Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/46e57844-4b4f-3f79-8ab9-e40d1e6ca513.roa
File:                     46e57844-4b4f-3f79-8ab9-e40d1e6ca513.roa (raw, json)
Hash identifier:          isDBYziP11FnrBYSCsEHoqjx+bs4X3cLgUPf8BsH4mk=
Subject key identifier:   AC:4F:BA:5A:01:BC:EA:B6:2B:9A:2D:CE:50:C5:C4:C9:39:B9:AD:C5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C53279D2A16687F1E2C62D31
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/46e57844-4b4f-3f79-8ab9-e40d1e6ca513.roa
Signing time:             Tue 04 Feb 2025 11:22:50 +0000
ROA not before:           Tue 04 Feb 2025 11:22:50 +0000
ROA not after:            Mon 05 May 2025 10:22:50 +0000
asID:                     30036
IP address blocks:        173.16.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:32:79:d2:a1:66:87:f1:e2:c6:2d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 11:22:50 2025 GMT
            Not After : May  5 10:22:50 2025 GMT
        Subject: CN=9726f3b6-a7b2-49af-b23b-c56ea83078b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:01:ad:9f:8b:b5:0e:eb:27:83:6a:27:54:
                    10:6f:c5:14:4e:e4:11:1d:2d:0b:62:e9:38:24:ea:
                    99:0c:d8:05:2e:c3:75:24:c7:d5:30:13:3f:d2:88:
                    79:0d:98:79:d9:41:19:04:e0:ae:5c:fb:60:e2:fe:
                    a5:3e:0a:91:75:98:98:bb:ee:e6:74:19:3b:c0:8e:
                    ac:20:9e:88:80:ec:f7:e9:89:9b:ec:4a:4f:2f:2e:
                    b6:0e:09:a1:01:1c:fa:e1:51:35:7c:73:b6:88:50:
                    5e:28:0f:cb:73:1c:a2:d5:21:68:97:44:b4:d4:48:
                    d1:b7:62:ff:b3:38:8e:65:06:45:3c:eb:a2:8b:ce:
                    f4:1d:e5:80:82:03:ef:ef:b8:26:95:64:0d:23:ca:
                    93:a6:af:67:2d:90:55:28:72:0b:1c:71:89:e3:5d:
                    2f:a0:96:b7:7b:60:56:2c:fd:57:51:1a:c2:ff:d4:
                    ac:d9:fd:95:08:cb:25:86:11:8f:d9:c1:eb:e7:96:
                    94:4f:2d:80:56:a9:99:53:fa:bc:85:28:83:5d:85:
                    25:ad:5b:e8:63:c6:b2:4f:d4:f9:5d:aa:83:5d:c4:
                    d2:33:6e:24:68:7c:0d:30:d4:a6:88:00:45:76:d9:
                    cb:8d:7f:ab:fc:8f:a7:8d:57:79:de:0b:94:b1:91:
                    da:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4F:BA:5A:01:BC:EA:B6:2B:9A:2D:CE:50:C5:C4:C9:39:B9:AD:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/46e57844-4b4f-3f79-8ab9-e40d1e6ca513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:8a:1e:49:4f:dc:c8:54:d5:4b:82:66:58:2a:74:88:ed:fc:
         20:1c:9d:f4:4e:9a:57:33:6d:98:81:73:b3:5c:a5:85:12:69:
         51:61:e8:f3:e7:a6:bf:6d:5c:34:04:97:31:9c:85:ba:5e:83:
         ad:e6:cf:70:98:37:7a:ca:8b:6c:3e:c9:22:fd:b5:9c:ba:1f:
         78:b8:87:33:7f:8c:2c:68:93:40:43:ce:77:93:e8:d5:e6:df:
         fa:cc:7a:06:81:61:0c:4d:cc:7b:2c:ed:25:97:d3:dd:18:7f:
         f0:de:69:93:2b:1b:81:22:3a:b2:08:1d:07:a9:55:76:d7:80:
         31:4d:01:3a:a8:18:5e:de:70:9a:0d:6c:9c:a0:98:c2:90:2d:
         e9:47:81:59:7c:ad:c8:de:c2:c4:70:71:0e:21:7d:c0:f3:9f:
         bf:c4:93:9f:95:87:07:20:10:8f:77:46:d4:3a:52:53:f1:3d:
         c2:1e:1c:e3:26:35:c1:1b:0c:3c:a5:a8:00:0a:f1:50:ed:68:
         26:fc:fa:89:e1:36:cf:d6:43:0b:e5:40:59:27:a9:26:39:b5:
         21:96:f6:e2:b4:d5:9f:6a:c0:eb:84:8c:a2:f7:65:df:b7:bb:
         0a:58:c3:08:a3:04:6e:3a:55:8e:3c:d0:ab:25:98:db:67:1f:
         78:26:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:10 2025 by rpki-client