Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa
File:                     c0286517-a220-316a-b592-8b2237a7fea3.roa (raw, json)
Hash identifier:          LCQ0CO9jrAr0i5ZIPkASgOSiz+EkYnUBWtkDFdXPiDw=
Subject key identifier:   C1:70:C6:3D:7B:AB:FE:44:0A:36:73:B1:E4:6F:1D:FB:A2:5B:26:C4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7F63BC3D55439AB93875280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa
Signing time:             Wed 05 Feb 2025 11:08:53 +0000
ROA not before:           Wed 05 Feb 2025 11:08:53 +0000
ROA not after:            Tue 06 May 2025 10:08:53 +0000
asID:                     30036
IP address blocks:        173.17.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f6:3b:c3:d5:54:39:ab:93:87:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:08:53 2025 GMT
            Not After : May  6 10:08:53 2025 GMT
        Subject: CN=4d9c972b-13e7-4a31-ab42-ed98861f9734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:54:cd:21:11:4b:00:79:90:20:41:e4:4e:
                    59:11:17:8c:fd:d6:5a:36:55:d3:23:d4:6b:fb:16:
                    26:74:7e:51:70:11:f1:62:d2:64:3d:54:a5:3c:fd:
                    9e:7f:d8:04:66:8a:5e:0d:88:59:50:6a:88:3f:94:
                    07:86:12:47:98:18:c4:77:2a:a9:5a:b1:b7:ce:32:
                    20:52:ad:94:8e:72:62:62:a5:3a:97:54:8a:79:01:
                    07:4d:4f:d9:d2:60:7d:f6:9d:33:59:7c:35:7c:09:
                    81:31:ac:ec:0e:55:d0:a2:71:40:35:52:f2:4f:fd:
                    9a:4d:57:93:47:63:3c:a0:74:b7:3e:c9:c1:b4:a9:
                    cf:fc:11:62:fe:47:d7:ab:68:16:47:be:94:15:15:
                    ac:5f:58:f4:3e:82:0e:ff:44:d1:5f:25:3f:d2:29:
                    a0:ac:72:40:80:60:a9:40:3e:11:e4:b6:2f:ca:83:
                    06:00:86:44:06:2d:25:dd:e7:47:0e:32:da:97:a9:
                    69:ff:b5:1d:74:8c:ab:4f:25:c2:20:31:fb:2b:ff:
                    c9:56:97:94:d1:83:37:05:33:a7:db:a1:33:02:6b:
                    60:12:fa:df:e4:9c:bb:81:e2:63:b6:03:a1:8b:f6:
                    7d:91:4f:d5:f2:8c:e0:ec:2e:7b:19:a9:b8:9e:5f:
                    5e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:70:C6:3D:7B:AB:FE:44:0A:36:73:B1:E4:6F:1D:FB:A2:5B:26:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:64:76:ec:7f:b2:f8:e5:5c:8f:c6:5e:01:9d:bb:59:46:3c:
         63:30:6a:67:40:89:a6:3a:55:77:52:8b:dc:19:eb:6c:d0:cc:
         f6:46:9f:ec:39:a8:45:f8:7e:19:8d:73:28:fd:41:8d:84:90:
         6b:21:21:4b:6b:cd:33:68:2b:b8:05:63:c9:67:bd:88:79:60:
         31:53:ac:4b:b0:c7:66:2a:5c:a5:fe:0b:de:94:96:af:c9:2e:
         46:df:23:84:81:90:af:0e:18:82:4a:a4:c2:c5:a6:22:c0:3a:
         10:f5:fe:44:7c:4e:1b:81:4f:5b:01:08:bb:66:d7:c8:dd:a0:
         9d:36:c7:b5:a1:5d:6c:95:56:9f:70:1a:ce:8d:44:fb:84:27:
         8d:5a:95:aa:c5:0c:fe:7f:93:f3:9f:3c:c7:df:d3:a4:08:44:
         2a:bf:4a:a3:cb:1c:a6:28:50:23:f3:ea:64:df:12:00:ec:29:
         0b:ca:e0:82:89:86:d4:9e:93:82:19:75:ae:c7:c5:6b:d4:f2:
         0e:47:74:c4:38:61:be:9f:2f:52:cf:23:6f:73:d2:61:e8:66:
         8c:2d:0f:2d:86:6e:6e:7e:bb:6c:fe:01:a9:d6:5b:38:00:19:
         73:a3:bb:41:52:32:d3:4b:ae:ca:c5:a0:00:c7:ea:17:e2:bd:
         04:c4:85:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:04:47 2025 by rpki-client