Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7b9256c1-b5ec-305e-aad4-705bedd2cb0f.roa
File:                     7b9256c1-b5ec-305e-aad4-705bedd2cb0f.roa (raw, json)
Hash identifier:          rYJ9qGshuhc0JhPPIP5Eq4sKTEeKSEWu7rYmQHeOr6s=
Subject key identifier:   16:CE:CF:66:AA:54:FC:29:66:75:81:E4:86:20:A6:34:B5:EA:73:16
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7F5FBDDEB86DE57FD475340
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7b9256c1-b5ec-305e-aad4-705bedd2cb0f.roa
Signing time:             Wed 05 Feb 2025 11:08:23 +0000
ROA not before:           Wed 05 Feb 2025 11:08:23 +0000
ROA not after:            Tue 06 May 2025 10:08:23 +0000
asID:                     30036
IP address blocks:        173.17.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f5:fb:dd:eb:86:de:57:fd:47:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:08:23 2025 GMT
            Not After : May  6 10:08:23 2025 GMT
        Subject: CN=ceffcd34-f13f-45f3-b8c3-7938f06233fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0e:c5:60:39:3a:a7:ca:b3:62:35:93:95:7e:
                    d2:80:01:b4:e4:e3:d8:3d:06:3d:cb:09:5a:a0:c0:
                    d3:e9:cc:a5:5d:e0:93:80:6d:ac:d2:ce:ad:97:7b:
                    a8:f8:27:62:2d:b8:dd:56:7b:16:f6:69:84:ed:62:
                    c6:62:b1:a9:bd:ae:17:85:c7:2e:1c:6c:3d:b2:10:
                    6a:6e:10:df:da:65:1c:6e:88:2f:af:01:4e:99:18:
                    b2:cf:f6:7a:bb:31:a9:69:da:eb:46:9d:c5:f6:5b:
                    13:10:b4:08:d0:46:83:87:91:da:70:15:89:8d:1e:
                    3f:79:b5:e7:bd:db:f7:98:8b:27:87:71:db:9c:51:
                    34:f5:85:a9:47:ed:53:74:90:02:15:bd:ce:74:1f:
                    9c:09:0c:6f:06:4e:c9:32:77:af:92:fe:5e:d5:01:
                    41:a0:8c:32:c0:6e:59:84:bb:f1:11:94:2d:0e:d9:
                    72:af:66:88:4a:cf:8d:f1:90:33:26:98:62:94:80:
                    35:b9:cd:c7:e9:ae:6b:53:c2:e7:12:18:ae:3d:79:
                    25:52:d9:4a:c5:b1:46:be:2c:57:ad:88:82:a0:8e:
                    53:fc:32:5f:70:be:6a:70:32:da:96:bf:89:16:7d:
                    1f:9c:3c:a8:df:8c:9b:41:2d:68:69:6f:8f:49:ed:
                    73:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CE:CF:66:AA:54:FC:29:66:75:81:E4:86:20:A6:34:B5:EA:73:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7b9256c1-b5ec-305e-aad4-705bedd2cb0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b2:ef:90:a3:5a:56:f5:e4:23:4e:e6:ca:86:2a:fb:ed:01:
         21:78:6f:db:4a:b0:ac:69:02:c8:2a:55:9f:4a:89:18:df:7c:
         ac:f4:38:48:f3:4e:38:f9:a8:e6:4f:0e:a7:18:cb:d7:c3:f8:
         78:b9:63:12:a0:55:6b:c8:88:54:00:aa:37:49:11:d3:3b:d9:
         80:7c:7f:9e:6b:39:e6:87:3a:e5:0c:6c:08:34:58:d1:13:19:
         bd:d9:21:b2:f8:61:ce:29:40:6d:7c:75:fb:a7:fb:26:f9:1a:
         5d:06:04:c2:22:c4:1a:00:a6:ff:7e:cb:9b:b0:f9:e5:b4:0f:
         98:36:70:73:59:cd:1d:b9:03:47:d0:b9:f6:5b:ef:2e:8d:db:
         6c:15:aa:36:20:45:c4:74:04:45:57:f6:39:89:bd:95:c0:b4:
         d3:3d:ba:2b:1b:81:81:5f:b6:03:03:4d:8f:f6:50:15:a7:af:
         2d:f0:d0:ac:ab:7d:28:19:29:57:fc:3f:0b:9c:82:f0:a5:54:
         e7:d7:af:ab:5a:72:8e:ac:de:f1:0c:25:24:a3:bc:09:ac:24:
         68:21:fc:26:63:01:35:64:89:f9:78:9a:c1:aa:6b:24:6c:6c:
         0d:4d:83:1e:6f:b2:af:a3:af:f6:44:31:55:ce:5b:f6:42:56:
         76:69:f3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:04 2025 by rpki-client