Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/483bd595-027b-3f08-b25b-e78e454174d5.roa
File:                     483bd595-027b-3f08-b25b-e78e454174d5.roa (raw, json)
Hash identifier:          a75HFIXuOaGKh97zcrbg5bgKHi9XF37fCbpaUI03x1Q=
Subject key identifier:   44:80:DF:2C:BB:27:B7:B4:4C:3F:7F:AC:0C:AF:AE:30:B7:48:03:75
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7FD0C5EFF94625304498218
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/483bd595-027b-3f08-b25b-e78e454174d5.roa
Signing time:             Wed 05 Feb 2025 11:22:37 +0000
ROA not before:           Wed 05 Feb 2025 11:22:37 +0000
ROA not after:            Tue 06 May 2025 10:22:37 +0000
asID:                     30036
IP address blocks:        173.17.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:fd:0c:5e:ff:94:62:53:04:49:82:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:22:37 2025 GMT
            Not After : May  6 10:22:37 2025 GMT
        Subject: CN=b5a28769-fd16-4c30-81b3-b4b2071de79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:67:7b:c7:45:0c:8a:20:85:71:fe:8d:fc:d5:
                    22:66:42:c1:8a:7e:c3:0a:18:a6:cd:b3:00:2f:b7:
                    44:46:e7:39:6e:af:3e:c6:48:30:d8:55:4d:3d:34:
                    6b:f1:13:8f:06:ca:ba:cb:b9:20:5c:3f:70:65:40:
                    60:bd:3f:4c:41:f7:b0:fc:02:63:c5:c9:26:be:bd:
                    09:ca:8c:3f:fb:06:1a:2a:65:14:f5:4b:75:c3:9d:
                    25:f0:cb:60:0b:62:ed:5e:72:64:d1:5f:70:89:0f:
                    49:44:bc:37:6f:3e:61:12:ee:ec:09:82:cf:bf:57:
                    75:6b:b0:bc:3d:fd:c4:bb:bc:33:b8:4b:56:31:62:
                    d5:91:e4:03:2b:db:48:87:f1:51:46:3c:30:4b:b9:
                    e0:e7:04:9a:1e:2c:53:2d:d6:56:70:63:73:f2:27:
                    97:7b:31:7d:84:8c:85:87:b4:52:ac:4c:a8:e1:96:
                    28:65:b9:30:e5:f2:cd:fb:a7:96:28:94:6f:c5:34:
                    f4:e8:86:4f:eb:dd:97:d1:34:c1:8f:95:37:21:41:
                    11:4a:89:7d:a7:72:7b:fc:9d:cd:cf:cb:8f:a6:a1:
                    fd:23:fb:aa:a3:71:99:6e:d1:f4:4c:76:49:34:3b:
                    ee:5d:bb:9d:5a:48:66:91:30:eb:24:e8:bf:c4:04:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:80:DF:2C:BB:27:B7:B4:4C:3F:7F:AC:0C:AF:AE:30:B7:48:03:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/483bd595-027b-3f08-b25b-e78e454174d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:4e:6a:bc:5c:b5:67:5c:3d:6a:fd:6d:09:cd:5e:29:73:
         47:7c:4c:67:88:56:5b:9a:08:01:ff:1d:f2:39:60:39:a7:86:
         8a:bd:e6:57:06:78:50:6a:51:95:c3:66:ca:2a:a8:09:f1:b3:
         99:93:3a:b3:ed:e9:1d:83:63:ee:b1:5e:cb:d8:47:57:5b:0e:
         31:e5:f4:33:d8:c3:af:33:70:fc:5a:b3:cf:92:68:18:52:ea:
         b7:47:b5:b8:b1:d1:e5:8c:23:33:41:ad:db:66:27:39:19:06:
         56:f2:69:bc:48:62:52:75:a1:4d:62:b5:0c:04:72:ca:ef:bf:
         9f:24:19:43:b7:62:c2:18:72:90:8e:80:ba:6d:63:91:78:23:
         a8:dc:17:15:95:d7:7f:da:4c:c6:c4:26:25:35:38:07:7e:ce:
         e9:48:8f:ab:91:f4:14:18:d7:3e:3a:39:d8:2c:e9:56:df:7e:
         62:e7:7b:71:25:54:07:7c:f2:ea:1e:06:d9:37:a4:ed:0a:08:
         b1:96:e3:3e:2c:dc:1c:aa:f0:86:d3:2d:0e:85:87:e0:94:bc:
         a6:07:9c:01:46:22:c9:03:a9:ba:34:29:53:2c:96:fb:f6:5d:
         54:99:c0:6f:02:70:73:16:94:31:0c:69:b2:65:14:cc:14:39:
         70:5f:3e:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH/Qxe/5RiUwRJghgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNTExMjIzN1oXDTI1MDUwNjEwMjIzN1owLzEtMCsGA1UEAxMk
YjVhMjg3NjktZmQxNi00YzMwLTgxYjMtYjRiMjA3MWRlNzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWd7x0UMiiCFcf6N/NUiZkLBin7DChimzbMA
L7dERuc5bq8+xkgw2FVNPTRr8ROPBsq6y7kgXD9wZUBgvT9MQfew/AJjxckmvr0J
yow/+wYaKmUU9Ut1w50l8MtgC2LtXnJk0V9wiQ9JRLw3bz5hEu7sCYLPv1d1a7C8
Pf3Eu7wzuEtWMWLVkeQDK9tIh/FRRjwwS7ng5wSaHixTLdZWcGNz8ieXezF9hIyF
h7RSrEyo4ZYoZbkw5fLN+6eWKJRvxTT06IZP692X0TTBj5U3IUERSol9p3J7/J3N
z8uPpqH9I/uqo3GZbtH0THZJNDvuXbudWkhmkTDrJOi/xASdpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESA3yy7J7e0TD9/rAyvrjC3SAN1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDgzYmQ1OTUtMDI3Yi0z
ZjA4LWIyNWItZTc4ZTQ1NDE3NGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrREQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwhTmq8XLVnXD1q/W0JzV4pc0d8TGeIVluaCAH/HfI5YDmnhoq95lcG
eFBqUZXDZsoqqAnxs5mTOrPt6R2DY+6xXsvYR1dbDjHl9DPYw68zcPxas8+SaBhS
6rdHtbix0eWMIzNBrdtmJzkZBlbyabxIYlJ1oU1itQwEcsrvv58kGUO3YsIYcpCO
gLptY5F4I6jcFxWV13/aTMbEJiU1OAd+zulIj6uR9BQY1z46Odgs6VbffmLne3El
VAd88uoeBtk3pO0KCLGW4z4s3Byq8IbTLQ6Fh+CUvKYHnAFGIskDqbo0KVMslvv2
XVSZwG8CcHMWlDEMabJlFMwUOXBfPvA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:55 2025 by rpki-client