Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b36b1c5-5d6c-3770-942f-4a303a15822c.roa
File:                     6b36b1c5-5d6c-3770-942f-4a303a15822c.roa (raw, json)
Hash identifier:          SfSPluBGsKQYCWScB31WnX+BM3hR7SGvV2UWVXDNVY0=
Subject key identifier:   C9:61:4F:23:FE:C8:A7:D1:4B:7C:A5:94:A1:56:13:48:64:06:9D:06
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5333C8B8DDF80233E17D200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b36b1c5-5d6c-3770-942f-4a303a15822c.roa
Signing time:             Tue 04 Feb 2025 11:24:22 +0000
ROA not before:           Tue 04 Feb 2025 11:24:22 +0000
ROA not after:            Mon 05 May 2025 10:24:22 +0000
asID:                     30036
IP address blocks:        150.195.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:33:3c:8b:8d:df:80:23:3e:17:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 11:24:22 2025 GMT
            Not After : May  5 10:24:22 2025 GMT
        Subject: CN=ba9e7536-9ccd-49d5-9fbe-c21c20e36e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:bd:8d:83:35:33:c9:6d:54:2c:4c:dd:78:
                    e4:51:39:64:9f:83:43:62:47:34:f0:4f:b0:3a:d3:
                    bc:ea:a4:15:1e:e2:a7:f2:a5:80:ee:7e:86:6b:33:
                    7f:44:9d:0d:15:15:fb:da:b7:ec:96:a7:67:6c:3a:
                    45:05:2a:89:60:c9:7e:a6:4a:c2:4c:02:d4:bd:81:
                    d4:bd:e7:ea:b8:71:28:95:e7:62:ac:27:1a:d2:25:
                    63:65:68:18:35:40:64:83:cd:e2:dd:d7:ab:72:b1:
                    80:06:80:2d:80:ab:d8:4e:f5:c9:34:20:84:cd:ea:
                    c8:df:0d:c3:da:0a:70:96:da:eb:94:7e:21:b5:50:
                    83:09:03:d2:de:52:01:e8:ee:0c:cf:f7:5e:17:91:
                    15:a0:72:d3:91:16:77:ec:36:bc:66:8d:0c:cc:bf:
                    b9:de:c3:1a:57:50:49:17:98:0e:6e:22:fe:15:9a:
                    1b:5b:03:14:6b:30:74:47:cb:03:90:ce:01:e1:89:
                    25:7a:a5:05:ed:f6:40:8b:fd:92:bc:cf:c7:61:e1:
                    df:f3:c6:fd:21:3f:90:ec:9a:70:4a:07:5c:11:04:
                    a3:55:35:ba:77:49:73:f8:6c:6d:54:54:0b:32:a8:
                    92:a6:dc:bb:c6:05:95:a3:14:35:7b:4d:06:db:6c:
                    61:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:61:4F:23:FE:C8:A7:D1:4B:7C:A5:94:A1:56:13:48:64:06:9D:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b36b1c5-5d6c-3770-942f-4a303a15822c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:de:8c:b8:3a:3f:16:9c:ba:ad:2c:e4:e4:db:82:ee:84:66:
         4f:fb:c9:da:d3:b2:ee:40:78:0c:d0:a6:7c:e7:5f:63:5c:81:
         29:34:1c:1f:ad:a0:a6:09:47:c4:85:1e:b8:d5:b8:7d:08:84:
         e0:3c:e9:d7:dd:d5:ca:9e:3f:25:03:01:58:ea:a1:dd:f9:90:
         d1:af:75:eb:97:df:59:77:90:a8:61:18:ee:ce:6f:87:d3:dd:
         4b:f7:c5:63:6d:3e:cd:7c:75:4a:17:4d:7b:bc:a2:41:e6:94:
         c8:83:69:b9:58:33:fe:8d:da:0d:93:ec:c2:94:82:3a:c1:19:
         b6:53:29:1e:32:4d:15:da:ac:07:6e:89:65:a6:42:ab:6a:9e:
         e6:35:99:f7:7e:24:60:fd:81:44:8b:c7:3c:fe:42:9d:49:62:
         48:9b:55:74:3e:e6:a6:b2:7e:1c:51:e2:63:f1:66:93:25:a5:
         f8:0e:c3:4c:84:45:16:a7:25:ab:ab:48:01:53:8f:f6:2e:56:
         ec:f9:95:bb:4f:8c:c7:56:3e:d9:8c:f1:22:91:9c:23:31:c9:
         4f:d1:aa:55:0f:86:70:5b:70:05:31:dd:94:98:d5:0e:81:f7:
         52:42:f6:55:f6:3e:be:9a:2c:99:84:8d:f6:0d:3d:42:c4:0a:
         78:21:11:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:40 2025 by rpki-client