Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/75a35e35-c125-35da-a95b-175295e2aa67.roa
File:                     75a35e35-c125-35da-a95b-175295e2aa67.roa (raw, json)
Hash identifier:          Q21+xWnsiEU/TvoHmdp2Y1Ek0LiyH2SsMoV+6tLHbJ0=
Subject key identifier:   1F:D5:57:E6:35:31:75:3C:95:32:64:64:D7:01:D9:78:B3:CD:1B:4D
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F43285849B57A0665770B314A6D332D80
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/75a35e35-c125-35da-a95b-175295e2aa67.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     30456
IP address blocks:        185.199.92.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:06:65:77:0b:31:4a:6d:33:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=a0d0497e-9396-4862-918a-94d0fb9a9f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:86:34:ec:aa:a6:cf:84:2b:4a:cf:e8:17:
                    62:99:40:1a:44:4d:05:eb:67:26:06:c0:31:0b:32:
                    19:07:4c:35:60:2a:b5:06:d5:77:4a:92:44:bb:d6:
                    62:72:66:e2:01:44:69:f0:81:66:6d:ac:ed:9f:8f:
                    ab:2a:e7:a1:c8:c9:c4:f8:5c:41:8c:4b:ea:5a:27:
                    96:34:41:ed:a1:40:dc:10:72:4f:52:05:10:5d:1f:
                    eb:8f:38:c7:1e:f8:96:04:e4:8f:87:77:cd:f3:d6:
                    ae:61:2d:f7:0c:d2:81:a1:7c:ca:0f:f2:2c:7a:b6:
                    ac:4f:8d:9e:21:e3:3b:4d:9e:14:6b:e8:03:10:32:
                    12:61:ab:b9:73:81:fa:ec:3d:c4:7a:b1:92:71:89:
                    d7:78:12:b7:77:97:3c:1d:e3:7a:8f:e8:24:fd:4a:
                    4d:8b:93:97:71:3c:6b:bb:55:b6:0b:cd:09:e9:b2:
                    da:33:a5:38:2d:ba:2f:4e:a4:e7:49:f3:44:80:48:
                    2e:63:78:49:ed:93:66:11:47:8a:3e:27:0d:20:ff:
                    cb:f1:ef:b7:29:60:5c:ab:e5:5b:a1:98:1f:1b:88:
                    49:f7:77:c9:87:d1:01:aa:eb:6c:0b:9e:35:f9:c8:
                    de:fc:36:a4:80:6b:46:1f:7a:87:ce:2f:25:83:ad:
                    ee:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D5:57:E6:35:31:75:3C:95:32:64:64:D7:01:D9:78:B3:CD:1B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/75a35e35-c125-35da-a95b-175295e2aa67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.199.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d0:f1:a9:bf:e2:8e:3a:f6:98:d6:e0:ca:23:1f:15:fa:dc:
         af:82:ea:b3:9b:59:5f:bf:ae:de:4f:11:88:e6:1c:ef:3c:f2:
         e3:0a:ef:35:c2:09:bd:07:ae:c0:32:e6:b7:da:f4:60:df:0b:
         3d:24:29:f3:7b:89:6d:8e:c7:78:c8:ba:dd:7d:c0:8a:31:ae:
         d3:32:b3:99:9b:c4:5a:99:a3:07:df:b4:44:bd:90:f0:07:e5:
         37:a3:1f:26:6d:78:10:45:13:35:96:af:d9:26:ff:5b:70:65:
         89:60:d4:55:1d:b1:da:cd:89:2a:22:85:9a:c9:7c:fa:17:a8:
         f5:9e:c4:20:cf:d1:a0:32:39:0f:97:30:13:78:ca:50:5c:aa:
         a1:6d:a0:76:f8:5a:77:a5:16:76:f1:ca:90:dd:14:c1:94:80:
         d7:f1:7c:82:21:0a:6f:11:69:a0:76:34:ea:cc:5e:01:68:d5:
         64:27:61:41:ea:b2:15:50:e5:3f:fc:9d:a8:35:20:ff:0d:73:
         6b:ae:87:bc:01:9d:7f:7d:44:67:94:22:1c:e5:6c:5d:c2:82:
         5b:33:42:41:19:2e:51:72:cf:61:8e:5b:8b:3d:24:3d:ba:06:
         d8:a8:27:7d:78:d7:11:c9:e2:c8:16:b2:95:85:37:15:11:60:
         af:ee:86:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1egZldwsxSm0zLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFjMTllNTctYTZmNS00YzQ4LWI0ZGYtYjhkNDJkN2I3
NDgzMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk
YTBkMDQ5N2UtOTM5Ni00ODYyLTkxOGEtOTRkMGZiOWE5ZjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqraGNOyqps+EK0rP6BdimUAaRE0F62cmBsAx
CzIZB0w1YCq1BtV3SpJEu9ZicmbiAURp8IFmbaztn4+rKuehyMnE+FxBjEvqWieW
NEHtoUDcEHJPUgUQXR/rjzjHHviWBOSPh3fN89auYS33DNKBoXzKD/IserasT42e
IeM7TZ4Ua+gDEDISYau5c4H67D3EerGScYnXeBK3d5c8HeN6j+gk/UpNi5OXcTxr
u1W2C80J6bLaM6U4LbovTqTnSfNEgEguY3hJ7ZNmEUeKPicNIP/L8e+3KWBcq+Vb
oZgfG4hJ93fJh9EBqutsC541+cje/DakgGtGH3qHzi8lg63uGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/VV+Y1MXU8lTJkZNcB2XizzRtNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMx
OWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0MmQ3Yjc0ODMvNzVhMzVlMzUtYzEyNS0z
NWRhLWE5NWItMTc1Mjk1ZTJhYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzFjMTllNTctYTZmNS00YzQ4LWI0
ZGYtYjhkNDJkN2I3NDgzLzMxYzE5ZTU3LWE2ZjUtNGM0OC1iNGRmLWI4ZDQyZDdi
NzQ4My5jcmwwHwYDVR0jBBgwFoAU/pJi5eJ2pwPKSRroNOSF02JXoFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMxOWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0
MmQ3Yjc0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucdcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHLQ8am/4o469pjW4MojHxX63K+C6rObWV+/rt5PEYjmHO888uMK7zXC
Cb0HrsAy5rfa9GDfCz0kKfN7iW2Ox3jIut19wIoxrtMys5mbxFqZowfftES9kPAH
5TejHyZteBBFEzWWr9km/1twZYlg1FUdsdrNiSoihZrJfPoXqPWexCDP0aAyOQ+X
MBN4ylBcqqFtoHb4WnelFnbxypDdFMGUgNfxfIIhCm8RaaB2NOrMXgFo1WQnYUHq
shVQ5T/8nag1IP8Nc2uuh7wBnX99RGeUIhzlbF3CglszQkEZLlFyz2GOW4s9JD26
BtioJ3141xHJ4sgWspWFNxURYK/uhtM=
-----END CERTIFICATE-----
Generated at Sat May 10 04:58:59 2025 by rpki-client