Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab9518e7-aadb-38ce-8217-15cef0552676.roa
File:                     ab9518e7-aadb-38ce-8217-15cef0552676.roa (raw, json)
Hash identifier:          Md0vZ7W3K5X/Np0GHRVk/2X5phOt6qDfFQXuQETUfs4=
Subject key identifier:   0D:14:48:12:ED:F3:3A:84:47:99:76:02:A4:7D:0B:5A:28:6C:E0:1A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7F709718B6140571FEBEA10
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab9518e7-aadb-38ce-8217-15cef0552676.roa
Signing time:             Wed 05 Feb 2025 11:10:30 +0000
ROA not before:           Wed 05 Feb 2025 11:10:30 +0000
ROA not after:            Tue 06 May 2025 10:10:30 +0000
asID:                     30036
IP address blocks:        173.18.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f7:09:71:8b:61:40:57:1f:eb:ea:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:10:30 2025 GMT
            Not After : May  6 10:10:30 2025 GMT
        Subject: CN=ad570a97-6fc6-4f23-8020-4c7144e13824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:cd:4d:b8:e0:90:dc:ca:63:3f:58:ad:e7:
                    6e:da:b5:08:e4:03:c3:87:99:d0:aa:4e:59:5a:dc:
                    89:1a:38:ed:c9:8a:93:63:8a:84:38:f5:71:27:a0:
                    3a:64:4f:ae:7d:2a:fa:fe:b1:4c:1c:67:d9:49:76:
                    bd:81:c6:69:90:4d:c3:97:ea:fe:f0:bc:99:68:02:
                    cd:5b:f3:53:47:28:03:bc:80:68:01:a7:97:70:8e:
                    af:b6:7d:72:2f:3a:41:f2:aa:39:af:da:ed:c6:08:
                    a3:bb:aa:49:30:f6:09:eb:99:42:8e:31:77:aa:7f:
                    6d:bc:fd:7e:51:2b:d0:cf:7a:ec:37:67:0e:46:45:
                    c2:5c:6d:22:d5:59:9f:6c:83:87:d1:92:12:72:af:
                    c0:99:01:fc:42:18:c0:5c:22:06:7b:f5:51:df:16:
                    5e:de:87:59:b9:e4:a7:d9:34:3a:ae:22:cf:e3:7f:
                    02:d7:10:95:96:c4:73:bc:4c:17:e6:b1:fc:3f:3b:
                    8d:f3:ab:ad:b7:ec:4e:ea:dc:71:4e:03:fa:f9:07:
                    5f:d4:df:84:2c:1a:67:3d:68:d5:ea:e9:0d:08:46:
                    47:f7:79:bf:62:6d:db:0d:31:18:d0:c7:98:42:5c:
                    a8:2a:85:fb:8a:d1:44:85:f8:06:33:87:92:8c:65:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:14:48:12:ED:F3:3A:84:47:99:76:02:A4:7D:0B:5A:28:6C:E0:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab9518e7-aadb-38ce-8217-15cef0552676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:42:f9:53:ff:78:0c:a7:af:42:65:b4:53:d1:03:c5:33:ad:
         22:c6:20:b5:03:4c:d1:c5:25:c0:81:11:95:6c:26:e6:1e:90:
         3e:7e:f4:d6:2c:6d:5a:1d:71:d1:eb:4d:11:67:4c:f0:c4:69:
         52:c2:39:51:fa:61:e2:9f:c6:fe:d0:e5:11:1a:eb:b4:08:e6:
         d8:0f:3d:f8:ae:73:0a:37:f8:84:eb:ce:4d:a7:1e:16:86:15:
         b8:69:3c:cf:0f:11:70:de:37:62:8a:96:c9:a3:5a:79:b8:93:
         ac:0f:a7:80:cb:68:ca:2f:53:09:53:45:92:e4:db:dd:d4:51:
         da:98:c3:d2:f1:8a:a8:4e:80:1e:0a:0c:03:e8:c8:b8:93:ab:
         27:78:53:91:6f:23:b9:1a:c0:a1:19:ac:4e:94:32:e8:ce:43:
         11:2d:ee:93:9d:0d:67:3a:43:3d:10:6f:64:ca:00:fe:9e:5c:
         15:cf:03:d0:82:bf:ac:2f:a4:7e:5c:6e:5a:85:d5:2a:9c:98:
         a1:55:8d:ff:a5:7e:90:74:be:c1:37:c8:e7:63:ab:ec:af:9e:
         f0:12:77:09:12:7d:5b:7d:ba:5a:66:e8:3f:9d:2b:2e:4f:62:
         aa:44:fc:cd:c3:3e:c7:56:12:86:0d:62:b0:43:e1:e1:18:75:
         83:31:cc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:56 2025 by rpki-client