Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a845e91a-c342-30b4-9758-f2b3f45042cd.roa
File:                     a845e91a-c342-30b4-9758-f2b3f45042cd.roa (raw, json)
Hash identifier:          JV1gU35ogwGTmpUmQ1sgfthznj1l8Pc3jz+aWrpkmJ0=
Subject key identifier:   D4:F2:7A:61:04:CB:AF:31:7F:38:7A:DC:4D:DA:DF:1F:BB:71:CF:AD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C57E0989138BC429392BAEC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a845e91a-c342-30b4-9758-f2b3f45042cd.roa
Signing time:             Tue 04 Feb 2025 13:55:05 +0000
ROA not before:           Tue 04 Feb 2025 13:55:05 +0000
ROA not after:            Mon 05 May 2025 12:55:05 +0000
asID:                     30036
IP address blocks:        173.24.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:7e:09:89:13:8b:c4:29:39:2b:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:55:05 2025 GMT
            Not After : May  5 12:55:05 2025 GMT
        Subject: CN=ae9a4b6d-7054-4595-ac5c-df1d95300fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:55:7e:25:c7:a3:0a:ea:25:ce:c8:58:f5:40:
                    8a:af:42:11:5d:af:ea:4a:cb:4d:77:61:28:51:26:
                    36:01:fd:a2:a5:83:cd:bb:26:b9:0d:e5:8f:87:26:
                    17:29:1f:d1:65:11:51:bf:30:81:33:57:8b:40:1e:
                    fb:29:96:9c:7f:4e:95:af:1c:c8:ad:e3:15:4d:41:
                    62:86:a3:f0:49:f4:8c:60:c5:6f:f9:80:86:a3:67:
                    21:5c:12:7d:ee:74:b8:27:d1:70:e9:82:db:fc:79:
                    6a:d1:7d:84:e5:1d:aa:eb:5f:81:06:60:23:5d:68:
                    98:42:21:cc:7a:b4:86:a2:9f:bf:89:e5:03:76:41:
                    09:d6:ac:2a:38:25:3c:3e:ba:39:39:06:a8:9b:c0:
                    b0:35:f7:28:e5:23:7b:ea:ae:cc:29:59:92:fe:05:
                    57:12:c5:30:1d:a4:35:d7:3a:de:a8:76:30:a3:5d:
                    e5:de:2d:43:1e:3d:81:e5:e1:c3:5d:e2:f6:cb:f9:
                    a9:d1:52:e0:6d:1b:4b:d9:2a:cd:b2:98:04:12:96:
                    78:59:09:50:29:a0:90:c7:15:79:17:48:8f:03:90:
                    da:58:e3:91:c7:40:07:12:4c:ac:ac:ca:b4:36:5d:
                    1a:d1:c6:38:90:bf:b0:f2:6c:f9:38:2d:61:60:e1:
                    bd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F2:7A:61:04:CB:AF:31:7F:38:7A:DC:4D:DA:DF:1F:BB:71:CF:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a845e91a-c342-30b4-9758-f2b3f45042cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:54:15:cc:1d:f1:d9:6f:09:f8:3f:84:fb:97:ec:f3:70:
         8e:89:97:2b:57:32:8d:29:b1:31:68:a3:21:a2:7e:1e:a6:93:
         3b:99:c9:c7:3f:dd:f7:74:39:be:b9:97:65:78:39:cb:17:c2:
         4c:f7:70:81:18:9b:78:cd:99:31:e0:94:4d:10:5e:e9:b2:8b:
         b2:e1:dd:34:11:66:28:e0:fc:0e:3d:55:9d:52:79:78:aa:eb:
         63:88:f2:75:d8:01:5d:f7:db:42:eb:cb:e9:7d:32:ee:1a:00:
         54:17:ae:28:7d:70:3c:b3:8d:6a:b8:b2:9c:4f:c8:1f:fe:54:
         e3:93:f6:8f:32:5d:8c:5b:cd:af:55:a1:11:bf:0f:d9:11:43:
         aa:7b:3f:3e:8e:54:3c:e6:66:2e:09:e4:72:bd:d2:05:88:16:
         cd:97:c4:e5:37:0a:e9:28:77:9c:d1:5e:ce:6b:fc:c1:73:d9:
         e1:51:49:df:8d:2f:a9:59:87:c5:35:c6:d4:86:41:13:c2:53:
         39:cb:7a:38:93:fd:18:ea:7f:55:f8:14:eb:80:47:96:d1:4b:
         20:2d:dc:2a:68:96:f0:d5:dd:34:b8:cf:01:e0:c8:2a:b4:70:
         9b:98:b4:ad:a0:f2:2f:96:b5:37:dc:17:62:37:db:68:12:23:
         76:10:dd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:58 2025 by rpki-client