Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4092c1ed-e80f-34ff-ab78-d76049447a29.roa
File:                     4092c1ed-e80f-34ff-ab78-d76049447a29.roa (raw, json)
Hash identifier:          keR04rRoEdyq2LGMSxCg7hlQSmCGWDRe7TNFdDcomtI=
Subject key identifier:   2A:BA:F7:23:57:02:42:AD:20:E2:20:B8:4B:D9:16:8A:1E:99:F8:F6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84C0F6276BF5C80B4160C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4092c1ed-e80f-34ff-ab78-d76049447a29.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.220.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:0f:62:76:bf:5c:80:b4:16:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=fb61938c-fa73-46ab-ba9f-80ea53008ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:46:85:34:7f:67:b7:19:69:63:de:82:13:e8:
                    12:39:1a:9c:53:83:04:72:bb:4e:2f:d6:5e:f2:ec:
                    18:45:5e:78:85:a7:59:93:bb:cb:b6:b4:ad:a1:3f:
                    e2:ba:8a:4b:7c:c6:b4:aa:80:19:0f:4b:22:79:19:
                    b4:bb:b8:d8:bb:c8:47:1f:38:6f:3a:31:09:fc:06:
                    06:44:ec:e8:0d:b2:8f:41:8a:d8:db:e2:e9:e0:93:
                    07:14:b9:f8:7a:16:12:4a:4b:e5:3e:df:20:a8:ad:
                    f7:bc:6b:26:a7:fc:4b:a1:90:55:8b:25:50:27:52:
                    05:58:bc:69:2f:e0:34:39:94:c2:d4:4b:34:32:b4:
                    2c:91:27:98:49:38:84:24:11:57:13:6f:2b:42:cd:
                    92:a9:e3:19:c3:6f:a2:62:5c:ba:75:16:12:40:39:
                    0c:99:53:a2:52:31:b4:f7:a2:dc:d7:cf:04:f6:ae:
                    d2:d4:8d:c5:f3:e9:f4:4f:e8:a1:f4:50:29:b8:9f:
                    e2:2c:82:8f:53:a3:03:65:3b:56:f2:7d:d1:a7:12:
                    ff:f7:96:88:f5:11:e0:11:ee:bb:eb:6c:46:ae:2b:
                    a8:64:19:20:6b:e2:12:36:95:4f:78:de:a6:44:10:
                    50:ee:62:ea:fc:45:5a:3a:4d:56:bd:70:4a:95:74:
                    fd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BA:F7:23:57:02:42:AD:20:E2:20:B8:4B:D9:16:8A:1E:99:F8:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4092c1ed-e80f-34ff-ab78-d76049447a29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.220.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:90:4f:b6:43:5d:48:50:50:88:39:03:8c:bb:c8:82:90:cc:
         35:ed:b0:66:d4:23:9e:fd:58:41:ff:b2:5d:db:fc:88:ff:f0:
         7c:5a:7b:bd:7c:a8:96:9f:7c:76:f8:a3:af:82:bd:c0:9d:60:
         d5:c3:ce:8c:75:c1:ec:e5:a9:a5:c7:4a:b6:bd:5d:c7:ee:6c:
         4b:30:26:c5:c6:32:40:9b:3f:34:a1:11:0a:30:c7:d2:1a:28:
         b3:42:d0:40:eb:3e:bf:70:11:c6:c8:7f:95:ff:40:1e:a6:46:
         72:70:51:4b:55:45:4d:4a:2f:46:1b:e1:24:64:09:d8:cd:bd:
         ad:91:c9:af:ce:b4:59:fe:d1:7b:08:ab:ac:7c:43:a7:7d:88:
         43:2f:a5:b1:03:fb:be:37:0f:84:f8:60:7c:2c:de:a5:a3:fc:
         e0:67:f8:04:af:ca:ca:0e:d8:e6:ec:d8:5b:82:4d:6f:49:37:
         cf:63:90:d5:9f:3c:d1:bb:7a:8e:f9:97:55:44:c4:7f:7b:46:
         dd:0a:9f:85:58:18:f0:0b:a5:0b:45:07:30:7d:1d:d1:98:47:
         cf:42:e1:ae:bd:69:29:33:6f:81:88:e1:95:94:dc:b1:e8:f2:
         8a:ac:ca:d1:34:57:46:de:66:27:db:9e:6e:83:eb:b2:74:00:
         ce:f7:e0:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITA9idr9cgLQWDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
ZmI2MTkzOGMtZmE3My00NmFiLWJhOWYtODBlYTUzMDA4YWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUaFNH9ntxlpY96CE+gSORqcU4MEcrtOL9Ze
8uwYRV54hadZk7vLtrStoT/iuopLfMa0qoAZD0sieRm0u7jYu8hHHzhvOjEJ/AYG
ROzoDbKPQYrY2+Lp4JMHFLn4ehYSSkvlPt8gqK33vGsmp/xLoZBViyVQJ1IFWLxp
L+A0OZTC1Es0MrQskSeYSTiEJBFXE28rQs2SqeMZw2+iYly6dRYSQDkMmVOiUjG0
96Lc188E9q7S1I3F8+n0T+ih9FApuJ/iLIKPU6MDZTtW8n3RpxL/95aI9RHgEe67
62xGriuoZBkga+ISNpVPeN6mRBBQ7mLq/EVaOk1WvXBKlXT9mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCq69yNXAkKtIOIguEvZFooemfj2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDA5MmMxZWQtZTgwZi0z
NGZmLWFiNzgtZDc2MDQ5NDQ3YTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI9ywMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCQT7ZDXUhQUIg5A4y7yIKQzDXtsGbUI579WEH/sl3b/Ij/8Hxae718
qJaffHb4o6+CvcCdYNXDzox1wezlqaXHSra9XcfubEswJsXGMkCbPzShEQowx9Ia
KLNC0EDrPr9wEcbIf5X/QB6mRnJwUUtVRU1KL0Yb4SRkCdjNva2Rya/OtFn+0XsI
q6x8Q6d9iEMvpbED+743D4T4YHws3qWj/OBn+ASvysoO2Obs2FuCTW9JN89jkNWf
PNG7eo75l1VExH97Rt0Kn4VYGPALpQtFBzB9HdGYR89C4a69aSkzb4GI4ZWU3LHo
8oqsytE0V0beZifbnm6D67J0AM734Ck=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:18 2025 by rpki-client