Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/29db5299-ae20-3cbd-85ad-8843897ba2a8.roa
File:                     29db5299-ae20-3cbd-85ad-8843897ba2a8.roa (raw, json)
Hash identifier:          H3ommNDvZiZaZh2m6TQ+5acs4TaFog9bvlKrwAKFsoQ=
Subject key identifier:   E0:9B:2D:57:5B:87:55:90:A0:63:FA:9E:9D:8E:5C:A4:B1:B3:2C:D0
Certificate issuer:       /CN=69df89b1-6446-4f76-b802-330eeb5819c6
Certificate serial:       010D0C9F43285849350E99D96058E3CC6CE2EB80
Authority key identifier: 3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/29db5299-ae20-3cbd-85ad-8843897ba2a8.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     1706
IP address blocks:        192.12.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:99:d9:60:58:e3:cc:6c:e2:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69df89b1-6446-4f76-b802-330eeb5819c6
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=0c8839ef-436d-47a3-82a8-579e01b13171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2a:dc:84:cd:af:60:9b:07:53:91:f2:f0:6d:
                    64:b0:c5:16:fd:dd:0b:fd:0d:e9:b4:ee:39:cd:08:
                    4a:4c:22:26:8b:44:97:a3:2a:27:fc:96:52:1c:dc:
                    18:21:6f:06:b5:29:76:14:1e:8e:0f:41:10:db:0a:
                    f0:5a:b0:35:70:9c:cf:07:66:83:8c:15:1e:69:5f:
                    0e:65:bb:2b:c0:96:bb:30:dd:c4:54:05:ff:41:6b:
                    74:8d:ab:62:a9:c7:75:20:53:a6:1a:fe:68:78:ec:
                    31:8c:5d:5d:2a:0b:85:8c:f8:0f:b6:1f:eb:54:e6:
                    22:8b:02:ed:41:b3:cd:bd:ce:38:f9:32:09:35:bc:
                    fa:44:2b:a1:bf:37:9d:90:b0:57:6f:ae:42:98:7e:
                    f5:16:f7:22:4a:b9:a7:ed:df:05:0d:2c:24:0d:d2:
                    7d:ff:c8:6f:ac:d2:63:91:ab:3a:4c:7f:a4:d9:ab:
                    ac:24:25:d6:70:b3:70:df:b0:cd:c7:3d:30:21:e1:
                    33:ba:dc:f0:85:b8:80:dd:90:e9:f9:33:2a:59:bb:
                    cf:11:01:18:14:46:cb:ef:4b:47:05:fe:ff:2e:74:
                    68:db:66:90:76:16:5e:ad:06:9e:2a:4a:b5:78:5d:
                    fc:34:0f:86:90:fb:03:f1:90:6a:85:ac:26:e6:fc:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9B:2D:57:5B:87:55:90:A0:63:FA:9E:9D:8E:5C:A4:B1:B3:2C:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/29db5299-ae20-3cbd-85ad-8843897ba2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:0f:ec:b0:ea:63:77:cb:16:09:a5:96:8d:dc:4d:d4:40:c0:
         6a:ab:12:46:ad:87:1a:02:54:99:15:57:c2:c8:37:27:fc:53:
         23:ad:98:d2:70:f8:b8:2a:64:2a:92:70:2e:c4:b1:00:e8:49:
         43:9c:0a:d6:e3:7c:a9:9c:8b:99:14:f8:5a:12:a8:b4:97:b1:
         37:49:04:bd:11:85:38:94:3b:68:b2:58:19:ac:9e:4f:dc:c5:
         e8:6f:f1:74:9f:cf:79:37:66:41:8f:cf:38:74:bc:00:18:03:
         cb:e7:b4:86:a9:a3:36:67:ee:c6:74:54:29:69:b5:32:0a:c8:
         f3:8b:9a:72:09:ce:91:9b:1f:a8:32:f0:1d:99:ce:91:31:ae:
         32:9d:24:f9:6e:69:f6:1a:96:c9:cc:3e:f9:f9:ea:df:7d:86:
         b1:f2:c8:06:40:92:65:95:6b:62:89:98:90:68:c6:3d:eb:d0:
         29:f7:00:a1:65:93:b1:0f:43:87:4b:84:ca:83:53:3f:dd:59:
         c8:4c:95:63:f0:b1:df:f6:c5:9a:b6:bf:e0:49:85:9f:56:90:
         05:b6:64:cf:aa:f8:5b:4a:d8:98:e4:5d:f0:27:c6:c4:5f:52:
         03:66:19:e4:47:2d:dc:d4:0e:17:92:cc:00:37:6d:10:ac:4c:
         38:ec:4d:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpnZYFjjzGzi64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlkZjg5YjEtNjQ0Ni00Zjc2LWI4MDItMzMwZWViNTgx
OWM2MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
MGM4ODM5ZWYtNDM2ZC00N2EzLTgyYTgtNTc5ZTAxYjEzMTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjirchM2vYJsHU5Hy8G1ksMUW/d0L/Q3ptO45
zQhKTCImi0SXoyon/JZSHNwYIW8GtSl2FB6OD0EQ2wrwWrA1cJzPB2aDjBUeaV8O
ZbsrwJa7MN3EVAX/QWt0jatiqcd1IFOmGv5oeOwxjF1dKguFjPgPth/rVOYiiwLt
QbPNvc44+TIJNbz6RCuhvzedkLBXb65CmH71FvciSrmn7d8FDSwkDdJ9/8hvrNJj
kas6TH+k2ausJCXWcLNw37DNxz0wIeEzutzwhbiA3ZDp+TMqWbvPEQEYFEbL70tH
Bf7/LnRo22aQdhZerQaeKkq1eF38NA+GkPsD8ZBqhawm5vzxhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOCbLVdbh1WQoGP6np2OXKSxsyzQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OWRm
ODliMS02NDQ2LTRmNzYtYjgwMi0zMzBlZWI1ODE5YzYvMjlkYjUyOTktYWUyMC0z
Y2JkLTg1YWQtODg0Mzg5N2JhMmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjlkZjg5YjEtNjQ0Ni00Zjc2LWI4
MDItMzMwZWViNTgxOWM2LzY5ZGY4OWIxLTY0NDYtNGY3Ni1iODAyLTMzMGVlYjU4
MTljNi5jcmwwHwYDVR0jBBgwFoAUPVhrP81mRwE6CJishe+RvnTqq4wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OWRmODliMS02NDQ2LTRmNzYtYjgwMi0zMzBl
ZWI1ODE5YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8P7LDqY3fLFgmllo3cTdRAwGqrEkathxoCVJkVV8LINyf8UyOtmNJw
+LgqZCqScC7EsQDoSUOcCtbjfKmci5kU+FoSqLSXsTdJBL0RhTiUO2iyWBmsnk/c
xehv8XSfz3k3ZkGPzzh0vAAYA8vntIapozZn7sZ0VClptTIKyPOLmnIJzpGbH6gy
8B2ZzpExrjKdJPluafYalsnMPvn56t99hrHyyAZAkmWVa2KJmJBoxj3r0Cn3AKFl
k7EPQ4dLhMqDUz/dWchMlWPwsd/2xZq2v+BJhZ9WkAW2ZM+q+FtK2JjkXfAnxsRf
UgNmGeRHLdzUDheSzAA3bRCsTDjsTYQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:14 2025 by rpki-client