Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/471c59d0-6bd0-39df-aa8d-eed1966b95bf.roa
File:                     471c59d0-6bd0-39df-aa8d-eed1966b95bf.roa (raw, json)
Hash identifier:          2nEJDuNZBuJurGv0dWRdWqDxeuZbyEavSALWt0zErMs=
Subject key identifier:   61:E8:44:73:7D:DB:45:93:49:99:92:CE:37:7B:6D:02:CD:BD:37:2E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C261A7FCC38E75641450C950
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/471c59d0-6bd0-39df-aa8d-eed1966b95bf.roa
Signing time:             Mon 03 Feb 2025 11:10:28 +0000
ROA not before:           Mon 03 Feb 2025 11:10:28 +0000
ROA not after:            Sun 04 May 2025 10:10:28 +0000
asID:                     30036
IP address blocks:        173.18.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:61:a7:fc:c3:8e:75:64:14:50:c9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:10:28 2025 GMT
            Not After : May  4 10:10:28 2025 GMT
        Subject: CN=b79940e9-fbd8-413f-9a6c-3f7b5b43f3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:a5:7e:b9:85:47:b9:68:d4:38:ce:87:1b:
                    25:19:f1:a9:c4:dc:cf:24:a1:04:1b:4a:d7:3d:fc:
                    f7:75:cb:72:e4:e1:45:6a:d6:59:fd:c5:f0:13:54:
                    f4:28:d2:61:fb:f6:9c:1f:aa:ad:dd:7a:fe:71:f8:
                    51:01:ee:78:01:2e:0d:b8:b5:e0:5d:35:07:e8:e0:
                    85:0a:e0:71:ce:80:57:d0:92:d4:bf:0f:06:cd:ed:
                    c4:b7:8f:dc:ae:40:01:72:4a:2f:fe:7a:90:cb:16:
                    aa:5b:d2:28:c1:0f:6c:27:ca:8d:b5:ff:6e:a7:82:
                    44:c6:ee:84:b1:ba:02:bc:4f:1f:a9:34:2d:6d:95:
                    ff:14:89:23:46:85:32:2f:3e:01:da:b0:0a:c1:87:
                    f2:bb:b0:42:83:6b:52:b9:f1:60:30:37:24:26:8b:
                    72:9b:0f:a5:c2:56:6f:2b:c3:54:21:3d:ee:bf:21:
                    27:9e:2a:9c:8a:95:91:12:9e:3a:45:bb:c1:0d:6e:
                    83:a7:70:fb:fb:df:28:6c:d0:cb:bf:b3:29:51:8c:
                    ad:0f:90:f2:26:cf:96:83:c0:2b:12:aa:cb:0f:e4:
                    56:ef:ef:8c:ca:bd:1d:ec:38:54:de:8d:08:cc:db:
                    f4:04:20:bb:6d:73:c9:0f:e3:f2:97:30:c2:b3:4e:
                    a2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E8:44:73:7D:DB:45:93:49:99:92:CE:37:7B:6D:02:CD:BD:37:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/471c59d0-6bd0-39df-aa8d-eed1966b95bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:de:72:e6:af:f6:08:82:7a:80:c3:3b:b9:3c:77:2d:26:e8:
         26:9b:9d:e0:20:55:d4:3d:14:a4:4d:f4:9d:6b:32:ac:0c:11:
         9b:52:c8:98:b8:48:4f:ae:f2:f2:f1:4d:46:7c:7f:dc:74:69:
         07:32:22:f7:52:cd:17:9a:ce:9c:75:8e:14:9f:19:f5:5a:25:
         bf:ce:00:c9:1b:cd:6e:aa:c6:fa:cf:b3:0d:38:b4:ad:3f:02:
         9c:b1:f1:6a:ab:c7:01:41:1e:d8:ec:f1:41:6a:b9:1e:8f:53:
         a0:ef:9e:bf:21:ff:48:2d:13:ae:23:b5:86:b2:f0:66:35:4c:
         9c:7d:38:4c:d0:ec:07:bd:aa:5e:f0:39:bb:89:92:fb:82:e4:
         02:05:61:1e:65:57:5e:cb:76:ea:87:d7:b8:54:ca:f8:48:c5:
         df:49:73:ca:85:57:f9:53:db:a9:38:e1:47:66:0f:0b:e6:69:
         69:1d:5a:66:c3:15:ed:3e:72:45:33:d7:2c:54:26:cc:65:ed:
         7e:61:28:bd:e2:63:45:31:37:2b:be:40:f8:e1:d8:d6:53:f2:
         ea:ae:2f:d5:c0:00:7c:b9:cd:46:75:8b:b0:89:fb:49:74:65:
         d6:8f:96:e8:30:47:e4:39:48:36:66:bb:4b:ab:67:46:81:48:
         44:17:23:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:33 2025 by rpki-client