Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30328aee-d8af-3064-b449-f2d583bc1a68.roa
File:                     30328aee-d8af-3064-b449-f2d583bc1a68.roa (raw, json)
Hash identifier:          amZMBY3njJl0wyGKWxtX4F5q/OJ4kJhQTTE6WNm3G08=
Subject key identifier:   1A:5C:DD:20:56:58:9E:9F:CD:0A:63:63:6B:4D:8D:68:73:CB:71:58
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5334852C0EF57BE9573C500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30328aee-d8af-3064-b449-f2d583bc1a68.roa
Signing time:             Tue 04 Feb 2025 11:24:28 +0000
ROA not before:           Tue 04 Feb 2025 11:24:28 +0000
ROA not after:            Mon 05 May 2025 10:24:28 +0000
asID:                     30036
IP address blocks:        150.195.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:33:48:52:c0:ef:57:be:95:73:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 11:24:28 2025 GMT
            Not After : May  5 10:24:28 2025 GMT
        Subject: CN=341fa9c8-5d2d-49bb-9101-3e6b620e4909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:04:ae:b9:ad:57:f3:ae:e4:27:96:67:8b:75:
                    60:9f:d3:3c:ac:92:8d:2b:6b:b6:7a:34:bc:98:89:
                    7d:be:a0:8d:7f:9c:35:3a:22:77:e3:7f:75:00:84:
                    63:0d:31:45:99:1c:5c:3f:18:08:08:7d:9d:d9:0a:
                    0d:f7:a1:27:a6:aa:e5:ca:5f:cb:29:fe:6c:87:6c:
                    21:0e:c2:61:d3:4f:0f:e2:9b:14:cd:9f:db:53:f1:
                    e3:e6:c9:67:82:51:94:aa:c7:53:bb:01:32:c5:3d:
                    9b:32:60:18:92:9a:75:04:1f:81:99:70:6c:b7:d8:
                    47:6e:9f:e3:2c:7a:3a:a3:42:20:16:fe:a5:2a:1c:
                    29:1c:62:65:b1:f2:05:d9:ba:2d:75:0e:b6:a1:61:
                    1b:fa:04:9a:7e:59:c4:f1:54:dc:0c:f9:ac:5f:96:
                    3b:02:67:f1:ee:3d:61:bb:bb:f8:3f:b2:0d:7e:2e:
                    96:20:6c:a1:c8:be:5a:bb:de:12:5f:d6:0f:90:1c:
                    65:99:1f:37:67:8a:71:4b:b7:16:95:7b:e1:0e:72:
                    52:4c:46:50:e5:7e:d6:ec:f8:63:a2:82:48:bd:28:
                    68:c2:77:f6:89:ca:88:10:41:da:68:79:f1:cb:b8:
                    e5:cd:e8:89:60:3b:de:cb:f0:4f:ab:ed:3b:cb:da:
                    28:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5C:DD:20:56:58:9E:9F:CD:0A:63:63:6B:4D:8D:68:73:CB:71:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30328aee-d8af-3064-b449-f2d583bc1a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3e:08:90:ff:f0:bf:f0:6b:4d:a0:be:1f:1e:c8:54:6a:f5:
         c2:4f:c4:19:0f:a9:ae:0b:0e:9c:c7:f4:02:50:a4:9a:da:8d:
         ef:25:57:98:19:d6:ea:21:41:73:dd:60:7b:ba:8f:b6:62:81:
         2f:dc:ee:a0:4f:cf:aa:a2:06:38:6e:8c:c1:e4:e3:6a:e7:db:
         dd:ec:32:b0:da:85:c3:4d:df:89:5f:3f:ca:79:72:a2:79:72:
         18:21:49:25:79:de:f1:d9:22:c8:07:a1:5c:a7:29:fd:ab:e1:
         56:94:2d:68:44:89:c6:60:8e:64:af:b0:03:a8:c8:6f:38:af:
         e6:12:37:ae:ea:f6:69:8c:bc:a7:2c:2e:42:62:10:53:24:7d:
         61:fd:ab:f9:e5:54:d4:38:91:8e:da:f4:a4:a8:45:48:86:f8:
         33:e8:f7:02:f9:96:18:39:23:26:e7:7a:90:81:bf:47:74:23:
         76:b6:8b:b8:c4:f9:f4:c2:88:d0:b6:b5:87:5a:8f:36:90:21:
         a5:11:77:ed:78:e1:a7:58:c9:16:4f:ad:28:9c:a3:bd:06:34:
         83:70:e2:29:8b:c6:b5:5f:b3:24:57:fb:7b:67:95:fc:10:ca:
         18:0b:b8:96:61:fc:ed:68:1e:26:2d:6a:90:58:71:f4:06:95:
         f0:f9:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:03 2025 by rpki-client