUqnHAFDf0R+T6c1+ty5Bw4MFWZqEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZWI5NGRmMy1iZTM5LTRlMWItYjM5YS03MzBk
ZWIyOTk5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFx1QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRSv0qQSm7Gz3icjJxC+1IvGUXB8O7HxcsRCKegL44kzP+f+U/fzoHo
a2tHXGzXg76C3EWOsciDIgPmQuhsJUBvi3BzDI8b7+I8hkJXI5T+61k7IQs+Z/+1
JuHwtUKenk6beLgTEZjXwJ0/zW7DGQWKL6AFah0UP/H/NXJs5ZCYn8I2tLuPM89c
YPIpci/YwnuJj1hbhJ+dbd+7HBAB4Msh4PLF2ZtFGlJq95cHMnQGPcmanTezBUIo
HftWSQ2+ALRWUE3YnHlgExwuctc/N5bpplyCw5sa5UY6zDBwnbdiI+f0sTsgkXM9
dOapvIQFYzGcugDBlOlx5ifVf/B60jA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:28 2025 by rpki-client