Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/363ff87c-ea66-3649-8a78-abf913cf801c.roa
File:                     363ff87c-ea66-3649-8a78-abf913cf801c.roa (raw, json)
Hash identifier:          b9YEANl1Tu1OFjZUu8h2PslUqtcXGEn3BEm+NVgfCr4=
Subject key identifier:   27:69:41:AC:53:C7:13:64:91:6B:6E:B6:D2:10:95:48:08:3B:69:FF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C26208AC98FF3A0D66E63600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/363ff87c-ea66-3649-8a78-abf913cf801c.roa
Signing time:             Mon 03 Feb 2025 11:11:14 +0000
ROA not before:           Mon 03 Feb 2025 11:11:14 +0000
ROA not after:            Sun 04 May 2025 10:11:14 +0000
asID:                     30036
IP address blocks:        173.30.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:62:08:ac:98:ff:3a:0d:66:e6:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:11:14 2025 GMT
            Not After : May  4 10:11:14 2025 GMT
        Subject: CN=0dda56a4-310c-41ca-9b0a-eb1d3d28a47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b3:fe:59:8b:55:54:48:bd:86:b0:c9:c6:cb:
                    9b:a9:23:58:5b:04:e1:cd:57:84:27:1d:38:0d:6f:
                    77:81:cc:ca:7c:36:6c:0f:f3:08:4c:e1:cf:21:0d:
                    69:23:81:65:a6:a2:e6:3c:35:39:3c:e6:85:36:03:
                    a7:e9:2a:d0:f7:7c:e7:f7:d2:24:0c:7c:bc:9e:6d:
                    e1:ca:6f:87:3d:6a:b6:6e:0d:e0:1f:f2:86:e7:2b:
                    d4:3a:82:79:56:4b:09:9d:90:23:77:9d:ba:2a:12:
                    f7:28:65:79:8b:da:3c:49:fe:0b:7c:71:a6:b0:18:
                    36:9f:c1:44:0e:5f:0f:2a:21:a3:3e:4c:b8:36:e9:
                    2c:28:1d:19:31:da:76:51:b0:55:95:78:dc:f0:21:
                    3c:2a:c0:8a:e9:da:24:5c:d5:b2:5a:0b:7a:18:86:
                    ca:45:4b:c9:c3:c1:c2:34:b5:06:d6:29:70:ee:fa:
                    93:10:d4:69:71:b0:62:e2:aa:ab:37:e9:dc:f0:4c:
                    cb:01:f7:2b:fd:32:a9:36:fb:c4:fd:ea:3e:69:dc:
                    ee:aa:55:45:a1:55:ed:16:15:8f:c9:ae:95:f8:e6:
                    58:89:9d:10:86:fb:ab:e6:9c:2f:82:f2:4c:45:2d:
                    8f:e8:67:6e:fa:22:1b:21:1c:fa:c9:0f:1c:75:eb:
                    89:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:69:41:AC:53:C7:13:64:91:6B:6E:B6:D2:10:95:48:08:3B:69:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/363ff87c-ea66-3649-8a78-abf913cf801c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e0:c4:4e:9a:f0:1d:0c:88:f9:a3:59:ee:b0:7a:f8:90:3e:
         a5:73:f5:41:3e:ef:29:b1:a7:73:ad:b0:75:72:a5:e0:5e:cf:
         37:b5:0f:5b:4d:7d:90:0d:bb:b2:a3:ef:7d:fd:40:ad:ab:8d:
         ca:f3:56:4a:5b:b4:e4:6a:0e:2d:24:bd:cf:8e:19:eb:de:ed:
         7b:18:a5:53:04:31:e3:6b:98:28:78:cf:58:0a:7e:18:bb:a6:
         d4:48:f3:c0:c5:47:f0:c3:f7:2a:91:38:30:b7:dd:8a:45:b0:
         9f:da:00:d5:ca:8a:df:dd:98:01:f6:4e:fc:6b:57:28:d0:6c:
         53:8c:ab:5c:7f:75:67:04:8d:78:46:b4:8e:81:ae:c0:95:fc:
         f6:cf:b8:1f:13:f3:e2:3b:f1:c6:8e:01:21:34:a9:1d:53:49:
         67:c7:3d:cf:07:38:90:73:1a:92:fe:a8:e7:ab:0e:ac:da:60:
         d0:ac:c8:e3:d9:58:f9:02:69:1d:a4:2e:8f:c7:04:7b:07:f9:
         0e:c5:89:56:6f:f6:8c:cc:ad:d1:83:c6:e0:09:68:74:dd:f2:
         b2:c0:34:b4:70:80:da:d6:c7:9f:52:46:3e:fc:8e:97:50:d0:
         8d:09:bf:da:15:f6:a6:e3:3a:54:28:08:f8:11:ff:f6:69:b1:
         b0:74:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:08:51 2025 by rpki-client