Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6cb57303-e4e9-384b-b71c-c9684acbffc7.roa
File:                     6cb57303-e4e9-384b-b71c-c9684acbffc7.roa (raw, json)
Hash identifier:          y7Nhp/BGqY4UV3khHLb9rBSElhqwOijUJm+Cm9XucQc=
Subject key identifier:   CA:7A:61:28:B6:94:76:83:C7:74:C8:2A:20:3D:25:9B:1D:D3:34:06
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C57D3E11D0D3F5A06066F290
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6cb57303-e4e9-384b-b71c-c9684acbffc7.roa
Signing time:             Tue 04 Feb 2025 13:53:29 +0000
ROA not before:           Tue 04 Feb 2025 13:53:29 +0000
ROA not after:            Mon 05 May 2025 12:53:29 +0000
asID:                     30036
IP address blocks:        173.16.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:7d:3e:11:d0:d3:f5:a0:60:66:f2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:53:29 2025 GMT
            Not After : May  5 12:53:29 2025 GMT
        Subject: CN=fdfe774d-ffb1-455b-a051-cc57573df79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:68:e1:36:60:7c:b4:f6:42:31:6d:79:39:72:
                    0a:12:bf:ad:2d:ce:d0:89:d3:02:53:54:a7:ea:ab:
                    37:d2:4a:b9:90:a2:08:06:9a:e6:ec:8b:4e:b1:5e:
                    4f:67:21:e5:26:e2:65:7e:a2:59:d5:1e:63:83:77:
                    f5:a2:61:c5:e3:45:ee:81:32:55:ee:15:f1:37:4b:
                    14:78:d6:60:e0:1d:f2:ee:19:cc:50:74:36:53:54:
                    03:f7:47:0a:97:df:b2:37:aa:4e:e0:87:0a:26:7c:
                    0b:12:c4:00:ed:c9:44:29:c0:c5:86:06:ea:43:b2:
                    00:a7:5f:d0:1b:df:7f:5f:11:f9:41:58:ae:fd:ec:
                    1b:21:38:c9:7c:5a:e0:79:95:3d:b8:4d:28:a4:16:
                    7c:da:d9:8b:ea:bf:00:af:f0:81:55:14:81:b0:c3:
                    f2:f9:fe:81:8e:16:f6:84:09:97:7e:2f:b6:e5:73:
                    e7:c5:9c:38:60:3f:7e:37:cb:f0:3c:20:2a:0d:32:
                    f2:1c:2d:7c:8f:4d:4e:38:bc:be:df:c9:b1:c8:97:
                    ab:c7:f5:f3:74:d9:55:57:36:ef:01:f6:30:bd:51:
                    f9:12:40:8f:fb:9e:fb:a8:86:64:7e:99:38:db:3f:
                    02:d8:fb:30:46:00:36:e5:e2:e5:53:cc:9f:42:8b:
                    4e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7A:61:28:B6:94:76:83:C7:74:C8:2A:20:3D:25:9B:1D:D3:34:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6cb57303-e4e9-384b-b71c-c9684acbffc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:55:1e:c4:08:b6:d3:5a:4e:17:1e:4d:04:4e:a0:75:11:b3:
         83:79:cb:82:11:0d:4d:a0:f3:37:89:2c:9a:29:a2:f1:04:15:
         48:35:26:db:10:f9:d4:c4:3a:f9:12:e5:0d:48:ee:9a:7e:8f:
         13:47:c9:03:64:d9:26:6c:fe:27:c1:83:ee:a4:52:cd:d6:49:
         55:85:e8:3d:13:ae:c5:68:f6:4e:3a:ba:de:ab:2a:f9:5e:35:
         ed:b0:f8:68:e9:32:16:94:c7:9a:ad:59:0f:1a:c5:f1:7d:00:
         93:eb:33:e1:22:bf:c3:c2:42:5e:d5:a3:75:2a:9c:69:eb:44:
         03:40:f6:4c:87:05:98:b3:35:1e:62:b5:bf:1a:bc:e1:1d:ec:
         fe:81:13:55:63:c4:f6:ab:1c:5a:fa:cf:4b:a2:36:d5:e3:5a:
         be:c6:fc:5f:84:f3:f4:7a:3f:dd:26:7d:3e:80:78:aa:20:9b:
         1b:3e:f2:8a:6d:cf:61:55:23:e6:b7:90:bd:e6:f4:1a:d6:ac:
         eb:b4:da:bc:82:50:39:33:f3:3b:3a:08:de:aa:d6:ab:32:a4:
         b5:74:b6:61:64:06:3b:da:76:9c:5b:69:e6:4f:8c:08:97:2d:
         c7:8c:db:8c:6a:df:64:a2:98:8a:92:6c:19:fc:2d:05:95:c1:
         2a:b1:66:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:07 2025 by rpki-client