Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d3267ca-6e43-3335-8054-b8605f4ab679.roa
File:                     5d3267ca-6e43-3335-8054-b8605f4ab679.roa (raw, json)
Hash identifier:          mjv/DTNUJT/YPKDG12AvWCyD2BrjI3Tt1GMftSbLiGs=
Subject key identifier:   C2:B9:E8:6C:65:5A:07:EB:6D:04:EE:D1:41:B9:1F:E8:7F:4D:D1:A0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C532E77933CF598266EAFC80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d3267ca-6e43-3335-8054-b8605f4ab679.roa
Signing time:             Tue 04 Feb 2025 11:23:42 +0000
ROA not before:           Tue 04 Feb 2025 11:23:42 +0000
ROA not after:            Mon 05 May 2025 10:23:42 +0000
asID:                     30036
IP address blocks:        173.29.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:32:e7:79:33:cf:59:82:66:ea:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 11:23:42 2025 GMT
            Not After : May  5 10:23:42 2025 GMT
        Subject: CN=8cbaa44e-e105-4362-9924-05d375ae407f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4c:83:3a:91:d6:c0:54:01:33:3b:c9:cc:81:
                    77:0b:7a:83:8f:3b:82:9b:82:6e:5d:61:e4:a7:f6:
                    29:6e:d5:9b:7c:90:5f:cd:04:ef:5d:00:f0:eb:21:
                    c3:47:dd:8c:28:9b:99:19:af:0f:ef:a4:f9:d9:c7:
                    81:8e:04:56:36:52:c1:c7:14:30:fa:41:8b:36:37:
                    95:40:73:fb:f0:21:f1:87:a6:45:57:fc:d8:86:ff:
                    56:8a:b1:95:56:6c:1c:52:5b:18:44:56:63:95:d3:
                    e7:ea:20:f4:ce:8b:36:9c:20:76:eb:ad:15:46:8f:
                    0b:18:0b:ca:ab:20:4a:7f:93:05:10:76:36:20:e4:
                    6c:d2:c7:03:19:88:cb:bc:d9:bc:d1:dc:d9:12:9d:
                    ce:95:64:16:a4:de:e5:f6:4a:b2:56:97:6c:31:5e:
                    85:94:ac:13:42:75:54:cc:12:0a:96:eb:a6:23:92:
                    11:81:73:a7:85:11:f9:3b:25:7e:f6:49:89:be:cd:
                    13:51:52:c9:14:d1:be:d5:8d:b4:59:1f:a7:71:83:
                    43:0c:af:a7:67:18:10:19:89:93:d2:de:a5:83:83:
                    d3:6f:61:1e:9a:54:b7:f8:df:a2:61:d6:7c:5a:10:
                    af:7e:d4:3c:ce:e6:75:cb:44:96:dc:57:09:29:52:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B9:E8:6C:65:5A:07:EB:6D:04:EE:D1:41:B9:1F:E8:7F:4D:D1:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d3267ca-6e43-3335-8054-b8605f4ab679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b2:94:51:bc:cf:d4:87:99:0e:9a:b3:ff:77:d2:c6:7f:55:
         22:a2:64:3a:f7:2d:bc:c6:8d:1c:29:86:00:d5:a1:65:3b:5a:
         ad:3e:08:c6:6f:ac:bd:a3:3a:0d:3a:b0:2c:6b:5b:88:a9:52:
         b4:e3:92:b0:58:44:3d:fe:29:2b:03:ee:c3:2e:6e:f9:75:cc:
         56:b3:01:da:94:2d:3f:d7:63:e7:20:07:f6:9f:18:94:ed:6c:
         84:f0:81:f1:61:b7:dc:e3:da:03:d7:5a:dd:69:a4:22:c7:f1:
         23:70:2e:07:c7:db:82:cd:e3:d8:8a:b1:10:f7:eb:15:9a:09:
         39:6f:c0:a8:99:7c:61:9a:f1:c3:0f:f0:15:de:b0:a9:a0:d8:
         e2:af:ca:2e:be:45:f6:74:e5:64:bb:af:b2:a1:9e:75:3c:d0:
         95:d4:91:ba:69:99:5e:9d:8f:b6:e1:d7:47:56:47:15:98:4d:
         22:47:70:eb:4f:f0:8a:d0:fb:f8:85:ab:51:7d:db:90:96:24:
         f9:38:c3:20:33:19:5b:10:c5:21:2b:68:28:af:2e:3e:4f:98:
         17:73:0e:e7:70:be:41:0b:81:8b:3b:51:b3:9a:79:38:14:26:
         3d:05:42:fc:4b:71:73:12:83:cb:cb:a6:80:64:bc:9e:0c:83:
         1e:87:b9:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFMud5M89Zgmbq/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDExMjM0MloXDTI1MDUwNTEwMjM0MlowLzEtMCsGA1UEAxMk
OGNiYWE0NGUtZTEwNS00MzYyLTk5MjQtMDVkMzc1YWU0MDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUyDOpHWwFQBMzvJzIF3C3qDjzuCm4JuXWHk
p/YpbtWbfJBfzQTvXQDw6yHDR92MKJuZGa8P76T52ceBjgRWNlLBxxQw+kGLNjeV
QHP78CHxh6ZFV/zYhv9WirGVVmwcUlsYRFZjldPn6iD0zos2nCB2660VRo8LGAvK
qyBKf5MFEHY2IORs0scDGYjLvNm80dzZEp3OlWQWpN7l9kqyVpdsMV6FlKwTQnVU
zBIKluumI5IRgXOnhRH5OyV+9kmJvs0TUVLJFNG+1Y20WR+ncYNDDK+nZxgQGYmT
0t6lg4PTb2EemlS3+N+iYdZ8WhCvftQ8zuZ1y0SW3FcJKVLLfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMK56GxlWgfrbQTu0UG5H+h/TdGgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWQzMjY3Y2EtNmU0My0z
MzM1LTgwNTQtYjg2MDVmNGFiNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6ylFG8z9SHmQ6as/930sZ/VSKiZDr3LbzGjRwphgDVoWU7Wq0+CMZv
rL2jOg06sCxrW4ipUrTjkrBYRD3+KSsD7sMubvl1zFazAdqULT/XY+cgB/afGJTt
bITwgfFht9zj2gPXWt1ppCLH8SNwLgfH24LN49iKsRD36xWaCTlvwKiZfGGa8cMP
8BXesKmg2OKvyi6+RfZ05WS7r7KhnnU80JXUkbppmV6dj7bh10dWRxWYTSJHcOtP
8IrQ+/iFq1F925CWJPk4wyAzGVsQxSEraCivLj5PmBdzDudwvkELgYs7UbOaeTgU
Jj0FQvxLcXMSg8vLpoBkvJ4Mgx6HuYQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:18 2025 by rpki-client