Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a1b9c77-7843-3213-937f-45d64b26f06b.roa
File:                     4a1b9c77-7843-3213-937f-45d64b26f06b.roa (raw, json)
Hash identifier:          Vpr+21pu5cEjvUDTX/oPttIaqenct8khbkfSRhxSvu8=
Subject key identifier:   87:7B:0B:28:A1:F7:56:DE:F4:6E:1F:25:56:96:E2:76:D0:AB:C5:02
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C261B641FD4001E0E860F9A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a1b9c77-7843-3213-937f-45d64b26f06b.roa
Signing time:             Mon 03 Feb 2025 11:10:35 +0000
ROA not before:           Mon 03 Feb 2025 11:10:35 +0000
ROA not after:            Sun 04 May 2025 10:10:35 +0000
asID:                     30036
IP address blocks:        173.19.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:61:b6:41:fd:40:01:e0:e8:60:f9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:10:35 2025 GMT
            Not After : May  4 10:10:35 2025 GMT
        Subject: CN=5f9f4669-d0c9-41fe-b8d1-c58f7c87d8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:21:12:9c:13:65:a0:36:0b:f9:fd:49:b8:
                    82:d7:6d:75:f0:b2:8e:e9:76:22:ac:02:a0:9a:7c:
                    b6:d6:15:9e:7f:96:9b:eb:25:2d:d7:99:23:60:a8:
                    b2:7c:2a:7f:44:4c:ad:f2:f3:f1:83:41:c0:f2:cc:
                    d2:20:92:79:cb:ff:1b:51:bc:ba:a5:cc:cf:62:a8:
                    12:f2:91:03:17:85:e1:57:57:b2:bb:a4:56:bf:1c:
                    19:50:d8:20:69:e8:fc:54:17:44:db:8b:2e:02:c7:
                    c0:f6:d5:4c:ea:36:db:b0:d0:f8:c1:34:bf:05:a3:
                    6d:c7:1c:6c:07:50:67:a7:35:a0:df:95:b0:c4:4b:
                    27:25:5d:d0:74:98:b1:e4:db:09:98:54:3d:c6:00:
                    89:14:60:d5:3a:75:c3:32:de:fd:0e:70:f6:19:5f:
                    46:56:c2:66:72:4a:0c:93:94:df:f2:a4:ef:59:5d:
                    81:67:b9:0d:62:50:fa:1c:a0:bd:2e:dc:83:b4:49:
                    5e:0c:ae:e0:14:27:bd:67:65:92:92:0b:57:66:af:
                    cd:53:a9:d1:42:b3:94:c3:53:1e:fb:43:03:7c:d7:
                    56:57:43:aa:9b:d1:1f:5b:83:07:98:0d:21:90:d3:
                    48:73:64:6e:87:55:5b:25:75:a4:af:e6:aa:2f:ab:
                    ca:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7B:0B:28:A1:F7:56:DE:F4:6E:1F:25:56:96:E2:76:D0:AB:C5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a1b9c77-7843-3213-937f-45d64b26f06b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f7:bc:8f:c3:28:66:d2:1e:ad:60:df:6f:d2:43:14:40:14:
         87:10:f9:c8:19:13:8c:0e:8f:53:ae:de:eb:e6:29:10:86:ca:
         25:9f:17:a0:14:35:d8:c0:49:c9:8f:78:c7:c7:ef:c1:7d:00:
         99:f5:5d:34:99:a2:09:21:dc:26:06:6d:52:a5:d3:77:6a:4a:
         50:e0:27:ef:1a:8d:38:88:7c:26:7a:10:2c:67:ef:c9:54:f4:
         e2:22:71:43:ac:09:1e:f1:d8:01:a0:8e:c5:51:ae:50:c0:0d:
         86:78:4b:44:f7:0f:c8:18:7f:4b:5d:af:c1:1a:39:9b:2d:6e:
         95:59:b6:4d:82:8c:1d:09:4d:f0:35:fd:0c:ad:b3:74:ec:17:
         7e:eb:12:24:ec:91:f5:d7:89:dd:fd:e7:ea:df:9e:ef:49:43:
         94:6c:44:2a:fa:9d:1b:d8:d0:61:4c:9a:a4:cc:fe:a9:8e:db:
         65:a0:be:07:ed:5b:fb:4c:c5:0a:2a:89:0c:f0:15:56:a4:0c:
         a6:8c:70:05:3b:d4:66:b6:1b:26:3a:21:c1:a8:de:56:55:98:
         7b:63:79:72:2d:2c:e8:7e:75:e2:59:c4:14:9c:05:bd:ae:c6:
         1d:22:84:85:06:6e:38:98:70:81:08:51:23:d0:25:6e:4f:b1:
         1c:36:b4:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYbZB/UAB4Ohg+aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwMzExMTAzNVoXDTI1MDUwNDEwMTAzNVowLzEtMCsGA1UEAxMk
NWY5ZjQ2NjktZDBjOS00MWZlLWI4ZDEtYzU4ZjdjODdkOGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyQhEpwTZaA2C/n9SbiC12118LKO6XYirAKg
mny21hWef5ab6yUt15kjYKiyfCp/REyt8vPxg0HA8szSIJJ5y/8bUby6pczPYqgS
8pEDF4XhV1eyu6RWvxwZUNggaej8VBdE24suAsfA9tVM6jbbsND4wTS/BaNtxxxs
B1BnpzWg35WwxEsnJV3QdJix5NsJmFQ9xgCJFGDVOnXDMt79DnD2GV9GVsJmckoM
k5Tf8qTvWV2BZ7kNYlD6HKC9LtyDtEleDK7gFCe9Z2WSkgtXZq/NU6nRQrOUw1Me
+0MDfNdWV0Oqm9EfW4MHmA0hkNNIc2Ruh1VbJXWkr+aqL6vKnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFId7Cyih91be9G4fJVaW4nbQq8UCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGExYjljNzctNzg0My0z
MjEzLTkzN2YtNDVkNjRiMjZmMDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrROwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFf3vI/DKGbSHq1g32/SQxRAFIcQ+cgZE4wOj1Ou3uvmKRCGyiWfF6AU
NdjAScmPeMfH78F9AJn1XTSZogkh3CYGbVKl03dqSlDgJ+8ajTiIfCZ6ECxn78lU
9OIicUOsCR7x2AGgjsVRrlDADYZ4S0T3D8gYf0tdr8EaOZstbpVZtk2CjB0JTfA1
/Qyts3TsF37rEiTskfXXid395+rfnu9JQ5RsRCr6nRvY0GFMmqTM/qmO22Wgvgft
W/tMxQoqiQzwFVakDKaMcAU71Ga2GyY6IcGo3lZVmHtjeXItLOh+deJZxBScBb2u
xh0ihIUGbjiYcIEIUSPQJW5PsRw2tOw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:25 2025 by rpki-client