Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35662ba7-8fdd-3455-bbe2-e0c976ffddff.roa
File:                     35662ba7-8fdd-3455-bbe2-e0c976ffddff.roa (raw, json)
Hash identifier:          ZSd6pczNsEkOQ4Sj9yHolVxuOQ12TXe14qhVoz7DpoA=
Subject key identifier:   02:F9:CF:24:87:40:2A:C0:3E:9F:67:60:14:A5:ED:5C:5E:A6:D3:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB68F35E4DB401B7047200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35662ba7-8fdd-3455-bbe2-e0c976ffddff.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        174.50.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:68:f3:5e:4d:b4:01:b7:04:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=5699c906-869f-4542-bdcd-21fa0c8df8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:55:4b:cb:eb:89:64:c3:c0:1b:bc:f6:9a:
                    2c:a4:fb:95:8f:37:0d:50:cb:57:dd:69:fe:a7:12:
                    2d:53:f1:be:14:60:23:72:3e:f1:6e:d3:76:43:35:
                    a6:8f:9a:ef:db:fc:7b:01:f0:b9:fd:e4:17:2c:4a:
                    4f:43:f2:2e:a8:2b:7e:60:36:53:18:12:b6:74:5d:
                    3f:c4:03:e3:c0:b4:df:64:8c:31:ac:36:a3:1d:6b:
                    05:70:cf:8f:1a:bd:94:60:e3:88:ed:3c:f0:e7:74:
                    93:59:8e:a2:8e:93:eb:00:79:5b:6b:e6:f2:09:22:
                    96:97:18:60:30:c7:2b:76:75:2f:8d:8a:77:99:10:
                    7c:c6:cc:00:e5:52:f7:a4:6d:66:79:6c:1c:4c:6c:
                    84:6f:f0:44:5f:05:47:fb:e7:31:f1:b2:17:4f:88:
                    bb:d1:19:89:73:57:18:91:4e:16:20:a1:f2:85:3f:
                    ef:ee:b0:07:35:05:c6:e3:92:7e:61:48:20:da:66:
                    e3:d6:db:cf:5e:d6:e0:3c:f8:c9:7d:31:8f:1d:2d:
                    6f:4f:23:58:40:4e:02:22:23:15:4b:e4:7d:dc:b7:
                    87:35:4d:54:c5:0d:62:22:a0:3c:fc:1a:83:1d:e4:
                    e2:7f:60:ac:33:f9:f1:08:06:10:e6:d2:77:12:37:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F9:CF:24:87:40:2A:C0:3E:9F:67:60:14:A5:ED:5C:5E:A6:D3:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35662ba7-8fdd-3455-bbe2-e0c976ffddff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.50.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:13:57:ec:4c:42:a4:86:2d:35:2a:ed:d3:65:ff:7e:9f:4d:
         4b:a8:c8:03:1a:08:9a:b3:aa:47:8f:51:e0:3f:ad:14:4a:74:
         be:36:00:b1:89:18:c4:39:fe:ce:37:06:a0:44:33:1d:e5:93:
         0c:72:99:a9:1d:0f:4a:07:3c:a8:78:0d:54:60:e4:7e:d3:17:
         25:a5:cb:84:6a:0d:48:f1:5c:6f:5a:a2:df:bd:e4:09:6f:e6:
         3b:8d:c3:15:8e:4d:c1:b5:a0:de:2a:cf:8f:40:7f:45:07:fe:
         8d:4e:2b:bc:d6:39:f5:72:0e:32:54:bc:8f:45:a2:1b:95:d0:
         c0:eb:9b:3e:aa:ba:0d:94:b6:41:77:b2:ba:d1:66:ea:34:9e:
         fe:fd:3e:2c:70:c7:0d:21:ce:a5:26:cd:87:19:72:77:77:07:
         28:e5:fd:c1:a6:89:45:7e:03:32:93:94:df:ed:a6:f9:46:bd:
         d5:83:34:c0:02:3b:8e:d6:31:ff:95:59:6d:ae:d9:00:93:d4:
         fb:7d:ab:7c:b2:4f:98:f4:50:47:87:7c:a3:5e:63:c9:18:cb:
         92:13:95:6b:25:61:34:2b:72:fd:08:55:73:3e:16:bc:0e:7f:
         3d:46:b2:05:4a:42:c1:53:94:ee:59:a8:25:fa:d8:76:d7:ce:
         f2:54:6b:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+2jzXk20AbcEcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
NTY5OWM5MDYtODY5Zi00NTQyLWJkY2QtMjFmYTBjOGRmOGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvApVS8vriWTDwBu89pospPuVjzcNUMtX3Wn+
pxItU/G+FGAjcj7xbtN2QzWmj5rv2/x7AfC5/eQXLEpPQ/IuqCt+YDZTGBK2dF0/
xAPjwLTfZIwxrDajHWsFcM+PGr2UYOOI7Tzw53STWY6ijpPrAHlba+byCSKWlxhg
MMcrdnUvjYp3mRB8xswA5VL3pG1meWwcTGyEb/BEXwVH++cx8bIXT4i70RmJc1cY
kU4WIKHyhT/v7rAHNQXG45J+YUgg2mbj1tvPXtbgPPjJfTGPHS1vTyNYQE4CIiMV
S+R93LeHNU1UxQ1iIqA8/BqDHeTif2CsM/nxCAYQ5tJ3Ejd23QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAL5zySHQCrAPp9nYBSl7VxeptOCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzU2NjJiYTctOGZkZC0z
NDU1LWJiZTItZTBjOTc2ZmZkZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrjLSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKoTV+xMQqSGLTUq7dNl/36fTUuoyAMaCJqzqkePUeA/rRRKdL42ALGJ
GMQ5/s43BqBEMx3lkwxymakdD0oHPKh4DVRg5H7TFyWly4RqDUjxXG9aot+95Alv
5juNwxWOTcG1oN4qz49Af0UH/o1OK7zWOfVyDjJUvI9FohuV0MDrmz6qug2UtkF3
srrRZuo0nv79Pixwxw0hzqUmzYcZcnd3Byjl/cGmiUV+AzKTlN/tpvlGvdWDNMAC
O47WMf+VWW2u2QCT1Pt9q3yyT5j0UEeHfKNeY8kYy5ITlWslYTQrcv0IVXM+FrwO
fz1GsgVKQsFTlO5ZqCX62HbXzvJUaw8=
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:31:18 2025 by rpki-client