Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af884c94-8ab1-304f-82cb-9eac852fa966.roa
File:                     af884c94-8ab1-304f-82cb-9eac852fa966.roa (raw, json)
Hash identifier:          cp0Jo2j1ZzsF534PXmYS519h41F1ZS1PxH0AIxWs0lg=
Subject key identifier:   6C:79:55:B6:15:64:5C:D2:75:60:D4:27:1C:6F:47:DA:5D:34:70:52
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C55F70840252966E94ED21C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af884c94-8ab1-304f-82cb-9eac852fa966.roa
Signing time:             Tue 04 Feb 2025 12:53:26 +0000
ROA not before:           Tue 04 Feb 2025 12:53:26 +0000
ROA not after:            Mon 05 May 2025 11:53:26 +0000
asID:                     30036
IP address blocks:        173.18.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:5f:70:84:02:52:96:6e:94:ed:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:53:26 2025 GMT
            Not After : May  5 11:53:26 2025 GMT
        Subject: CN=25790808-9074-4cf0-99a0-910d23166a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:b4:28:ca:06:53:78:3b:79:90:66:cc:62:
                    19:2b:bf:32:3a:d1:7f:7c:fe:f8:8a:2d:af:87:b2:
                    7f:59:5b:44:06:5a:b7:c5:9b:df:31:23:77:52:0d:
                    0c:59:39:5c:20:05:f1:34:b2:20:cb:70:f9:f4:11:
                    78:8f:39:94:69:de:12:74:52:21:d1:1d:5a:a4:63:
                    83:7d:35:98:33:69:dc:89:80:dc:a2:1a:71:98:e4:
                    9b:6d:7c:8c:c5:19:ce:a7:e6:ed:42:29:50:d0:6c:
                    77:c4:f6:64:bc:db:14:60:1f:b8:07:e1:76:c9:52:
                    24:a4:cb:88:a0:8b:5b:de:2e:bc:ce:27:33:03:ce:
                    4b:80:44:12:0b:bf:b6:f8:d8:a7:c4:44:d5:67:75:
                    0a:39:be:fc:e3:6f:a2:64:cc:62:82:26:ab:1e:ec:
                    45:ee:c1:e2:16:77:fa:ab:21:d6:bc:77:87:2c:3c:
                    54:50:88:ed:11:24:22:62:ee:80:e2:de:fd:65:0d:
                    03:1d:6a:33:a3:ff:b6:89:ca:c6:02:ec:fa:10:f9:
                    e9:5e:7a:0a:eb:3a:ec:22:6f:4c:18:7f:59:dc:54:
                    96:f8:f3:a7:e0:c4:ee:7b:e1:5a:af:46:9d:bb:b7:
                    f0:cc:1e:96:99:9b:60:9e:1f:c6:93:07:46:c5:26:
                    a0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:79:55:B6:15:64:5C:D2:75:60:D4:27:1C:6F:47:DA:5D:34:70:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af884c94-8ab1-304f-82cb-9eac852fa966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:5d:7e:ff:82:36:fe:94:4d:64:ec:70:a4:be:3b:d2:1a:43:
         3b:60:7d:11:cd:d2:0b:70:c5:bf:54:89:95:51:80:5f:ad:77:
         69:37:3c:93:b1:59:a4:5e:62:b1:09:23:43:2a:12:32:7b:d0:
         74:31:74:8e:ce:d0:b2:54:c3:b6:3d:e3:c2:44:f5:af:47:2a:
         11:43:f4:90:fb:22:75:c0:f9:ac:8b:0e:f4:2d:01:73:44:b9:
         7a:97:e0:c4:7c:8e:bd:c4:38:19:c9:f0:f8:cd:53:4d:18:ea:
         ed:d1:c6:d6:8c:62:a3:bb:26:64:fe:0e:75:ce:ca:49:79:e1:
         4f:f5:50:cd:af:c8:62:36:07:2d:c7:02:80:92:4d:13:9b:d5:
         a3:44:da:fd:67:be:ce:92:94:0d:6b:be:93:1b:fd:0f:53:40:
         a2:75:0d:6b:51:10:3c:a1:03:9c:10:e4:12:10:ac:b2:0d:ac:
         1d:98:d4:75:7a:91:4f:c3:94:c6:e1:73:48:a1:51:1f:80:d0:
         5d:e6:87:b4:68:e6:cc:c5:c1:de:bf:f8:cf:72:a9:1d:92:62:
         a6:9f:81:b3:f2:10:de:17:e9:bc:6f:68:83:2e:8c:db:3f:81:
         41:76:44:a6:27:90:35:f2:73:7b:37:f6:6f:54:df:93:3e:04:
         03:a9:f4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:36 2025 by rpki-client