Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda720f6-f1fe-3a7c-ba27-823efa456cc4.roa
File:                     bda720f6-f1fe-3a7c-ba27-823efa456cc4.roa (raw, json)
Hash identifier:          CtkuXqFNQpsNQPyg4E4+hO/8bxgSxZJH/YKnshdDzJY=
Subject key identifier:   CC:E6:5D:60:22:97:EF:FF:2B:AB:F1:19:C0:E1:7E:55:B9:EA:46:A4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C575C8D3E33ED06EF25BAD58
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda720f6-f1fe-3a7c-ba27-823efa456cc4.roa
Signing time:             Tue 04 Feb 2025 13:38:27 +0000
ROA not before:           Tue 04 Feb 2025 13:38:27 +0000
ROA not after:            Mon 05 May 2025 12:38:27 +0000
asID:                     30036
IP address blocks:        173.30.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:75:c8:d3:e3:3e:d0:6e:f2:5b:ad:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:38:27 2025 GMT
            Not After : May  5 12:38:27 2025 GMT
        Subject: CN=d54c5ea3-4574-4859-9500-ce3564e38603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:43:6c:b8:21:70:7b:70:4d:5d:6e:13:92:dd:
                    1b:25:fa:a7:03:cf:ad:04:0f:4a:11:41:5f:57:97:
                    bc:74:7d:bf:31:9d:46:60:27:ac:da:2d:ca:0f:ed:
                    92:26:cb:67:9f:0c:2b:04:ce:fe:37:0f:e1:d3:25:
                    2a:40:2e:8f:5a:82:75:42:7f:e8:1f:ff:27:46:3c:
                    26:53:c3:79:3a:9f:9b:3e:7c:d2:39:35:11:10:36:
                    de:e3:69:d9:32:d6:75:5e:c1:c3:73:f8:ee:ac:5c:
                    41:02:bf:a0:76:ca:a5:82:66:0b:bb:23:bb:b9:ee:
                    ab:94:ab:66:e0:b4:65:48:ea:36:13:49:df:0f:c7:
                    8b:10:d4:88:a8:33:e5:eb:6c:70:ec:6a:05:7c:f4:
                    d6:f8:bf:e1:3f:6a:95:c5:36:c9:75:ea:c3:0b:0b:
                    f8:3e:6d:73:7c:04:2a:4a:34:55:14:60:ea:85:ba:
                    c9:cc:15:b8:27:e7:1a:1a:15:fe:25:18:cc:53:2c:
                    c7:2b:27:aa:92:42:ec:f8:a3:a3:3d:d4:2d:98:0c:
                    d3:b6:13:fd:fe:16:ba:6f:b5:43:3a:aa:e9:21:42:
                    8a:2e:5b:cd:90:27:ca:da:99:88:f6:61:95:fc:bd:
                    1e:e2:78:88:2a:7b:a4:2f:64:de:55:86:dd:37:53:
                    a1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E6:5D:60:22:97:EF:FF:2B:AB:F1:19:C0:E1:7E:55:B9:EA:46:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda720f6-f1fe-3a7c-ba27-823efa456cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:aa:19:e8:ec:85:ce:95:34:2c:67:99:9a:43:ec:81:25:
         f9:0e:01:d4:05:62:7f:3d:76:c1:b7:51:83:9b:84:66:ff:eb:
         d2:71:4b:b1:04:b1:3e:e5:ab:ce:30:85:a8:c9:1a:d8:d9:ea:
         14:be:b7:e4:1a:f2:5e:57:f7:ec:f7:f0:d0:7c:18:6e:4f:0a:
         5e:da:56:a4:7e:ed:d4:49:33:21:b0:62:29:03:d5:4f:d9:01:
         67:e8:fd:07:f9:a9:92:5a:20:78:1e:c7:80:eb:de:60:22:3d:
         2b:dd:a1:5b:da:4a:d7:00:6c:21:62:12:4b:72:71:c4:94:78:
         02:19:7f:50:a9:44:b0:66:b0:e4:10:5e:58:e6:80:00:89:92:
         16:9a:d3:4a:a5:17:05:0b:97:a9:6d:a0:f1:a6:23:5c:c4:0e:
         e7:98:ba:65:e8:38:5a:c2:e1:ff:63:9d:6c:6d:d3:f6:96:4e:
         87:44:63:8c:bf:0e:da:28:71:ca:3c:8a:a5:9a:93:5a:44:6a:
         54:6a:ef:61:7a:ee:8a:8a:5d:01:87:2b:b5:b3:7c:67:aa:85:
         10:00:0c:05:cb:3a:af:e7:1e:45:33:2d:83:a1:59:e0:3e:04:
         17:3d:44:ec:a9:de:89:e0:aa:3f:60:1b:c0:da:c2:15:87:b0:
         9d:c5:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:24 2025 by rpki-client