Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49431d1c-9765-3ede-b773-b854aff9b34a.roa
File:                     49431d1c-9765-3ede-b773-b854aff9b34a.roa (raw, json)
Hash identifier:          86MsiusWqoQxp2j1oPbgZnl4oCJesZcKnGItwReAvDo=
Subject key identifier:   BA:57:5D:F2:83:65:D7:D9:D7:E6:43:94:31:F3:4A:45:6E:B2:05:04
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7FD6F4B4C7BDD0C921C2080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49431d1c-9765-3ede-b773-b854aff9b34a.roa
Signing time:             Wed 05 Feb 2025 11:23:23 +0000
ROA not before:           Wed 05 Feb 2025 11:23:23 +0000
ROA not after:            Tue 06 May 2025 10:23:23 +0000
asID:                     30036
IP address blocks:        173.27.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:fd:6f:4b:4c:7b:dd:0c:92:1c:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:23:23 2025 GMT
            Not After : May  6 10:23:23 2025 GMT
        Subject: CN=d9a47f2d-14af-4915-868d-6756f0fe7d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:6d:61:ef:c2:da:7f:cd:f8:8e:74:7d:91:
                    7c:13:e8:3f:90:80:92:01:7e:57:9a:54:bc:71:06:
                    04:3d:cc:a6:05:e8:b7:2c:e6:e9:b8:59:85:b2:8e:
                    db:81:de:c3:9f:11:e6:0d:f2:cb:e8:25:8b:9a:23:
                    7e:54:ab:ad:ab:71:e9:04:0c:85:fb:d6:c3:70:92:
                    83:b1:03:ef:38:9f:ff:1a:e8:99:06:76:32:bd:04:
                    a7:65:26:c4:44:37:1b:4d:6a:c6:a8:76:c5:0d:1b:
                    8e:b6:49:b8:43:78:a5:cc:3e:82:c2:c4:02:bf:20:
                    d5:78:b0:14:dd:2f:dd:7c:e3:a7:24:6c:3a:72:74:
                    8d:6d:ef:95:17:40:2b:b0:ea:e7:f9:8c:69:6c:f6:
                    12:5a:0a:c6:7a:0a:12:34:40:b3:78:85:5c:d7:c0:
                    e6:04:76:ff:bf:13:53:45:6e:18:83:2a:82:ee:cb:
                    d2:ce:12:90:74:56:37:b4:af:14:4f:7f:df:01:dc:
                    60:d1:03:81:31:56:a1:c6:bb:7c:46:c7:5a:77:61:
                    bd:43:3d:a9:44:43:c6:90:41:46:e7:7e:b9:b2:98:
                    3b:6b:23:4b:00:b3:1d:ff:cb:0a:f2:78:4d:3a:97:
                    78:0a:7b:1a:06:40:50:08:17:2f:c7:ff:67:d5:70:
                    aa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:57:5D:F2:83:65:D7:D9:D7:E6:43:94:31:F3:4A:45:6E:B2:05:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49431d1c-9765-3ede-b773-b854aff9b34a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b3:e6:37:59:c9:52:90:ca:09:11:dc:c0:81:e8:c6:52:86:
         50:15:10:a2:64:23:38:a6:2c:0c:73:50:d3:5d:2d:f0:1e:7e:
         e1:41:cb:7c:18:a2:f6:0a:97:c3:a1:9a:d0:9b:eb:99:3d:39:
         b1:85:02:58:e2:01:b8:8c:78:b0:32:d7:a5:62:46:ac:83:d0:
         af:c6:ad:19:79:88:dd:f1:f2:a5:6e:3d:e3:19:72:6b:a7:94:
         d4:27:9f:a4:f9:43:b9:93:3c:38:a5:a0:2c:af:ec:36:97:80:
         13:0f:a2:a3:66:07:31:e2:37:ab:cd:41:08:0c:87:7c:c1:49:
         df:98:06:2a:2c:59:7f:d7:4d:6c:6f:6c:5e:e6:ac:b6:a3:7a:
         a5:4b:db:81:7e:04:25:e2:dd:1b:61:6a:5c:43:58:10:4e:7e:
         e7:c9:d8:88:d5:ec:d6:6d:ff:b4:a2:e7:14:a6:b8:76:c7:e7:
         2f:be:97:0b:e0:06:a1:52:55:9f:c5:03:5b:f1:af:9e:e3:f6:
         23:81:a3:18:34:2e:04:c5:a5:4e:98:90:c6:d4:91:57:57:2c:
         d7:86:44:f0:6a:54:ab:7b:14:22:72:4e:cf:bc:1b:17:e1:81:
         7d:8c:75:dd:24:cb:d4:36:a9:ec:d7:70:4a:40:87:70:b7:99:
         28:fb:15:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:14 2025 by rpki-client