Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/92d66eb8-87d0-3516-b034-8a4520c54d26.roa
File:                     92d66eb8-87d0-3516-b034-8a4520c54d26.roa (raw, json)
Hash identifier:          Mud+evvtzcdKauy0Yoam0PjzfBUMHIYY2yUgoH9tHmg=
Subject key identifier:   BF:2C:92:E1:7D:1C:1E:B5:74:13:88:FE:34:E6:DC:A1:6B:D1:2B:72
Certificate issuer:       /CN=35a72605-99bc-4c4b-995e-c01a3684dcbf
Certificate serial:       010D0C9F43285849287E6A8309755E5ECA281C80
Authority key identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/92d66eb8-87d0-3516-b034-8a4520c54d26.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     203020
IP address blocks:        23.129.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:6a:83:09:75:5e:5e:ca:28:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a72605-99bc-4c4b-995e-c01a3684dcbf
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=7d584590-b10d-4c2f-9621-950b9332ef66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ac:96:97:be:c7:7c:7d:92:e3:14:07:08:c4:
                    44:32:22:d4:e1:ce:c1:3a:83:5a:06:13:ea:bd:47:
                    2e:02:d5:d7:1d:55:40:14:80:48:15:1b:f8:8f:86:
                    6c:f8:82:6b:f2:29:52:fa:f4:35:a9:5f:31:bb:7f:
                    c3:9e:9d:9b:fb:26:3d:59:d7:dc:50:47:d5:6e:a0:
                    0c:f8:44:87:6b:ba:52:39:ef:6c:c6:6f:01:ce:87:
                    d0:ed:4d:bd:38:3a:aa:7d:59:c4:73:31:fd:ec:7c:
                    61:c6:1f:16:92:62:97:2e:c4:77:cf:c0:2f:31:88:
                    e9:d4:98:c7:87:67:c2:c0:fb:e2:ca:69:6f:6f:44:
                    e6:f9:32:1b:1f:55:06:96:44:00:a4:87:e4:f6:d5:
                    64:8b:37:7f:da:91:eb:ad:c5:36:9e:39:09:5f:b2:
                    a1:19:92:45:9e:e9:33:8d:0a:35:6d:05:49:44:db:
                    d1:be:da:2f:fc:c8:05:79:7f:88:e2:35:83:b3:ea:
                    93:5c:62:d8:a1:e3:e8:87:f7:92:41:69:ed:3e:f3:
                    2a:f5:bd:d4:74:03:b9:f5:f6:a4:14:f8:2b:49:8a:
                    8c:da:02:fd:71:01:97:74:57:bd:12:5a:ad:2d:9e:
                    dc:a9:3f:47:7f:e2:6b:d9:5d:6b:51:6c:e7:d9:45:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2C:92:E1:7D:1C:1E:B5:74:13:88:FE:34:E6:DC:A1:6B:D1:2B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/92d66eb8-87d0-3516-b034-8a4520c54d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl

            X509v3 Authority Key Identifier:
                keyid:9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6e:34:dc:e5:a5:db:73:e3:05:f2:de:b2:d3:c6:fc:69:63:
         07:01:c3:68:8e:85:ab:b4:6e:de:69:10:4e:e7:af:ab:b7:cb:
         ee:e2:44:8a:96:a0:e3:e9:47:38:9c:0d:b5:41:ce:46:44:4f:
         44:e4:57:b3:73:04:d8:2b:d0:9a:aa:af:89:b0:47:f6:24:39:
         bc:79:3d:09:26:95:8b:9f:d2:2c:05:07:eb:5e:1b:22:72:4f:
         c5:43:42:fd:48:01:8b:e9:f1:7f:39:70:1e:b7:2f:d0:81:29:
         22:c5:59:8b:8e:66:32:64:14:ce:13:7c:fe:6f:f6:9b:d1:ab:
         67:41:09:53:7c:60:74:b7:0f:9f:b6:12:9b:8f:16:bb:e1:43:
         97:d9:2a:25:a1:1d:cf:e8:ae:4b:c7:99:ed:13:d3:a4:58:5d:
         a6:d7:5e:3b:27:af:86:27:c7:28:e3:33:ad:c0:83:a2:6a:3e:
         85:bc:09:15:91:0a:dd:28:1b:80:d6:4a:59:22:c2:0e:f7:70:
         9a:45:93:31:d9:a8:2d:26:36:a7:31:73:cf:5b:e2:38:db:f5:
         2b:e5:64:37:ca:9b:d8:d6:ba:01:c3:54:0b:56:89:e3:2c:06:
         6f:8c:f9:74:f8:dc:34:89:73:ff:16:a3:13:c0:d1:9a:0f:c6:
         f6:ef:f2:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmqDCXVeXsooHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVhNzI2MDUtOTliYy00YzRiLTk5NWUtYzAxYTM2ODRk
Y2JmMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk
N2Q1ODQ1OTAtYjEwZC00YzJmLTk2MjEtOTUwYjkzMzJlZjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKyWl77HfH2S4xQHCMREMiLU4c7BOoNaBhPq
vUcuAtXXHVVAFIBIFRv4j4Zs+IJr8ilS+vQ1qV8xu3/Dnp2b+yY9WdfcUEfVbqAM
+ESHa7pSOe9sxm8BzofQ7U29ODqqfVnEczH97Hxhxh8WkmKXLsR3z8AvMYjp1JjH
h2fCwPviymlvb0Tm+TIbH1UGlkQApIfk9tVkizd/2pHrrcU2njkJX7KhGZJFnukz
jQo1bQVJRNvRvtov/MgFeX+I4jWDs+qTXGLYoePoh/eSQWntPvMq9b3UdAO59fak
FPgrSYqM2gL9cQGXdFe9ElqtLZ7cqT9Hf+Jr2V1rUWzn2UVlNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL8skuF9HB61dBOI/jTm3KFr0StyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3
MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFhMzY4NGRjYmYvOTJkNjZlYjgtODdkMC0z
NTE2LWIwMzQtOGE0NTIwYzU0ZDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVhNzI2MDUtOTliYy00YzRiLTk5
NWUtYzAxYTM2ODRkY2JmLzM1YTcyNjA1LTk5YmMtNGM0Yi05OTVlLWMwMWEzNjg0
ZGNiZi5jcmwwHwYDVR0jBBgwFoAUnSedZlfExijXDhO+lc06f9crhFAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFh
MzY4NGRjYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF4H4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNuNNzlpdtz4wXy3rLTxvxpYwcBw2iOhau0bt5pEE7nr6u3y+7iRIqW
oOPpRzicDbVBzkZET0TkV7NzBNgr0Jqqr4mwR/YkObx5PQkmlYuf0iwFB+teGyJy
T8VDQv1IAYvp8X85cB63L9CBKSLFWYuOZjJkFM4TfP5v9pvRq2dBCVN8YHS3D5+2
EpuPFrvhQ5fZKiWhHc/orkvHme0T06RYXabXXjsnr4YnxyjjM63Ag6JqPoW8CRWR
Ct0oG4DWSlkiwg73cJpFkzHZqC0mNqcxc89b4jjb9SvlZDfKm9jWugHDVAtWieMs
Bm+M+XT43DSJc/8WoxPA0ZoPxvbv8tg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:40 2025 by rpki-client