Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5be5c030-0632-3791-ba93-286c38bc25b6.roa
File:                     5be5c030-0632-3791-ba93-286c38bc25b6.roa (raw, json)
Hash identifier:          Y3WZQoZd6vwFG7Pe7cKK0A9wqqUqTgDGngSKrIq/oms=
Subject key identifier:   9D:A4:3D:89:E6:4B:B3:CC:BB:89:EF:9C:1E:36:EB:C1:ED:E2:0E:4E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5588D0179151B25CFF4E0E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5be5c030-0632-3791-ba93-286c38bc25b6.roa
Signing time:             Tue 04 Feb 2025 12:39:33 +0000
ROA not before:           Tue 04 Feb 2025 12:39:33 +0000
ROA not after:            Mon 05 May 2025 11:39:33 +0000
asID:                     30036
IP address blocks:        173.20.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:58:8d:01:79:15:1b:25:cf:f4:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:39:33 2025 GMT
            Not After : May  5 11:39:33 2025 GMT
        Subject: CN=4497f435-71ab-47c1-8130-f80a4ce9900a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:15:75:19:4d:68:17:8c:a4:20:43:57:da:
                    73:c1:89:94:28:3e:f6:da:83:73:1f:4b:0c:b6:04:
                    f5:72:81:23:c8:2c:ce:7e:a8:d5:c8:59:37:40:bc:
                    bd:ac:39:c8:c9:e0:d2:9a:a2:6c:a4:84:46:99:ea:
                    dd:27:b0:a7:c3:a9:5b:16:02:b4:49:8d:a5:89:db:
                    84:a7:51:e4:2d:96:43:ef:db:09:0e:7d:e1:11:00:
                    59:78:6c:a9:3c:80:81:52:85:7c:89:df:d6:eb:9f:
                    d4:f5:6e:1e:ff:66:48:50:44:9f:13:ae:11:41:f2:
                    2d:85:e1:29:93:a3:9c:00:26:8f:02:f4:58:33:2f:
                    7a:3a:db:f9:df:22:00:78:53:7b:aa:bb:f6:80:5a:
                    24:b2:76:62:87:0c:40:92:ee:ed:92:27:1e:fc:94:
                    55:9b:59:fa:e7:81:f6:d8:d6:59:2c:a1:62:32:2f:
                    2b:ec:37:ad:9d:3d:40:66:c7:43:67:f4:84:9c:63:
                    9c:2e:62:dc:f3:cb:ee:81:83:c8:1e:a1:ea:0f:f8:
                    9b:77:04:db:61:f7:dc:e8:ae:c8:3d:e8:06:ef:5d:
                    d8:56:bd:9e:ae:56:14:d5:c8:d1:32:ac:37:3b:ad:
                    c8:f8:94:d2:85:a1:3d:e1:bf:3b:39:55:0b:15:9f:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A4:3D:89:E6:4B:B3:CC:BB:89:EF:9C:1E:36:EB:C1:ED:E2:0E:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5be5c030-0632-3791-ba93-286c38bc25b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d7:da:8a:9b:96:5e:de:0a:f1:0c:c7:ce:ea:5a:8e:bb:1d:
         de:5a:17:c4:80:5b:70:80:19:4c:e7:97:52:77:2d:e7:8f:29:
         e8:27:47:83:53:ee:1c:b2:5d:f1:0d:4a:ee:4d:94:6f:51:ab:
         92:1c:aa:3b:40:ae:7e:d6:6b:8a:3f:87:67:1f:66:a5:24:bf:
         37:1a:3d:4f:b7:08:8b:3c:2b:59:64:e3:3d:be:43:d6:7a:18:
         de:26:53:25:da:09:f9:94:bb:f2:88:fa:65:55:a1:e0:2f:01:
         1c:89:c6:5b:87:d7:6a:a4:18:f0:ca:6f:a5:81:b0:bd:ad:4f:
         d8:c1:37:41:3d:ad:69:92:29:60:bd:26:9f:4c:f8:92:6b:2c:
         48:c7:1d:01:6a:8e:8e:fc:69:05:bb:9e:21:8f:e8:3c:c3:31:
         71:ca:df:fc:08:bb:5e:6b:e2:e0:63:be:3f:eb:c8:36:5a:24:
         a6:bd:81:97:e4:b7:fc:ae:c0:a1:63:c5:72:b3:f2:85:2a:77:
         99:32:5f:be:d7:a5:02:9e:cc:0a:07:18:a0:91:01:69:4a:56:
         6c:b7:f4:f0:01:53:7c:d8:f0:11:03:9f:80:2a:b3:15:fd:6d:
         ad:1f:40:96:35:67:2d:6a:07:8d:14:a6:1b:46:44:b4:08:aa:
         fb:42:72:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFWI0BeRUbJc/04OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEyMzkzM1oXDTI1MDUwNTExMzkzM1owLzEtMCsGA1UEAxMk
NDQ5N2Y0MzUtNzFhYi00N2MxLTgxMzAtZjgwYTRjZTk5MDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWkVdRlNaBeMpCBDV9pzwYmUKD722oNzH0sM
tgT1coEjyCzOfqjVyFk3QLy9rDnIyeDSmqJspIRGmerdJ7Cnw6lbFgK0SY2liduE
p1HkLZZD79sJDn3hEQBZeGypPICBUoV8id/W65/U9W4e/2ZIUESfE64RQfItheEp
k6OcACaPAvRYMy96Otv53yIAeFN7qrv2gFoksnZihwxAku7tkice/JRVm1n654H2
2NZZLKFiMi8r7DetnT1AZsdDZ/SEnGOcLmLc88vugYPIHqHqD/ibdwTbYffc6K7I
PegG713YVr2erlYU1cjRMqw3O63I+JTShaE94b87OVULFZ+ZwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ2kPYnmS7PMu4nvnB4268Ht4g5OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWJlNWMwMzAtMDYzMi0z
NzkxLWJhOTMtMjg2YzM4YmMyNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADX2oqbll7eCvEMx87qWo67Hd5aF8SAW3CAGUznl1J3LeePKegnR4NT
7hyyXfENSu5NlG9Rq5IcqjtArn7Wa4o/h2cfZqUkvzcaPU+3CIs8K1lk4z2+Q9Z6
GN4mUyXaCfmUu/KI+mVVoeAvARyJxluH12qkGPDKb6WBsL2tT9jBN0E9rWmSKWC9
Jp9M+JJrLEjHHQFqjo78aQW7niGP6DzDMXHK3/wIu15r4uBjvj/ryDZaJKa9gZfk
t/yuwKFjxXKz8oUqd5kyX77XpQKezAoHGKCRAWlKVmy39PABU3zY8BEDn4AqsxX9
ba0fQJY1Zy1qB40UphtGRLQIqvtCcmM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:53 2025 by rpki-client