Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa
File:                     e6965540-cbd0-3930-b638-a04886e69eac.roa (raw, json)
Hash identifier:          TNGjT3/jKfnn6pAZhuO3QYrXE/bJCaCZ3fc3IiXmyXg=
Subject key identifier:   FD:75:3B:D4:4E:6C:D1:21:B4:6D:62:7C:51:7D:10:A8:92:9F:7A:81
Certificate issuer:       /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3
Certificate serial:       010D0C9F4328584A0C055C39345DA0A823E0E580
Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     4983
IP address blocks:        192.55.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:5c:39:34:5d:a0:a8:23:e0:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=29b6f942-2f4d-454a-ad82-0351dcbf175b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:55:d8:98:c5:d7:40:50:cd:09:d4:1e:45:d3:
                    f8:08:b5:8a:d7:e4:d5:2d:04:6b:53:e2:b3:a8:13:
                    7b:ba:ae:61:8b:f1:f4:b1:6f:65:8d:52:1b:86:c5:
                    3f:eb:63:92:aa:29:55:d0:83:fb:78:21:c6:e2:90:
                    e4:eb:bf:fb:50:1c:1c:ac:c2:98:ee:22:fe:b7:1d:
                    51:4d:31:14:e2:6f:d0:a7:3f:0e:00:bd:da:eb:65:
                    e4:22:ce:16:3f:3a:3c:a5:58:25:9a:d3:04:6f:d4:
                    a5:95:df:8f:e6:91:2f:e4:93:7c:fd:53:64:74:68:
                    53:d3:fa:61:1d:90:62:eb:38:75:e2:ce:63:81:03:
                    c3:0f:8a:8e:a1:a2:f3:69:65:e8:e8:fb:a4:aa:0a:
                    df:d5:69:a2:3d:d7:72:78:f5:a4:68:9f:fe:98:ac:
                    f2:9a:65:0b:1c:b5:fb:b8:73:57:fb:4d:9c:63:ae:
                    60:24:c9:c4:75:29:70:3e:c3:c0:e6:d1:58:08:91:
                    ab:43:84:03:1a:72:52:84:8d:3f:ee:9b:98:4e:41:
                    90:b8:d3:07:7d:b4:03:c2:61:c9:e4:35:76:2e:d8:
                    cc:7c:b2:27:20:cb:58:55:be:16:d5:c4:cc:32:64:
                    ea:c6:66:bd:49:3a:72:ea:15:4f:20:f3:18:fa:11:
                    62:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:75:3B:D4:4E:6C:D1:21:B4:6D:62:7C:51:7D:10:A8:92:9F:7A:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/e6965540-cbd0-3930-b638-a04886e69eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl

            X509v3 Authority Key Identifier:
                keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:dc:6c:7f:f5:89:c1:0b:dc:fd:2c:ea:ce:74:64:3a:22:d7:
         a1:23:e0:c8:e6:1c:95:6d:d6:75:33:99:34:f0:02:a2:13:23:
         31:42:ab:56:82:ce:c1:98:5a:34:15:bc:1b:6c:27:e5:09:ba:
         b8:70:be:c5:a4:d7:7f:f8:5d:2f:75:a3:77:4c:08:2a:e2:de:
         ef:c1:9d:23:80:6d:8e:d0:2d:92:34:26:28:ee:36:67:05:74:
         f8:fc:bb:85:46:30:41:ec:09:32:43:00:3a:24:ff:cc:0a:61:
         88:9f:b1:77:c5:b0:19:37:40:18:c6:99:40:58:23:ae:07:39:
         d0:6a:3a:10:78:4a:28:be:0d:9d:d1:b4:13:51:28:b6:44:6c:
         c5:ac:c9:62:c9:8d:39:a9:e4:48:a0:11:02:54:09:bc:af:81:
         29:c6:a2:c8:e1:5f:e2:97:31:ec:cf:d6:d9:5d:45:2f:ae:d2:
         ce:60:72:0a:dd:8d:e6:34:af:e5:63:fb:2d:e9:c4:d4:50:1d:
         9a:36:46:2d:fc:43:58:32:9d:55:2f:7c:03:06:64:58:a7:52:
         c9:a5:22:89:7a:9d:0b:0d:e2:80:f8:a8:0d:31:5c:cc:05:64:
         3f:ab:37:47:9b:2a:b4:f3:59:ca:c9:71:96:1f:5a:ce:8e:4c:
         ba:a2:d1:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVw5NF2gqCPg5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz
ZGMzMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
MjliNmY5NDItMmY0ZC00NTRhLWFkODItMDM1MWRjYmYxNzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFXYmMXXQFDNCdQeRdP4CLWK1+TVLQRrU+Kz
qBN7uq5hi/H0sW9ljVIbhsU/62OSqilV0IP7eCHG4pDk67/7UBwcrMKY7iL+tx1R
TTEU4m/Qpz8OAL3a62XkIs4WPzo8pVglmtMEb9Slld+P5pEv5JN8/VNkdGhT0/ph
HZBi6zh14s5jgQPDD4qOoaLzaWXo6Pukqgrf1WmiPddyePWkaJ/+mKzymmULHLX7
uHNX+02cY65gJMnEdSlwPsPA5tFYCJGrQ4QDGnJShI0/7puYTkGQuNMHfbQDwmHJ
5DV2LtjMfLInIMtYVb4W1cTMMmTqxma9STpy6hVPIPMY+hFicQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP11O9RObNEhtG1ifFF9EKiSn3qBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh
NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvZTY5NjU1NDAtY2JkMC0z
OTMwLWI2MzgtYTA0ODg2ZTY5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw
ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy
M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy
NzhlMjNkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDcjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXcbH/1icEL3P0s6s50ZDoi16Ej4MjmHJVt1nUzmTTwAqITIzFCq1aC
zsGYWjQVvBtsJ+UJurhwvsWk13/4XS91o3dMCCri3u/BnSOAbY7QLZI0JijuNmcF
dPj8u4VGMEHsCTJDADok/8wKYYifsXfFsBk3QBjGmUBYI64HOdBqOhB4Sii+DZ3R
tBNRKLZEbMWsyWLJjTmp5EigEQJUCbyvgSnGosjhX+KXMezP1tldRS+u0s5gcgrd
jeY0r+Vj+y3pxNRQHZo2Ri38Q1gynVUvfAMGZFinUsmlIol6nQsN4oD4qA0xXMwF
ZD+rN0ebKrTzWcrJcZYfWs6OTLqi0Ss=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:26:43 2025 by rpki-client