Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/6e261569-380e-34de-a0a0-35a19e70cb49.roa
File:                     6e261569-380e-34de-a0a0-35a19e70cb49.roa (raw, json)
Hash identifier:          d1p96LtRzQRBUk58sliFZ4V/WwHpMz2wyPcfsXUFxmQ=
Subject key identifier:   A1:EA:15:F9:38:D5:8E:C6:72:7C:92:F2:22:82:DE:92:2B:A0:A5:94
Certificate issuer:       /CN=35b4b3a4-a195-4325-8f07-9376a8ef2903
Certificate serial:       010D0C9F432858493E3C38E0961FDBA4643A5520
Authority key identifier: B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/6e261569-380e-34de-a0a0-35a19e70cb49.roa
Signing time:             Wed 19 Mar 2025 19:55:17 +0000
ROA not before:           Wed 19 Mar 2025 19:55:17 +0000
ROA not after:            Tue 17 Jun 2025 19:55:17 +0000
asID:                     8075
IP address blocks:        66.94.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:3c:38:e0:96:1f:db:a4:64:3a:55:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35b4b3a4-a195-4325-8f07-9376a8ef2903
        Validity
            Not Before: Mar 19 19:55:17 2025 GMT
            Not After : Jun 17 19:55:17 2025 GMT
        Subject: CN=58ce391a-6f47-4993-8878-3880d211c391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:49:03:b0:6d:9e:7c:7c:b7:a6:92:96:fe:47:
                    fe:70:ac:25:2f:c3:e3:86:59:5e:a9:7c:53:36:c4:
                    9e:f7:8d:3f:a7:ec:07:16:dd:bf:19:68:19:71:e0:
                    3d:99:b5:5d:41:b0:ac:ed:c6:6d:8c:b9:86:51:0d:
                    60:6f:04:c5:f8:24:41:b5:ab:c1:1e:2d:78:a0:3c:
                    f9:96:c2:9d:76:96:c4:aa:d1:dc:d4:ac:4f:71:d5:
                    3f:ee:4b:66:15:de:52:1f:3b:03:46:e0:fb:19:bc:
                    54:30:ec:f0:a6:f6:c8:ca:7a:bf:9f:00:ab:7d:4b:
                    05:00:57:2a:0a:b6:3b:c9:6b:68:b3:dd:d9:6e:17:
                    49:83:e1:70:b9:76:e2:6b:bb:e3:54:f2:f8:2e:2a:
                    83:fd:bf:eb:38:15:1d:42:a0:99:60:9e:4f:d3:86:
                    e7:7f:de:b7:5f:fd:c4:d6:4a:0f:e2:3a:98:ce:42:
                    71:1b:27:a1:96:30:80:85:f2:3c:3a:02:79:75:21:
                    49:0b:a6:77:32:55:a5:bc:af:8c:bd:5c:03:0c:6a:
                    7c:9c:8a:2b:8f:50:cb:9f:a5:e1:8b:17:5c:c7:d5:
                    33:ac:b8:2c:c3:ea:0d:bc:52:13:06:d5:9a:78:5d:
                    ea:b2:fb:96:f8:2f:fa:13:6f:f7:d0:54:52:24:eb:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EA:15:F9:38:D5:8E:C6:72:7C:92:F2:22:82:DE:92:2B:A0:A5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/6e261569-380e-34de-a0a0-35a19e70cb49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.94.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:96:c8:48:74:f2:0c:ac:9f:8d:35:9b:81:6f:90:66:47:44:
