Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5935c54a-5b55-3e55-ad86-97439dfa0aef.roa
File:                     5935c54a-5b55-3e55-ad86-97439dfa0aef.roa (raw, json)
Hash identifier:          xSEzoRALKiJvKACR27IWYyBKty0BfKgub/yWI5hz4KM=
Subject key identifier:   B7:3A:55:1E:75:84:01:66:A9:6A:7B:EF:A4:7C:CD:8E:72:B2:C9:73
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C558649F0FBA700C2BDA8940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5935c54a-5b55-3e55-ad86-97439dfa0aef.roa
Signing time:             Tue 04 Feb 2025 12:39:14 +0000
ROA not before:           Tue 04 Feb 2025 12:39:14 +0000
ROA not after:            Mon 05 May 2025 11:39:14 +0000
asID:                     30036
IP address blocks:        173.17.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:58:64:9f:0f:ba:70:0c:2b:da:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:39:14 2025 GMT
            Not After : May  5 11:39:14 2025 GMT
        Subject: CN=5382818b-fb34-427f-97e7-175a753e7b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:78:6b:f7:a5:7c:07:28:eb:08:ad:92:4e:07:
                    21:5a:37:b0:e2:44:d0:43:8a:79:6e:fc:5a:59:b5:
                    fd:b1:6b:13:e7:81:75:77:64:92:25:13:df:8d:53:
                    3d:9b:51:bb:31:7f:34:1d:8b:88:5f:d1:23:5f:17:
                    c9:b2:4e:8e:54:44:45:16:64:48:10:9c:f2:51:cd:
                    0c:93:1e:08:f7:fc:67:df:ee:71:1a:bc:9e:9e:58:
                    79:5e:90:f7:4c:13:c6:ce:b8:45:74:69:f1:1f:84:
                    5e:dc:01:40:d3:5b:26:0d:a1:57:33:80:7a:2b:da:
                    82:d1:53:ce:9c:0b:d1:1a:92:53:ae:9e:e0:8c:a6:
                    98:c5:2e:13:be:94:94:44:82:a8:1a:d4:6f:cb:4a:
                    ea:5f:06:f3:98:f3:d7:60:74:02:08:b2:8a:4b:47:
                    86:d7:8d:ac:96:ef:81:60:99:4e:6a:e3:b4:53:58:
                    75:59:08:6b:3d:0f:88:20:2e:9b:7e:4f:f2:ba:38:
                    89:f1:ce:3b:69:78:a9:2c:9a:9f:dd:de:18:e5:db:
                    22:31:98:39:0f:11:28:d9:bd:4c:3f:97:10:21:7c:
                    42:42:b6:a1:f1:86:dd:3a:2a:2d:e6:d3:65:9b:b2:
                    40:95:7f:20:b0:f8:a4:ed:5c:d0:73:b4:35:90:b5:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3A:55:1E:75:84:01:66:A9:6A:7B:EF:A4:7C:CD:8E:72:B2:C9:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5935c54a-5b55-3e55-ad86-97439dfa0aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5e:c8:69:9b:79:b0:2e:4a:30:78:24:d1:bf:83:e1:d4:8a:
         97:37:0a:27:d5:b2:51:24:73:98:31:6d:73:62:99:b6:f0:87:
         96:fe:9a:8b:fd:af:fb:a7:cb:9b:93:ec:ff:46:c8:8f:46:83:
         4c:4c:b3:c4:f0:c2:ad:17:f4:c6:3f:9d:70:4d:7d:6b:86:87:
         62:4b:49:e3:5e:34:48:8e:6c:1b:b5:3c:39:46:85:74:02:6c:
         cb:bf:2c:25:c6:7f:e8:f8:52:bc:a6:7e:a1:4f:ce:dc:08:f2:
         24:47:33:3f:f2:d0:09:2e:bd:fd:e0:b1:54:85:cb:49:4b:f5:
         92:a3:cf:6c:ef:cc:9d:73:fb:a0:c2:f0:65:37:ed:ff:31:b1:
         c2:cc:90:55:64:02:ea:b3:85:a8:5a:98:0b:b8:71:5a:45:97:
         5c:19:cb:fe:c1:dc:cf:cc:b2:f3:4a:08:b9:cf:36:6e:f5:53:
         b1:19:b6:60:bc:f8:37:36:6a:46:f9:61:fc:ed:58:d7:fc:a4:
         ac:af:44:4a:7e:8e:d8:6e:6a:a7:45:ac:06:c2:8f:3c:8b:bf:
         89:a9:06:b2:a7:ec:79:e6:b3:8d:87:50:04:63:d3:a1:ec:3c:
         56:f3:5c:d1:ee:0c:e4:83:8c:fd:3f:7b:61:f4:aa:65:16:1c:
         64:78:bd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:00 2025 by rpki-client