Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/92ac91aa-5a40-302f-b604-4405597dc272.roa
File:                     92ac91aa-5a40-302f-b604-4405597dc272.roa (raw, json)
Hash identifier:          l7zSdM0qwNYjwnMErXGvEXNLf2SkUDaii9MI3TbAdOQ=
Subject key identifier:   AD:6D:8F:99:38:AE:92:A9:C1:C3:1F:C2:03:B9:DE:02:28:54:91:03
Certificate issuer:       /CN=117f0c8a-705e-440d-8160-752196eb04a2
Certificate serial:       010D0C9F43285849F71526111825D0978C45919C
Authority key identifier: AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/92ac91aa-5a40-302f-b604-4405597dc272.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        72.22.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:26:11:18:25:d0:97:8c:45:91:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f0c8a-705e-440d-8160-752196eb04a2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=b3a7edc9-f61f-415a-a2b5-b5313b0eac38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8e:a3:59:15:51:26:55:6c:7e:1d:8a:25:e7:
                    8f:9d:4a:f7:a9:69:96:c5:4b:f4:66:af:4e:76:f1:
                    d5:8a:78:10:4d:e6:84:55:77:13:79:2a:1d:9a:24:
                    a5:14:dc:15:6a:14:15:4f:a4:b7:1c:6a:a0:ff:d8:
                    61:bf:70:82:9c:79:9a:a2:d0:db:bd:97:a2:fa:e4:
                    3a:1b:93:74:a3:73:05:a2:dd:fe:c0:54:8d:41:83:
                    96:16:67:51:87:54:c9:4a:68:43:05:53:90:21:13:
                    8b:cc:69:9d:f8:6b:44:df:0c:95:db:7f:0b:54:9d:
                    a3:e5:5e:88:aa:dc:63:0a:cc:d2:cd:dc:0e:2b:d1:
                    d1:35:10:19:a9:0e:78:2b:20:d7:34:0a:72:4c:07:
                    f4:d2:3d:19:65:6f:d7:5b:0b:0b:a7:5b:e0:33:82:
                    32:47:ff:51:7c:1c:90:e6:6c:8f:bc:0f:18:dc:9c:
                    90:b7:3c:b0:26:b7:29:cc:96:18:cc:79:82:e6:9c:
                    a5:af:14:0e:6d:7c:cd:da:de:cd:a7:10:d0:e2:b9:
                    1a:fe:d8:21:66:52:ef:e5:de:3a:07:8b:36:15:06:
                    b0:8b:5c:76:5b:c8:aa:5b:b7:b8:ee:d8:05:10:79:
                    fe:9e:da:de:b3:40:7c:dc:29:b5:76:ab:6f:dd:8f:
                    46:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6D:8F:99:38:AE:92:A9:C1:C3:1F:C2:03:B9:DE:02:28:54:91:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/92ac91aa-5a40-302f-b604-4405597dc272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl

            X509v3 Authority Key Identifier:
                keyid:AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:45:a4:54:ec:b9:d8:4a:bd:1d:ef:c2:c3:a0:89:04:44:45:
         a9:51:d3:14:45:56:de:1f:d8:c7:89:66:88:03:d8:a3:24:34:
         c7:b3:14:a4:5a:44:61:5a:d1:aa:23:4e:0c:c2:d5:e7:0b:b9:
         e8:5e:ec:71:89:0c:05:9c:db:06:c9:fe:4f:de:91:92:e8:ec:
         18:97:e2:37:10:7c:f6:d5:ea:72:97:00:ec:e5:16:35:2f:49:
         03:2a:75:88:8a:ff:63:12:1e:28:b5:12:61:ed:5d:99:1a:10:
         33:95:5c:66:88:ec:06:d8:d6:da:f9:2f:00:8b:d4:4b:39:3b:
         25:9e:da:dc:f0:f9:ab:c9:12:84:46:b5:ab:ef:71:00:0a:90:
         56:1e:43:bc:bf:40:4a:96:d0:f2:04:4d:c1:1a:d8:63:85:dc:
         a6:64:8b:62:4c:2d:76:56:81:7c:d5:28:43:d7:6e:5f:0d:39:
         57:6a:a4:1a:a0:79:9c:0b:7e:19:2f:5a:02:d7:9b:95:a8:71:
         bb:58:fb:d8:3a:c4:8d:56:d3:07:12:32:ce:68:88:23:da:e7:
         39:1c:a0:44:e9:1a:fa:7a:80:cc:ce:2e:be:7d:0d:f5:79:67:
         8f:21:e0:04:ab:78:32:4d:df:d3:94:82:2b:b6:1b:e2:f6:7c:
         4e:59:53:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSYRGCXQl4xFkZwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTE3ZjBjOGEtNzA1ZS00NDBkLTgxNjAtNzUyMTk2ZWIw
NGEyMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
YjNhN2VkYzktZjYxZi00MTVhLWEyYjUtYjUzMTNiMGVhYzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio6jWRVRJlVsfh2KJeePnUr3qWmWxUv0Zq9O
dvHVingQTeaEVXcTeSodmiSlFNwVahQVT6S3HGqg/9hhv3CCnHmaotDbvZei+uQ6
G5N0o3MFot3+wFSNQYOWFmdRh1TJSmhDBVOQIROLzGmd+GtE3wyV238LVJ2j5V6I
qtxjCszSzdwOK9HRNRAZqQ54KyDXNApyTAf00j0ZZW/XWwsLp1vgM4IyR/9RfByQ
5myPvA8Y3JyQtzywJrcpzJYYzHmC5pylrxQObXzN2t7NpxDQ4rka/tghZlLv5d46
B4s2FQawi1x2W8iqW7e47tgFEHn+ntres0B83Cm1dqtv3Y9GnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK1tj5k4rpKpwcMfwgO53gIoVJEDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMTdm
MGM4YS03MDVlLTQ0MGQtODE2MC03NTIxOTZlYjA0YTIvOTJhYzkxYWEtNWE0MC0z
MDJmLWI2MDQtNDQwNTU5N2RjMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTE3ZjBjOGEtNzA1ZS00NDBkLTgx
NjAtNzUyMTk2ZWIwNGEyLzExN2YwYzhhLTcwNWUtNDQwZC04MTYwLTc1MjE5NmVi
MDRhMi5jcmwwHwYDVR0jBBgwFoAUrR+VyGWB55XajGVUK0RqLpLI99gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMTdmMGM4YS03MDVlLTQ0MGQtODE2MC03NTIx
OTZlYjA0YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAApFpFTsudhKvR3vwsOgiQRERalR0xRFVt4f2MeJZogD2KMkNMezFKRa
RGFa0aojTgzC1ecLuehe7HGJDAWc2wbJ/k/ekZLo7BiX4jcQfPbV6nKXAOzlFjUv
SQMqdYiK/2MSHii1EmHtXZkaEDOVXGaI7AbY1tr5LwCL1Es5OyWe2tzw+avJEoRG
tavvcQAKkFYeQ7y/QEqW0PIETcEa2GOF3KZki2JMLXZWgXzVKEPXbl8NOVdqpBqg
eZwLfhkvWgLXm5WocbtY+9g6xI1W0wcSMs5oiCPa5zkcoETpGvp6gMzOLr59DfV5
Z48h4ASreDJN39OUgiu2G+L2fE5ZU8U=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:54:00 2025 by rpki-client