Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd804710-ccc4-3e3c-ac53-6bcd21ec7697.roa
File:                     cd804710-ccc4-3e3c-ac53-6bcd21ec7697.roa (raw, json)
Hash identifier:          1gzVlu+Q9SZltuH9qc7pG6wVJwdXZxuv0Jg6MzIy6o8=
Subject key identifier:   7C:BD:83:A1:48:07:4B:C1:6B:71:70:F9:16:AA:A1:E9:6E:92:E4:82
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7F7B1E49D7799B05DED0940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd804710-ccc4-3e3c-ac53-6bcd21ec7697.roa
Signing time:             Wed 05 Feb 2025 11:11:49 +0000
ROA not before:           Wed 05 Feb 2025 11:11:49 +0000
ROA not after:            Tue 06 May 2025 10:11:49 +0000
asID:                     30036
IP address blocks:        173.30.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f7:b1:e4:9d:77:99:b0:5d:ed:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:11:49 2025 GMT
            Not After : May  6 10:11:49 2025 GMT
        Subject: CN=a352a137-efe5-4606-9c82-0114f4557a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:ed:3e:04:18:2e:4f:cf:30:f7:1f:3f:49:
                    2b:c2:95:c0:c1:29:d7:f7:64:8d:ac:a5:ae:b0:ec:
                    d3:64:6d:83:7f:95:d3:55:11:03:09:c9:2d:0f:8b:
                    92:dc:08:44:c0:c4:10:fd:28:06:3b:c1:4b:55:f1:
                    9b:a5:33:79:b4:65:2f:18:9f:44:d3:18:db:45:65:
                    43:5b:fd:2a:4c:a3:f8:18:f5:c2:9b:94:04:ff:00:
                    90:ff:27:9d:1e:75:17:29:23:d8:fc:ce:c4:dc:61:
                    8a:03:b2:9e:77:26:6c:cb:70:43:11:70:9c:6f:db:
                    bd:50:5c:a1:ef:37:fb:64:77:01:81:19:fb:56:90:
                    05:2b:f5:c8:e0:73:f6:49:6f:b1:00:e5:d3:48:cc:
                    eb:c4:f3:c2:5b:76:93:e6:68:f5:fc:01:ab:36:08:
                    a8:d3:f0:db:4d:85:33:79:fe:d1:d7:86:6a:86:49:
                    58:ca:1a:90:9e:6c:5d:b4:8a:d2:91:8a:12:64:d2:
                    71:3a:62:12:07:11:b0:ef:5b:ae:a4:25:0a:5d:e2:
                    d0:94:4c:f5:ba:d6:cd:11:53:20:0a:7d:e6:8c:99:
                    8c:fd:46:dc:3a:86:17:63:55:de:d7:f5:58:a9:bc:
                    10:47:a1:7b:2e:d7:93:61:bb:52:2b:ea:66:78:d6:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BD:83:A1:48:07:4B:C1:6B:71:70:F9:16:AA:A1:E9:6E:92:E4:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd804710-ccc4-3e3c-ac53-6bcd21ec7697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:96:fc:c9:50:54:8c:4b:77:0d:33:ab:22:cd:0f:17:58:b1:
         98:f0:ab:89:49:8d:7e:bb:b2:19:cf:25:25:f6:a1:fe:da:f2:
         1c:98:97:b4:e4:46:b3:80:f3:b5:51:51:24:a4:ab:76:b3:59:
         e7:e9:8b:1a:fa:eb:36:19:be:6a:6d:bd:24:fb:3f:5c:00:cc:
         1e:26:12:96:8f:07:70:1c:c3:d2:ed:bb:2f:40:ce:1f:7d:40:
         83:e0:ef:49:46:2f:ee:8d:92:5a:74:63:57:9b:b3:6f:5a:ab:
         10:a3:e7:d7:e3:bd:36:c6:9d:d8:ca:c5:cb:51:88:89:8c:81:
         05:ab:0b:06:89:2c:8b:30:ae:f7:5e:29:39:b7:ee:25:b3:9f:
         8a:39:ef:12:65:8b:d3:63:b1:e8:cd:5d:c9:4d:d4:f4:4c:d5:
         2b:1f:14:c2:db:7b:cb:c5:3a:48:82:17:9d:a5:54:fe:b0:57:
         82:b3:30:de:9c:76:f5:11:80:22:5a:eb:a8:6e:07:cb:bf:31:
         15:c3:c9:49:06:ce:a4:20:4d:91:28:e6:d1:26:01:13:45:b8:
         51:d7:82:16:8c:1d:18:89:46:31:b8:11:81:b8:5b:e4:c9:2a:
         c4:cb:5f:e7:8d:c9:33:69:88:b2:f3:25:8d:c6:8f:4c:42:3d:
         df:e0:6e:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH97HknXeZsF3tCUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNTExMTE0OVoXDTI1MDUwNjEwMTE0OVowLzEtMCsGA1UEAxMk
YTM1MmExMzctZWZlNS00NjA2LTljODItMDExNGY0NTU3YTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTTtPgQYLk/PMPcfP0krwpXAwSnX92SNrKWu
sOzTZG2Df5XTVREDCcktD4uS3AhEwMQQ/SgGO8FLVfGbpTN5tGUvGJ9E0xjbRWVD
W/0qTKP4GPXCm5QE/wCQ/yedHnUXKSPY/M7E3GGKA7KedyZsy3BDEXCcb9u9UFyh
7zf7ZHcBgRn7VpAFK/XI4HP2SW+xAOXTSMzrxPPCW3aT5mj1/AGrNgio0/DbTYUz
ef7R14ZqhklYyhqQnmxdtIrSkYoSZNJxOmISBxGw71uupCUKXeLQlEz1utbNEVMg
Cn3mjJmM/UbcOoYXY1Xe1/VYqbwQR6F7LteTYbtSK+pmeNYzdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHy9g6FIB0vBa3Fw+RaqoelukuSCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Q4MDQ3MTAtY2NjNC0z
ZTNjLWFjNTMtNmJjZDIxZWM3Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+W/MlQVIxLdw0zqyLNDxdYsZjwq4lJjX67shnPJSX2of7a8hyYl7Tk
RrOA87VRUSSkq3azWefpixr66zYZvmptvST7P1wAzB4mEpaPB3Acw9Ltuy9Azh99
QIPg70lGL+6Nklp0Y1ebs29aqxCj59fjvTbGndjKxctRiImMgQWrCwaJLIswrvde
KTm37iWzn4o57xJli9NjsejNXclN1PRM1SsfFMLbe8vFOkiCF52lVP6wV4KzMN6c
dvURgCJa66huB8u/MRXDyUkGzqQgTZEo5tEmARNFuFHXghaMHRiJRjG4EYG4W+TJ
KsTLX+eNyTNpiLLzJY3Gj0xCPd/gbgk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:15 2025 by rpki-client