         18:5d:76:ad:b8:eb:73:23:4c:62:38:8f:34:94:2f:7c:01:fd:
         1a:9d:5d:21:47:08:90:be:90:91:d7:64:68:80:5b:eb:54:0a:
         31:da:b4:00:70:f7:3a:04:62:5d:0f:ad:3e:59:43:bc:da:92:
         f5:5c:e3:ad:0d:f0:c7:51:5f:ab:b4:92:29:1a:c0:c8:14:8e:
         eb:06:e2:21:f4:9b:72:f1:46:ca:67:92:c9:80:51:9c:4a:f5:
         fe:f4:46:ed:a3:09:d1:e2:6a:b0:6d:44:29:8b:4d:9b:fd:e1:
         52:df:81:d2:b6:df:c8:7e:07:00:f5:ed:9f:2f:75:8e:40:17:
         b4:6d:e1:f1:83:c2:6b:ba:20:1b:2c:1b:47:3b:36:87:41:fe:
         6b:76:cb:5d:cb:20:24:2f:45:1b:22:8f:93:a4:d0:c7:23:35:
         0e:84:f3:74:16:31:f6:af:a1:f3:5f:dd:cc:1d:02:8d:96:ab:
         bf:69:d1:c0:97:04:c8:da:75:49:3c:1b:4f:af:5e:55:c8:ea:
         8d:b7:81:d1:26:bc:50:b4:26:0e:b7:c3:c1:51:e3:d6:f3:fe:
         8b:72:db:c1:83:df:54:cb:94:63:38:8a:25:98:f0:64:cf:53:
         fe:29:06:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+PDjglh/bpGQ6VSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzViNGIzYTQtYTE5NS00MzI1LThmMDctOTM3NmE4ZWYy
OTAzMB4XDTI1MDMxOTE5NTUxN1oXDTI1MDYxNzE5NTUxN1owLzEtMCsGA1UEAxMk
NThjZTM5MWEtNmY0Ny00OTkzLTg4NzgtMzg4MGQyMTFjMzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20kDsG2efHy3ppKW/kf+cKwlL8PjhlleqXxT
NsSe940/p+wHFt2/GWgZceA9mbVdQbCs7cZtjLmGUQ1gbwTF+CRBtavBHi14oDz5
lsKddpbEqtHc1KxPcdU/7ktmFd5SHzsDRuD7GbxUMOzwpvbIynq/nwCrfUsFAFcq
CrY7yWtos93ZbhdJg+FwuXbia7vjVPL4LiqD/b/rOBUdQqCZYJ5P04bnf963X/3E
1koP4jqYzkJxGyehljCAhfI8OgJ5dSFJC6Z3MlWlvK+MvVwDDGp8nIorj1DLn6Xh
ixdcx9UzrLgsw+oNvFITBtWaeF3qsvuW+C/6E2/30FRSJOsS9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKHqFfk41Y7GcnyS8iKC3pIroKWUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWI0
YjNhNC1hMTk1LTQzMjUtOGYwNy05Mzc2YThlZjI5MDMvNmUyNjE1NjktMzgwZS0z
NGRlLWEwYTAtMzVhMTllNzBjYjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzViNGIzYTQtYTE5NS00MzI1LThm
MDctOTM3NmE4ZWYyOTAzLzM1YjRiM2E0LWExOTUtNDMyNS04ZjA3LTkzNzZhOGVm
MjkwMy5jcmwwHwYDVR0jBBgwFoAUuan0c5Rg+PnDmag9AVdSgl973GYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zNWI0YjNhNC1hMTk1LTQzMjUtOGYwNy05Mzc2
YThlZjI5MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQl41MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyWyEh08gysn401m4FvkGZHRBhddq2463MjTGI4jzSUL3wB/RqdXSFH
CJC+kJHXZGiAW+tUCjHatABw9zoEYl0PrT5ZQ7zakvVc460N8MdRX6u0kikawMgU
jusG4iH0m3LxRspnksmAUZxK9f70Ru2jCdHiarBtRCmLTZv94VLfgdK238h+BwD1
7Z8vdY5AF7Rt4fGDwmu6IBssG0c7NodB/mt2y13LICQvRRsij5Ok0McjNQ6E83QW
MfavofNf3cwdAo2Wq79p0cCXBMjadUk8G0+vXlXI6o23gdEmvFC0Jg63w8FR49bz
/oty28GD31TLlGM4iiWY8GTPU/4pBro=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:37 2025 by rpki-client