Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02f28d49-392f-3b75-abb1-5c5ff4160971.roa
File:                     02f28d49-392f-3b75-abb1-5c5ff4160971.roa (raw, json)
Hash identifier:          LUJ2pYSi40VONZ2ZSHsGOuCO/rIFOB8sYgHzwafosO8=
Subject key identifier:   F0:EB:B3:EC:96:01:8E:88:67:24:C0:4E:A6:3C:C9:91:26:A2:3E:F1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7F7695C8E02FB976C015DE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02f28d49-392f-3b75-abb1-5c5ff4160971.roa
Signing time:             Wed 05 Feb 2025 11:11:15 +0000
ROA not before:           Wed 05 Feb 2025 11:11:15 +0000
ROA not after:            Tue 06 May 2025 10:11:15 +0000
asID:                     30036
IP address blocks:        173.26.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f7:69:5c:8e:02:fb:97:6c:01:5d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:11:15 2025 GMT
            Not After : May  6 10:11:15 2025 GMT
        Subject: CN=2f9ea854-706e-48cd-9a69-1cf40c61863b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:de:c5:42:d4:86:b8:7c:a7:0c:b8:34:40:eb:
                    ed:87:aa:40:53:20:a3:6f:37:7d:30:e0:90:3f:cc:
                    ad:29:2a:53:92:b2:b7:7b:2f:34:a0:ce:ac:85:c4:
                    dc:da:54:76:dd:1e:08:09:77:1e:63:13:ea:0d:cd:
                    ef:d7:ab:e9:e2:77:84:9c:f6:40:15:4d:50:77:bf:
                    e3:ae:cb:bd:fe:0b:23:5a:3b:5d:13:74:4d:7d:79:
                    b6:a1:fc:24:bd:c2:2b:62:58:56:ba:88:98:13:48:
                    d0:30:21:db:30:97:65:b9:eb:13:88:8c:d9:0e:24:
                    35:05:e9:a3:3e:0f:72:fc:45:7e:59:02:7e:79:a1:
                    0b:2d:47:23:7e:fd:13:76:23:77:dd:14:03:1f:1c:
                    01:4c:a7:b6:8b:93:8b:4e:2d:11:a2:42:02:9c:43:
                    7c:67:ba:8b:cf:a7:d6:c3:69:53:6f:73:49:7f:20:
                    69:3a:3e:5f:95:81:97:84:0f:76:3e:00:74:a7:7c:
                    32:21:0a:5f:60:56:52:a3:2a:fe:8f:f6:25:e2:1a:
                    ce:8a:19:42:82:3c:76:fd:de:43:14:e9:46:ce:3f:
                    64:fc:c5:95:e2:28:b7:c7:c9:8b:70:70:83:0a:13:
                    71:0c:e3:02:90:3e:ca:e8:c1:96:3b:67:cb:00:d7:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EB:B3:EC:96:01:8E:88:67:24:C0:4E:A6:3C:C9:91:26:A2:3E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/02f28d49-392f-3b75-abb1-5c5ff4160971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:56:bf:68:be:98:6c:67:6a:e4:9c:f0:51:c5:4d:4d:d5:96:
         28:b3:6b:da:ed:1f:7c:15:e6:d5:72:5d:10:96:6a:35:b8:e4:
         43:b1:7e:cb:16:a5:c4:6c:55:0c:99:29:63:4e:57:66:db:45:
         5d:f6:6e:19:5d:95:46:3c:b2:cc:6b:ad:88:24:cb:95:3a:fb:
         43:d3:02:77:99:ac:aa:1a:9f:65:cc:ef:52:ef:df:a8:7d:63:
         66:2f:4a:a2:61:38:22:32:9a:6a:5b:98:2a:9f:e8:8c:d4:1b:
         b4:16:75:96:cf:40:ad:bd:02:0f:6d:d0:86:e5:af:55:1d:ec:
         60:0b:12:a5:be:fd:31:69:72:fa:1f:6c:c9:b9:08:93:6a:c4:
         47:49:33:c5:73:f8:56:18:32:e3:78:93:48:6e:50:82:3a:58:
         5d:7b:d8:d8:60:63:73:4e:02:e2:90:e7:0b:eb:28:db:ac:b9:
         ba:93:03:33:77:4c:f6:49:28:4d:13:72:15:22:3b:b4:4d:c3:
         6d:6c:69:44:51:2e:2f:a2:26:7a:ee:b9:71:9c:e5:20:58:f8:
         c5:74:6b:a2:9f:58:f2:88:cc:e3:3d:6f:ad:a0:f0:16:92:45:
         5a:1f:cc:81:de:2d:dd:c6:ec:22:d6:62:8d:44:0e:a6:02:89:
         dc:f8:db:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:06 2025 by rpki-client