Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/006e2a0d-6261-3bde-91bc-6de84246a115.roa
File:                     006e2a0d-6261-3bde-91bc-6de84246a115.roa (raw, json)
Hash identifier:          npQ9hJoo9JmDky1axKRZdR1IOZG+o5svuNYs9ltARmk=
Subject key identifier:   E5:F3:E0:D9:94:EE:4E:77:96:28:D2:E6:E9:BC:0B:AC:38:9F:24:65
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849FE6FE9587344790669EABB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/006e2a0d-6261-3bde-91bc-6de84246a115.roa
Signing time:             Tue 27 May 2025 16:14:38 +0000
ROA not before:           Tue 27 May 2025 16:14:38 +0000
ROA not after:            Mon 25 Aug 2025 16:14:38 +0000
asID:                     30036
IP address blocks:        173.16.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:6f:e9:58:73:44:79:06:69:ea:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 27 16:14:38 2025 GMT
            Not After : Aug 25 16:14:38 2025 GMT
        Subject: CN=898e06be-7102-46e5-b12b-c217f987ccaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:93:6b:43:e8:d4:ce:32:07:8f:b1:b4:fd:
                    54:95:8c:df:10:67:f1:6f:bc:af:ff:69:53:2c:a3:
                    46:d4:bf:5e:19:d0:d2:43:e9:b5:8f:b6:59:0b:2a:
                    8f:e5:fd:c0:df:7e:9e:3e:d4:90:23:ae:8a:71:d4:
                    13:eb:2c:0f:7d:9d:67:ce:3b:27:1c:c7:b6:89:65:
                    71:63:1d:bd:4b:d4:d0:8e:fe:5e:55:60:83:56:b5:
                    e0:cd:4a:66:ce:cf:e7:67:3e:61:5f:e9:96:8f:2a:
                    f7:0f:7c:26:4b:79:75:37:dc:bd:1d:31:a7:19:b0:
                    7f:b8:0b:c4:da:34:80:ae:e9:88:79:fa:79:c7:2b:
                    1c:3f:f3:f0:69:f8:b7:ce:30:34:d1:46:ea:47:f4:
                    d1:94:81:30:8e:d3:56:70:e6:c7:1d:89:67:ee:93:
                    ac:8b:ec:03:85:f5:2f:cc:35:49:35:85:ff:b4:d3:
                    13:52:2e:69:5d:96:8a:bf:7c:65:bf:ac:3b:72:11:
                    c2:aa:af:17:9f:6b:cf:bb:ca:85:bf:28:fb:46:51:
                    50:60:33:71:88:64:1f:bb:8e:f1:82:1f:f7:28:14:
                    1f:25:b4:2f:aa:5a:41:c3:61:e6:c1:64:cb:f9:8e:
                    88:dd:54:15:ce:28:4d:25:f7:0a:60:1d:12:96:db:
                    a9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F3:E0:D9:94:EE:4E:77:96:28:D2:E6:E9:BC:0B:AC:38:9F:24:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/006e2a0d-6261-3bde-91bc-6de84246a115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b3:fd:9c:b3:35:26:60:da:bc:9d:17:b1:37:d0:9d:ec:d3:
         33:92:88:1b:92:a3:7d:6e:c0:16:72:a3:9c:2d:83:da:30:e2:
         14:d9:9e:7e:a5:3d:c8:b3:ba:be:58:e7:d9:01:58:be:9f:88:
         ba:ff:32:67:d8:41:76:9d:95:c1:32:c6:fe:ef:2b:f8:c2:68:
         e0:b2:d1:79:02:53:5b:62:81:6c:87:78:5c:3e:38:3c:8c:f8:
         37:42:78:55:c3:26:57:45:d0:83:ff:4b:5e:88:19:29:05:96:
         d0:75:ec:ae:55:35:99:79:26:6e:6f:65:95:8c:6f:ac:27:89:
         77:4d:56:7a:13:19:7d:b2:31:6b:64:a1:df:c5:f6:80:80:9c:
         a7:c6:fb:03:1a:0a:bb:c0:67:cc:29:40:89:73:ba:7b:a1:66:
         90:04:02:86:24:63:17:1d:c6:ab:30:27:cb:e9:d0:a4:8f:d0:
         4d:43:44:a9:e3:95:91:00:9c:64:dc:92:a3:59:ff:e1:b3:1c:
         f4:26:bd:fb:42:2c:8a:36:4f:6a:21:43:8e:a8:08:10:e3:ad:
         f7:dd:72:19:32:c4:07:7d:2f:79:48:05:df:81:73:ee:87:7d:
         c7:db:e4:76:dd:49:f8:58:44:1d:8e:d2:2b:4d:2e:c6:ba:b1:
         8c:59:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:10 2025 by rpki-client