Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7b865b0-b062-377f-aa2e-93d9deede961.roa
File:                     a7b865b0-b062-377f-aa2e-93d9deede961.roa (raw, json)
Hash identifier:          W1cOCb3GOqTzGFcs4bwWNSY82RT95c0Wu2+u4H+vA38=
Subject key identifier:   A7:F0:22:7D:5C:19:64:13:3E:EB:42:0F:1B:43:AE:1B:2E:FC:A6:A3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C262C0C8FC9490E615CE116C
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7b865b0-b062-377f-aa2e-93d9deede961.roa
Signing time:             Mon 03 Feb 2025 11:12:41 +0000
ROA not before:           Mon 03 Feb 2025 11:12:41 +0000
ROA not after:            Sun 04 May 2025 10:12:41 +0000
asID:                     30036
IP address blocks:        170.52.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:62:c0:c8:fc:94:90:e6:15:ce:11:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:12:41 2025 GMT
            Not After : May  4 10:12:41 2025 GMT
        Subject: CN=159f6227-090b-454c-903a-c1d6056f2861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:7f:eb:03:b8:ae:23:d5:11:8c:c5:31:59:
                    fa:e3:81:e5:9a:8f:43:55:7a:ef:f0:1c:d2:ab:6e:
                    ba:bc:48:df:8a:0d:95:2d:a8:0c:d1:65:c1:9c:98:
                    20:59:f5:37:0c:37:08:a7:f8:a5:de:00:3f:1b:3a:
                    cb:8e:0d:49:e1:d6:73:be:8f:11:36:f4:51:cf:cc:
                    c5:23:a5:e3:77:e5:d9:c7:22:a5:c2:85:56:14:e6:
                    52:ce:f1:38:9b:fc:14:80:dd:63:36:69:b0:86:2c:
                    8e:8e:0c:e1:8b:c2:a5:c9:f9:e9:f2:8f:fc:1e:82:
                    5d:bd:08:96:31:85:14:45:64:45:aa:4c:29:4b:7d:
                    47:29:8d:34:90:5c:51:e7:e5:91:42:09:82:f4:90:
                    4f:49:e7:7f:47:63:62:c0:ed:04:aa:5f:c6:1c:64:
                    5e:53:72:90:47:93:3a:d9:df:62:73:e0:56:e0:30:
                    f6:04:13:6b:60:63:a5:70:58:ca:e8:5a:96:af:6b:
                    4b:ca:0d:ee:c2:35:18:54:2c:71:e0:18:fa:23:56:
                    df:c5:39:bc:fb:90:a6:e5:f6:81:d5:e2:93:06:be:
                    92:13:ac:33:cc:5e:3d:08:62:d0:1e:bc:06:38:63:
                    21:0c:d2:25:d4:f2:e7:5d:5c:88:11:f3:c8:7e:c4:
                    29:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F0:22:7D:5C:19:64:13:3E:EB:42:0F:1B:43:AE:1B:2E:FC:A6:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7b865b0-b062-377f-aa2e-93d9deede961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.52.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:8b:8a:d2:a0:ad:dc:f2:78:62:a7:8f:28:dd:19:e4:1e:a7:
         30:52:a0:98:a4:68:d8:cb:a3:66:c3:f6:89:54:76:f5:3b:b4:
         48:af:80:c2:e0:b6:44:da:61:9d:62:11:60:62:98:e7:fa:0d:
         91:2c:11:03:ed:e3:32:06:dd:96:89:a6:af:06:2a:41:51:de:
         39:da:3d:14:98:72:07:93:3f:f7:d8:19:43:f4:79:d1:61:a2:
         a4:08:7a:ce:65:f7:70:f2:5d:af:f9:bb:1e:af:f0:20:4e:4d:
         55:cb:f8:33:b9:67:8c:31:3d:09:fe:b5:7f:bb:5a:e4:dd:3a:
         ff:ce:de:e2:57:0f:b2:75:b8:62:0d:62:e5:12:89:27:57:44:
         d9:bd:fd:b6:77:c9:db:4c:ce:29:37:f8:f8:e8:c0:d0:a6:21:
         de:25:81:ef:40:9a:d0:6a:9e:51:e2:67:6c:13:e3:ec:1a:b5:
         1c:80:0a:ae:21:3d:8c:b0:5f:d1:1b:81:ea:4c:2c:2c:cb:a9:
         db:e1:2a:16:0e:3d:61:1c:ec:0d:d1:56:fc:25:50:3d:96:85:
         af:ec:00:fa:7d:c3:e3:23:2e:13:d8:70:99:8d:75:26:b8:24:
         3d:e6:23:79:93:71:0c:23:69:1e:d7:a0:53:32:b3:3b:57:9a:
         1b:bc:bf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:12 2025 by rpki-client