Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21b90b06-0562-3166-bb24-55d7c6c64755.roa
File:                     21b90b06-0562-3166-bb24-55d7c6c64755.roa (raw, json)
Hash identifier:          9OAJJyzwp7Ao+tHVl9uxs9N8Dtuh9tlkMBUc0uwDM9Y=
Subject key identifier:   FD:5A:27:48:CA:4D:7E:AB:00:E5:AA:55:4F:C4:CA:1E:25:44:A2:BA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C57EA4F0C84EB10F2C66DBC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21b90b06-0562-3166-bb24-55d7c6c64755.roa
Signing time:             Tue 04 Feb 2025 13:56:18 +0000
ROA not before:           Tue 04 Feb 2025 13:56:18 +0000
ROA not after:            Mon 05 May 2025 12:56:18 +0000
asID:                     30036
IP address blocks:        150.195.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:7e:a4:f0:c8:4e:b1:0f:2c:66:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:56:18 2025 GMT
            Not After : May  5 12:56:18 2025 GMT
        Subject: CN=31786665-766e-42eb-ab1b-f96b1a182870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0f:ea:27:d2:74:25:1e:73:94:69:57:0d:31:
                    98:4f:51:b1:21:fa:c5:36:94:df:99:8c:34:5f:ca:
                    ed:1a:6f:8d:01:34:b3:28:24:1a:c3:de:5d:80:44:
                    2f:df:42:6a:67:d9:f6:65:48:94:a3:3e:e8:2b:39:
                    e7:08:01:fb:f4:b5:8d:fb:71:f5:18:4c:03:6d:8f:
                    82:ea:84:97:75:0d:0f:f8:5e:58:bf:62:48:5d:39:
                    89:2c:dd:44:44:23:eb:1e:ab:8f:1c:5f:f0:f4:fd:
                    aa:74:61:fc:1a:4c:b3:3c:6c:36:7f:f1:da:1b:b2:
                    b5:21:b6:08:cd:6a:ab:e8:a2:6a:cd:fb:00:7c:63:
                    5f:0e:2a:7d:ad:8c:6b:de:6e:61:d3:3d:5f:d4:27:
                    11:be:d2:15:46:e0:c8:68:7c:30:e6:3c:f0:9e:30:
                    41:9e:01:ac:05:8f:36:53:f9:3c:d2:0e:86:1d:6c:
                    d2:14:45:f0:84:95:2a:fa:1d:a9:46:1d:74:b3:ee:
                    c1:3c:9e:92:2b:50:e1:e0:1b:17:6e:40:79:3e:7c:
                    4b:35:ee:1e:34:e0:51:f9:c4:b5:47:ae:32:3d:2d:
                    b8:d1:c9:e2:8b:0d:8a:4a:f4:9b:65:0c:ab:d6:3a:
                    9e:b7:f9:30:c4:2c:5b:a3:42:46:10:49:ea:35:41:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5A:27:48:CA:4D:7E:AB:00:E5:AA:55:4F:C4:CA:1E:25:44:A2:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/21b90b06-0562-3166-bb24-55d7c6c64755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:eb:8f:1b:c1:71:8d:e8:b8:c4:60:58:a6:97:84:72:15:fb:
         37:45:bd:d5:f4:4a:34:7f:90:da:ec:50:c2:35:bb:96:73:b9:
         4d:5d:5e:bc:e3:9b:ed:5a:e3:00:1e:fa:d7:7b:d4:79:eb:69:
         f6:83:ba:3a:77:c8:79:18:c4:a0:cc:33:ce:b9:7b:de:71:13:
         ba:80:76:22:41:72:a7:36:08:f8:8f:be:bc:e0:f8:8a:e6:23:
         3e:c4:3e:07:10:3a:df:a3:6c:da:28:7e:d1:c7:cd:6d:a3:bb:
         46:e2:9c:5a:ca:cd:18:24:88:10:b2:69:4d:85:62:6a:83:b3:
         bd:76:c5:c0:37:29:78:28:ab:4b:f6:7d:f6:88:37:3b:bc:0b:
         57:b6:5a:4a:52:f3:97:95:88:be:73:88:c8:f2:fe:22:3e:f5:
         c4:4c:cc:39:f0:36:4d:bb:98:58:b5:84:f6:56:ec:1b:d1:29:
         53:4a:98:18:f3:3a:32:7b:7a:d9:16:3c:d2:25:5c:10:ba:6c:
         93:a0:9b:a3:5c:0e:16:22:7d:ea:f0:31:24:7c:e1:41:ee:e8:
         64:44:c5:c1:62:74:fc:59:db:26:d7:8d:49:bc:5d:10:49:15:
         12:15:b4:4e:84:4c:6b:d0:d5:71:c7:50:e4:02:28:35:cc:56:
         10:f6:e3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:47 2025 by rpki-client