Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/29b33674-e696-3616-b02c-071d77dbcace.roa
File:                     29b33674-e696-3616-b02c-071d77dbcace.roa (raw, json)
Hash identifier:          X97PiPcL5xVNpPEowJAza7HO/p//uNxR1BWnrLlKh5k=
Subject key identifier:   61:D3:61:A1:93:27:4A:71:5A:C4:5A:16:7A:C6:8E:32:9E:23:99:78
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858494B64222F727C696A117AA600
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/29b33674-e696-3616-b02c-071d77dbcace.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     11404
IP address blocks:        162.246.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:22:2f:72:7c:69:6a:11:7a:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=b810c798-8f51-4183-8928-b169b3186f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:c3:e1:9f:d8:7c:3b:c8:39:2f:57:48:18:
                    e2:5b:ee:ed:0a:69:c8:fd:2d:4f:58:eb:5c:f4:8b:
                    18:fe:14:fb:7b:b7:29:9e:ea:7d:48:8d:f2:54:59:
                    53:9f:a4:21:44:8d:ed:00:85:1d:df:4b:bf:48:67:
                    a5:17:16:df:aa:c7:56:71:a7:74:64:3f:15:70:de:
                    3a:aa:ea:ab:53:32:9e:7b:de:9f:07:55:19:7a:52:
                    6c:2e:fc:24:a7:e0:d5:44:7a:a7:df:e0:fb:32:fd:
                    c9:d9:65:4e:b5:2c:2b:24:c2:02:78:c5:57:42:66:
                    10:e0:bf:3d:46:0d:18:70:50:af:19:09:c5:ec:98:
                    70:a0:aa:94:b9:23:2c:7f:f1:24:4c:52:a9:a1:8c:
                    5d:bc:78:c6:4b:83:d8:ba:7e:18:1a:1b:35:e6:17:
                    d0:95:cf:dc:c8:18:89:8c:ce:9a:3c:00:b5:08:37:
                    9e:ad:56:1e:4b:4a:2b:11:5d:2d:f1:04:52:5c:f2:
                    62:0c:78:82:06:1a:56:8c:2d:2c:fb:1d:f2:df:e7:
                    16:c1:1e:0c:f1:49:ff:60:48:ec:18:96:09:48:a3:
                    cf:f8:5b:5f:c6:d0:2b:f6:6e:b9:2b:e0:74:7d:61:
                    bb:3e:8f:4e:1a:c8:2f:95:ac:12:ea:e7:4e:13:2b:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D3:61:A1:93:27:4A:71:5A:C4:5A:16:7A:C6:8E:32:9E:23:99:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/29b33674-e696-3616-b02c-071d77dbcace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:64:5d:c6:2c:d0:25:5c:4d:ff:1f:5e:ab:f7:f8:34:16:3a:
         a1:f7:21:d6:3f:05:dd:e8:51:e8:93:54:d1:65:3e:9f:8b:eb:
         39:db:1f:95:30:8a:92:59:3d:2b:55:d6:45:55:37:39:10:f4:
         87:43:c4:d4:de:5d:83:81:52:81:7a:ce:38:54:f6:b3:8e:07:
         89:e8:16:cf:45:c0:49:82:ef:b7:fb:83:22:e2:ee:c7:46:86:
         26:ed:67:9a:cd:e5:3b:38:56:67:e8:e6:d5:c5:7d:7e:c5:29:
         27:c0:b8:23:8a:7c:fc:99:52:cc:6f:69:d0:1c:b5:8b:fe:49:
         39:06:31:9c:7a:73:0b:fb:20:9e:97:f5:9b:73:c2:99:f5:1c:
         bc:de:a7:f8:27:6f:b0:d1:d5:80:a7:c2:6f:03:88:8e:da:97:
         8a:90:8e:e2:20:a1:4d:e9:d1:7b:e8:08:76:47:f3:e9:a0:61:
         70:f6:70:7a:49:31:d8:54:df:72:f6:6e:d5:14:8a:e7:d5:c0:
         df:8a:3b:24:f2:64:28:3e:07:32:c2:91:ca:99:06:4d:99:d8:
         3e:18:4e:2e:8d:61:87:a3:55:72:2b:53:f0:3e:c0:b7:8f:23:
         3e:27:fe:05:2f:a6:83:dc:16:54:34:44:b2:22:97:bd:cc:6b:
         69:21:b6:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCIvcnxpahF6pgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
YjgxMGM3OTgtOGY1MS00MTgzLTg5MjgtYjE2OWIzMTg2Zjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHnD4Z/YfDvIOS9XSBjiW+7tCmnI/S1PWOtc
9IsY/hT7e7cpnup9SI3yVFlTn6QhRI3tAIUd30u/SGelFxbfqsdWcad0ZD8VcN46
quqrUzKee96fB1UZelJsLvwkp+DVRHqn3+D7Mv3J2WVOtSwrJMICeMVXQmYQ4L89
Rg0YcFCvGQnF7JhwoKqUuSMsf/EkTFKpoYxdvHjGS4PYun4YGhs15hfQlc/cyBiJ
jM6aPAC1CDeerVYeS0orEV0t8QRSXPJiDHiCBhpWjC0s+x3y3+cWwR4M8Un/YEjs
GJYJSKPP+FtfxtAr9m65K+B0fWG7Po9OGsgvlawS6udOEytfyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGHTYaGTJ0pxWsRaFnrGjjKeI5l4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMjliMzM2NzQtZTY5Ni0z
NjE2LWIwMmMtMDcxZDc3ZGJjYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovZcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1kXcYs0CVcTf8fXqv3+DQWOqH3IdY/Bd3oUeiTVNFlPp+L6znbH5Uw
ipJZPStV1kVVNzkQ9IdDxNTeXYOBUoF6zjhU9rOOB4noFs9FwEmC77f7gyLi7sdG
hibtZ5rN5Ts4Vmfo5tXFfX7FKSfAuCOKfPyZUsxvadActYv+STkGMZx6cwv7IJ6X
9Ztzwpn1HLzep/gnb7DR1YCnwm8DiI7al4qQjuIgoU3p0XvoCHZH8+mgYXD2cHpJ
MdhU33L2btUUiufVwN+KOyTyZCg+BzLCkcqZBk2Z2D4YTi6NYYejVXIrU/A+wLeP
Iz4n/gUvpoPcFlQ0RLIil73Ma2khtkc=
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:43 2025 by rpki-client