Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59218302-c0b3-3e30-8c71-11494d374f3f.roa
File:                     59218302-c0b3-3e30-8c71-11494d374f3f.roa (raw, json)
Hash identifier:          PWzq2crsQx9hE01WtA3o6BDIbzfQAhrf2mEItSxWcfE=
Subject key identifier:   14:8A:72:26:54:4D:E1:64:70:28:4A:C0:A6:BD:84:A8:34:9F:FB:12
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C261E9DB5D56D165AA8C99E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59218302-c0b3-3e30-8c71-11494d374f3f.roa
Signing time:             Mon 03 Feb 2025 11:10:59 +0000
ROA not before:           Mon 03 Feb 2025 11:10:59 +0000
ROA not after:            Sun 04 May 2025 10:10:59 +0000
asID:                     30036
IP address blocks:        173.25.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:61:e9:db:5d:56:d1:65:aa:8c:99:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:10:59 2025 GMT
            Not After : May  4 10:10:59 2025 GMT
        Subject: CN=b07145c7-e846-43ed-9e26-fec2eace3478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:cc:3c:98:11:87:19:70:e5:78:f1:f0:22:
                    27:4d:3e:df:f0:46:c5:e7:02:5b:21:5a:86:9f:e3:
                    92:09:1d:70:25:4b:39:57:1e:ff:71:68:ec:70:2a:
                    d3:ff:cc:e4:04:c1:aa:dd:9d:82:1e:45:f6:7c:ae:
                    42:f9:b8:65:83:a1:4e:53:3f:73:d8:ef:34:67:db:
                    cd:95:df:9b:a6:5b:5a:2e:ad:99:df:75:6a:92:e0:
                    d9:22:2b:ab:91:70:90:bb:db:66:cd:99:a2:cf:ac:
                    c7:4f:a5:db:2f:7d:08:4d:a7:50:a9:cb:7b:17:21:
                    50:05:01:7f:3e:97:02:a5:58:02:aa:1e:8c:1a:8b:
                    68:c7:aa:ec:8e:08:ca:6d:46:09:18:c9:d1:ee:ff:
                    9e:e1:de:d4:9e:7d:9a:08:33:f4:e3:4a:05:34:7c:
                    b7:ae:56:76:ad:c7:7c:22:58:0e:e9:43:ad:30:57:
                    ae:db:4e:6d:ed:27:33:9b:f8:99:24:f4:6a:b3:04:
                    0e:94:b8:37:cb:1c:eb:9d:40:ae:ab:3c:0a:21:df:
                    fb:a4:f3:02:90:0d:aa:61:52:b2:06:7a:03:dd:b9:
                    76:a7:ef:ef:b9:1b:3d:b8:41:4a:6f:0a:d1:cd:77:
                    40:8c:11:b3:43:a4:4f:77:4e:56:f0:ce:fd:8a:ca:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8A:72:26:54:4D:E1:64:70:28:4A:C0:A6:BD:84:A8:34:9F:FB:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59218302-c0b3-3e30-8c71-11494d374f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:98:6d:b5:7f:22:3e:62:5a:13:35:ac:c6:ed:2f:61:e2:41:
         81:ce:5e:3b:46:f3:7c:a4:bd:5f:2a:b3:98:aa:07:81:e4:ed:
         9f:0b:10:4d:b0:06:d7:4b:c1:d6:e8:09:aa:c1:93:99:d6:db:
         45:da:43:08:bf:48:2e:9f:b1:b2:64:2e:c7:22:be:f5:d4:98:
         43:63:68:ba:a7:1b:94:9c:18:82:2e:ae:db:67:a0:ab:a2:2c:
         bb:a5:65:b4:f8:83:97:c8:96:8e:8c:c4:a3:88:0d:13:02:39:
         c8:0f:c0:36:1f:2e:02:3e:90:de:33:7d:ae:06:e1:35:a4:f0:
         5a:18:96:1b:45:16:73:e5:4f:de:a7:c5:c0:0e:35:71:7e:3c:
         a6:ac:f7:a4:27:9e:0b:c3:a1:b5:1f:5f:44:d5:54:64:93:92:
         a2:a6:77:32:2f:59:47:ce:0d:be:20:03:20:8d:c7:95:c9:41:
         97:b3:34:a4:2f:41:5b:e8:4a:21:e7:92:db:8a:ef:34:1b:8b:
         88:8a:21:13:96:85:10:76:2a:40:75:9d:e9:d3:9b:e0:fc:0a:
         ce:00:20:b2:aa:fb:1e:69:f5:88:06:80:de:4a:31:e5:f1:81:
         94:74:47:aa:83:82:3c:c4:dc:32:2e:a0:aa:f2:9e:a1:57:ce:
         94:22:12:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:07 2025 by rpki-client