Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa
File:                     b85ae6d7-e6f8-347c-9094-7c500122ea64.roa (raw, json)
Hash identifier:          BPwWowvEixEk4ZVP7pepLkoC6AU2l9HXdC0T3a4YOc4=
Subject key identifier:   EC:DE:70:9B:6E:F1:92:FC:21:A6:15:81:FD:10:DC:6A:4F:D1:FB:E8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7F5BC3CE06D6BB3E238D4C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa
Signing time:             Wed 05 Feb 2025 11:07:52 +0000
ROA not before:           Wed 05 Feb 2025 11:07:52 +0000
ROA not after:            Tue 06 May 2025 10:07:52 +0000
asID:                     30036
IP address blocks:        173.16.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f5:bc:3c:e0:6d:6b:b3:e2:38:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:07:52 2025 GMT
            Not After : May  6 10:07:52 2025 GMT
        Subject: CN=3abcec83-14b6-4046-919d-b5999e6a9fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:a4:21:31:46:08:91:3d:fd:02:9d:f8:a3:
                    b3:37:fb:8d:50:bf:a5:36:30:c2:a0:f6:0a:1a:1a:
                    ae:49:38:5f:82:76:d5:c3:7a:bd:6e:a7:29:83:70:
                    cd:4b:93:29:0c:b4:5f:03:65:19:b1:72:53:83:8f:
                    e8:f2:b1:c1:89:a4:58:5e:72:67:43:3d:a6:8f:a8:
                    84:25:2d:12:70:33:a2:c1:e0:53:5a:2a:7f:80:81:
                    b6:b8:86:78:bc:2b:d7:d4:b7:74:af:af:83:cf:9c:
                    31:aa:7f:3c:b5:e3:73:5b:e2:61:2e:1c:cd:30:a9:
                    b5:19:ba:c8:bb:d3:c0:4f:53:ca:7a:f1:f6:58:5b:
                    19:5c:a3:31:41:64:ae:66:1f:56:45:67:9e:08:bb:
                    e5:ee:50:b9:5e:3c:ab:48:e9:49:5a:ef:a9:92:33:
                    14:be:7b:70:d3:13:05:b5:54:9d:59:8a:b6:c1:b9:
                    78:77:eb:0c:ab:13:63:11:b8:b1:84:70:12:bc:8f:
                    d5:49:7e:1b:2d:39:44:30:eb:3f:8e:e7:ca:58:de:
                    38:bb:64:30:20:f3:41:fd:d4:c3:d0:97:25:b5:e3:
                    c0:04:0c:c2:d3:8e:d2:63:15:97:d0:91:cd:0f:84:
                    4c:90:8b:1e:51:c5:e6:0d:99:12:ce:94:bc:37:46:
                    f9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DE:70:9B:6E:F1:92:FC:21:A6:15:81:FD:10:DC:6A:4F:D1:FB:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:45:99:cd:92:fa:4f:53:a9:8d:c0:03:ec:3e:7a:07:cb:9f:
         0c:52:af:63:82:f4:83:a0:fc:c2:1a:30:3f:dd:67:85:3b:da:
         34:9f:6a:9f:42:6b:9e:92:c8:8b:c3:01:78:d2:9c:db:9a:9c:
         66:87:5c:bc:a2:35:fd:35:ce:f4:e1:7c:6c:a9:c5:c0:8c:5d:
         32:ae:e8:53:4e:6c:41:65:8e:2e:ee:7b:7b:45:ec:a8:b1:4c:
         3e:d6:7e:4e:91:22:05:68:c8:6d:35:21:8a:85:2d:82:7a:43:
         3d:60:3a:ce:6d:d0:0d:e4:ed:2a:8d:89:00:87:f1:3e:7e:ed:
         4d:8c:b2:c6:ce:99:f5:47:3c:67:a9:a1:d9:f2:81:c0:a3:a2:
         a0:5b:1e:d8:8c:22:12:47:56:e1:6d:1b:2f:82:01:66:55:ab:
         f7:f9:27:09:a8:c2:34:57:2a:e4:b8:69:1f:77:d5:a4:64:ba:
         1a:a9:f3:f5:30:f3:15:7b:89:c6:66:01:3d:d4:2f:f8:0b:bc:
         00:92:1a:80:89:ad:59:97:01:1f:36:44:59:6c:0d:fa:a8:a9:
         ce:be:bb:8e:b6:c3:e6:c0:fa:58:f8:ec:6e:59:5c:4b:c6:79:
         bc:bc:b1:37:60:47:95:fa:78:93:88:06:fb:ab:87:99:34:82:
         19:d8:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:26 2025 by rpki-client