Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/534612dd-997a-3e97-ae16-049f9eb0da68.roa
File:                     534612dd-997a-3e97-ae16-049f9eb0da68.roa (raw, json)
Hash identifier:          +yNB2oqWvrIoLTJE6TbbWAdvxC3o5fIsM+7I4apbESk=
Subject key identifier:   18:82:4D:F5:54:E1:B2:A9:78:B3:D3:A8:5F:2E:91:D0:B0:4B:A6:7B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C2632B063EA110BC2FC32800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/534612dd-997a-3e97-ae16-049f9eb0da68.roa
Signing time:             Mon 03 Feb 2025 11:13:31 +0000
ROA not before:           Mon 03 Feb 2025 11:13:31 +0000
ROA not after:            Sun 04 May 2025 10:13:31 +0000
asID:                     30036
IP address blocks:        173.20.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:63:2b:06:3e:a1:10:bc:2f:c3:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:13:31 2025 GMT
            Not After : May  4 10:13:31 2025 GMT
        Subject: CN=5a070ce2-b4d6-4e3e-9f53-3dc09abdb423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1d:41:2a:67:e2:e4:98:0c:e5:48:76:d2:6c:
                    31:d6:10:25:a3:28:76:80:98:59:70:35:7f:7e:fe:
                    85:9f:b0:0f:19:21:7d:0f:a6:87:c1:26:05:1b:5d:
                    7f:0d:bc:eb:c8:20:07:88:a7:05:ee:62:18:60:79:
                    ab:6c:75:a0:15:02:d8:b0:de:92:c4:33:6c:ce:41:
                    5b:a5:bb:63:e8:6a:6e:33:cd:e2:e4:3e:96:69:18:
                    42:98:5a:09:59:27:7a:b4:68:9a:3c:6d:56:bf:55:
                    e6:8f:29:64:9a:09:98:b1:93:1e:07:8c:ab:1a:64:
                    70:05:81:d6:06:b7:3b:87:32:60:55:11:de:61:77:
                    13:53:b3:dc:51:1e:00:f4:4c:89:2f:e1:76:94:b3:
                    b2:93:b5:e4:a1:7a:70:e8:ed:c7:43:d1:10:07:bd:
                    4d:02:95:4d:f3:3f:00:aa:b7:1d:26:40:42:0a:89:
                    25:53:48:b3:12:d5:9b:8d:c5:be:4e:30:e4:23:1b:
                    d6:71:60:c1:04:19:d0:30:14:1f:7f:64:50:b9:1a:
                    0e:9d:d0:44:b3:d2:71:2c:6f:5e:21:c1:d3:57:0d:
                    50:1f:a4:68:59:a7:dd:99:92:a6:c1:2b:f1:ad:c1:
                    08:a2:b2:7d:1b:ee:f3:2e:6a:4d:79:16:38:56:25:
                    5e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:82:4D:F5:54:E1:B2:A9:78:B3:D3:A8:5F:2E:91:D0:B0:4B:A6:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/534612dd-997a-3e97-ae16-049f9eb0da68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3f:86:e8:cf:05:5f:48:49:10:cc:12:bf:42:e6:ab:ea:d5:
         30:fc:56:75:09:ac:ea:2c:d8:7d:f0:6d:c9:23:5c:cf:08:b8:
         0e:14:ac:45:38:fe:80:da:87:1a:24:2a:cd:d8:62:70:50:12:
         af:cb:1d:a2:bf:b4:ef:8a:37:70:33:6b:2b:01:7c:ae:9b:6b:
         df:e8:0b:01:e9:72:81:3b:21:dc:db:2c:7a:80:7e:9f:e5:c9:
         9d:f0:4c:52:21:72:65:35:31:12:ba:39:9e:10:f2:8d:a7:6e:
         c1:1a:54:e6:72:51:6d:85:b0:26:12:57:a8:22:26:a3:09:1c:
         a6:f3:77:9b:49:06:c3:8c:e5:59:0e:49:d7:bb:54:2a:d9:ba:
         4c:0e:00:21:3b:7c:85:93:18:6f:4b:79:8e:26:5e:b2:67:65:
         50:c9:6e:20:6b:c0:8d:46:ed:00:3c:c8:5a:c8:4f:be:48:b1:
         e9:6a:59:19:43:8c:10:66:69:c3:a3:e4:4c:c3:0a:f8:ff:bf:
         db:95:5a:6a:93:c9:7f:d1:6d:49:d2:da:ec:97:a5:48:85:03:
         9c:14:11:ab:fb:e7:a5:1e:04:ac:48:f0:82:d4:9c:80:53:bb:
         b2:98:c7:d0:c2:2a:60:95:0f:a3:d6:54:51:5c:f2:36:58:3c:
         8f:d7:73:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYysGPqEQvC/DKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwMzExMTMzMVoXDTI1MDUwNDEwMTMzMVowLzEtMCsGA1UEAxMk
NWEwNzBjZTItYjRkNi00ZTNlLTlmNTMtM2RjMDlhYmRiNDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh1BKmfi5JgM5Uh20mwx1hAloyh2gJhZcDV/
fv6Fn7APGSF9D6aHwSYFG11/DbzryCAHiKcF7mIYYHmrbHWgFQLYsN6SxDNszkFb
pbtj6GpuM83i5D6WaRhCmFoJWSd6tGiaPG1Wv1XmjylkmgmYsZMeB4yrGmRwBYHW
Brc7hzJgVRHeYXcTU7PcUR4A9EyJL+F2lLOyk7XkoXpw6O3HQ9EQB71NApVN8z8A
qrcdJkBCCoklU0izEtWbjcW+TjDkIxvWcWDBBBnQMBQff2RQuRoOndBEs9JxLG9e
IcHTVw1QH6RoWafdmZKmwSvxrcEIorJ9G+7zLmpNeRY4ViVe+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBiCTfVU4bKpeLPTqF8ukdCwS6Z7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTM0NjEyZGQtOTk3YS0z
ZTk3LWFlMTYtMDQ5ZjllYjBkYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABE/hujPBV9ISRDMEr9C5qvq1TD8VnUJrOos2H3wbckjXM8IuA4UrEU4
/oDahxokKs3YYnBQEq/LHaK/tO+KN3AzaysBfK6ba9/oCwHpcoE7IdzbLHqAfp/l
yZ3wTFIhcmU1MRK6OZ4Q8o2nbsEaVOZyUW2FsCYSV6giJqMJHKbzd5tJBsOM5VkO
Sde7VCrZukwOACE7fIWTGG9LeY4mXrJnZVDJbiBrwI1G7QA8yFrIT75IselqWRlD
jBBmacOj5EzDCvj/v9uVWmqTyX/RbUnS2uyXpUiFA5wUEav756UeBKxI8ILUnIBT
u7KYx9DCKmCVD6PWVFFc8jZYPI/Xczg=
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:10:07 2025 by rpki-client