Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/180c4b92-9f55-310c-a30b-f75ca4e89346.roa
File:                     180c4b92-9f55-310c-a30b-f75ca4e89346.roa (raw, json)
Hash identifier:          rcpLji0Y7MdsVyfJqglIqGkE0Bjc6tmweTD042CAsIE=
Subject key identifier:   26:FC:81:40:F6:98:22:9B:7B:F3:3C:5E:44:99:48:CD:0B:4D:E0:1B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C261A0E7FB998B3EDC64BE40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/180c4b92-9f55-310c-a30b-f75ca4e89346.roa
Signing time:             Mon 03 Feb 2025 11:10:25 +0000
ROA not before:           Mon 03 Feb 2025 11:10:25 +0000
ROA not after:            Sun 04 May 2025 10:10:25 +0000
asID:                     30036
IP address blocks:        173.17.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:61:a0:e7:fb:99:8b:3e:dc:64:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:10:25 2025 GMT
            Not After : May  4 10:10:25 2025 GMT
        Subject: CN=075c2c18-db3f-466d-89b7-42e5f1a3e3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1c:79:c7:4d:6e:d4:85:2b:31:d8:3a:1e:2c:
                    73:6b:93:ce:26:d1:81:0b:46:c5:91:32:8c:a2:07:
                    0c:cb:4d:44:2b:e9:d3:3d:d9:4d:a7:34:46:c5:12:
                    1d:cc:96:2e:7f:94:a3:f7:de:93:1b:73:6b:b5:d5:
                    d6:3b:0f:49:e5:7f:ae:41:df:08:63:2f:5f:f0:a4:
                    5d:14:ba:26:c8:9a:9b:79:3f:55:8e:7f:ad:a6:82:
                    a1:ba:a1:34:29:f1:64:f9:7a:ee:14:78:19:01:16:
                    46:f1:a6:fe:c0:49:b2:5d:ac:e6:af:9e:3b:cb:98:
                    ed:c9:bc:5c:00:90:d6:32:a4:9a:eb:e6:f0:fd:86:
                    ba:9f:c1:12:ac:ad:d5:8a:5a:fb:ca:c4:9b:9c:a7:
                    2c:8b:cb:ea:4e:f5:20:58:09:fd:d5:a6:25:29:83:
                    d9:fa:a7:e3:97:fc:b3:42:83:95:dc:d0:8a:04:2e:
                    eb:31:cc:35:9e:5c:83:02:50:80:19:02:64:be:69:
                    a2:da:96:b4:8f:94:81:2e:b4:b5:f5:00:93:6a:dd:
                    6d:a5:43:73:4f:a4:f1:91:e7:6b:05:97:68:87:e1:
                    d4:e7:91:ca:1d:59:17:3c:52:ac:d6:8b:9d:26:1e:
                    fa:bd:bd:e5:aa:e1:9f:95:86:be:ed:4e:da:59:a8:
                    6d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FC:81:40:F6:98:22:9B:7B:F3:3C:5E:44:99:48:CD:0B:4D:E0:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/180c4b92-9f55-310c-a30b-f75ca4e89346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ff:41:1a:d1:26:fc:09:1c:a7:1d:b1:d0:98:76:35:7f:09:
         2c:95:34:e9:46:3c:71:7b:75:34:c9:69:af:d6:12:6b:93:76:
         83:0e:35:eb:9a:f6:63:11:df:5c:b0:c1:d2:9a:10:52:de:86:
         ed:8e:90:26:94:47:ec:c3:48:81:8f:d8:77:44:32:cb:b0:dd:
         88:57:2d:f6:12:0d:07:54:88:9d:d2:03:71:25:99:77:35:f6:
         27:51:35:9a:25:0f:06:c9:16:34:c1:7b:6d:fa:9b:cf:fe:b6:
         3c:7e:3a:47:16:cd:80:0c:d4:a6:cf:8a:c9:ec:95:49:79:96:
         c9:ff:c3:b7:6d:1f:d7:eb:d2:f9:d0:86:99:d0:34:ea:8b:94:
         fb:34:b1:dd:8a:50:31:1f:04:75:e3:63:43:83:83:72:87:48:
         73:5f:1a:06:cc:d4:b8:11:cb:a9:27:03:95:fa:52:ef:0a:8a:
         c4:9b:26:c5:98:7a:cd:07:ab:de:8a:b3:75:53:27:6c:9b:a2:
         99:d8:ee:cb:4a:2a:3b:11:9d:10:47:a3:03:a2:d7:e7:0f:1a:
         d9:3d:7d:25:13:84:3b:7f:ba:02:1e:39:98:9c:d4:4b:8a:7c:
         75:97:b1:c5:4e:9e:7d:38:a6:05:10:5f:bf:63:bc:79:55:00:
         0f:d9:9c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:14 2025 by rpki-client