Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c5b6fb1-8bc2-357b-b3e8-c03d48add59f.roa
File:                     2c5b6fb1-8bc2-357b-b3e8-c03d48add59f.roa (raw, json)
Hash identifier:          NrQUh51xrv47WxYt176C4L467FAqD3PsdgTi+jsF998=
Subject key identifier:   46:AF:0A:FE:60:81:17:01:2F:E1:1A:BA:50:EF:AC:14:84:02:46:90
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7F5E0F122597D319A3F3300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c5b6fb1-8bc2-357b-b3e8-c03d48add59f.roa
Signing time:             Wed 05 Feb 2025 11:08:10 +0000
ROA not before:           Wed 05 Feb 2025 11:08:10 +0000
ROA not after:            Tue 06 May 2025 10:08:10 +0000
asID:                     30036
IP address blocks:        173.30.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f5:e0:f1:22:59:7d:31:9a:3f:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:08:10 2025 GMT
            Not After : May  6 10:08:10 2025 GMT
        Subject: CN=a13f35a4-a6db-42f6-915d-f471b167dcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:39:83:46:87:e0:83:5c:cf:91:d3:ea:59:
                    b9:07:43:eb:0c:0e:c1:b7:24:e7:b0:a9:8c:49:a3:
                    ea:7c:cf:3b:67:a2:f9:bb:a0:51:a0:ae:3c:bc:89:
                    4a:44:6c:fd:ff:8d:1e:54:e9:50:30:d5:91:0b:b2:
                    44:25:36:b8:b3:f0:8b:24:b4:dc:9f:ff:49:60:82:
                    a8:22:45:43:14:81:17:42:da:97:47:22:52:ad:ac:
                    4e:bf:56:81:d4:9c:41:89:e9:6e:0b:30:95:ff:21:
                    0a:5a:45:75:fc:4b:91:20:1a:36:3e:45:9b:40:d9:
                    8d:70:fb:4e:e7:67:9d:51:e4:c9:4e:f9:32:f6:46:
                    ed:ab:3d:73:7a:27:ac:9a:fe:8f:7a:d0:de:3b:4c:
                    e5:6a:cc:45:43:9f:5a:48:9d:0f:90:d3:06:04:dc:
                    9a:8a:72:02:d3:5f:f7:46:49:21:0d:2e:ec:b6:a9:
                    c3:63:a2:0c:f6:4a:6c:59:4e:e5:9f:13:0d:00:97:
                    49:8c:a7:f7:76:6d:89:7a:77:5e:91:3c:91:23:6f:
                    c5:d5:ef:92:37:4c:ea:b0:31:da:25:79:3a:12:65:
                    e0:82:6b:01:a6:be:11:d3:92:1b:b5:18:86:ac:12:
                    9f:0b:81:f8:55:e4:3a:42:b5:90:8e:db:4c:f1:ab:
                    1b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AF:0A:FE:60:81:17:01:2F:E1:1A:BA:50:EF:AC:14:84:02:46:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c5b6fb1-8bc2-357b-b3e8-c03d48add59f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:00:8e:83:85:3e:c9:96:16:cc:77:f3:e8:2d:c3:f4:d4:
         41:ea:f3:b8:ed:32:84:00:1c:d2:a6:5c:f4:3b:46:9e:ca:3a:
         a4:89:bd:a3:61:4f:cb:cf:ce:46:98:24:82:df:d2:98:ed:99:
         3d:75:30:da:ee:74:47:7b:d7:fc:b5:cb:92:f2:8b:e8:0c:49:
         c7:43:5f:fc:d2:f6:73:b3:0e:df:dc:fe:1d:4f:29:66:f7:d0:
         ee:f1:07:cc:6e:ab:e3:de:8d:cb:60:f4:9b:a9:8c:31:23:1a:
         c6:87:19:af:ec:c7:46:4d:62:46:74:3a:9f:a0:36:58:22:49:
         9c:fc:e7:67:af:1a:cb:6b:3b:68:0d:1d:60:c0:94:7f:e3:3f:
         ea:79:b2:c9:32:f2:f4:52:21:bd:82:8a:41:6e:32:a5:35:07:
         76:66:d1:78:27:b0:ce:38:03:c2:60:fb:26:9a:98:4e:98:00:
         2f:71:a2:95:be:2d:d4:96:67:df:aa:c4:41:93:75:e5:d5:ea:
         de:ec:22:21:db:8e:88:63:4c:91:2a:88:9f:d4:02:a8:3e:83:
         83:f8:b9:8c:6f:d1:21:a5:8e:f1:1f:12:e6:e9:40:bc:dd:d4:
         f2:5e:c7:4e:b1:98:78:1f:c3:89:45:00:31:6d:9e:68:91:5a:
         8e:82:e6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:53 2025 by rpki-client