Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbf3ccc6-818a-33aa-b232-2c839505e71f.roa
File:                     dbf3ccc6-818a-33aa-b232-2c839505e71f.roa (raw, json)
Hash identifier:          6MTaUYgtDfOkWABHRY9UZq75r60Ki4bKpa4v/vW3cEA=
Subject key identifier:   94:45:AE:9D:3B:22:8B:F0:6D:AD:0B:47:2F:32:F4:3C:AF:5D:DF:26
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C57E0E771D420F739E6C7F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbf3ccc6-818a-33aa-b232-2c839505e71f.roa
Signing time:             Tue 04 Feb 2025 13:55:07 +0000
ROA not before:           Tue 04 Feb 2025 13:55:07 +0000
ROA not after:            Mon 05 May 2025 12:55:07 +0000
asID:                     30036
IP address blocks:        173.25.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:7e:0e:77:1d:42:0f:73:9e:6c:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:55:07 2025 GMT
            Not After : May  5 12:55:07 2025 GMT
        Subject: CN=fbc31047-842a-42c2-b4de-06587e1ce15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:b4:c6:e1:66:27:30:ae:6f:21:e5:6e:b7:
                    1a:60:f4:f8:59:58:94:84:a5:d7:59:92:4c:35:67:
                    96:fe:00:d2:41:48:8e:7c:fd:af:1f:54:ab:4d:2e:
                    1c:6b:3f:3f:ea:ae:fd:40:bb:1b:f0:22:d8:bb:72:
                    e3:d3:9d:ef:65:e0:1b:3b:cf:23:04:20:8d:bd:24:
                    46:a5:46:d8:69:32:bd:9e:a4:62:e7:54:62:c3:e7:
                    36:a7:55:e4:90:6b:38:61:75:ff:3b:dc:d2:91:5c:
                    db:72:0a:2e:b2:a7:4e:25:05:dc:53:32:14:fa:3a:
                    35:fa:b4:9d:3a:2b:06:a5:6e:59:eb:84:54:e4:97:
                    13:61:d6:2f:2e:c0:c8:57:38:93:2a:19:38:f7:1e:
                    64:25:ae:63:7e:72:a8:61:fb:b3:7a:9f:55:e3:15:
                    9d:d5:f7:84:6f:39:56:14:a1:08:7a:cc:99:92:56:
                    0c:11:86:fa:45:4f:df:f4:e4:a1:47:0c:f2:fe:7c:
                    90:eb:26:5f:fe:7a:dd:a4:61:75:f2:c4:00:2f:76:
                    bf:1a:a4:3f:5e:c0:2f:10:f7:ff:d6:1c:ea:25:65:
                    ac:43:2f:76:34:d3:9a:8a:3b:ea:84:23:2b:76:02:
                    d9:41:51:fc:27:ee:27:71:5d:9b:e2:b9:6f:fa:4a:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:45:AE:9D:3B:22:8B:F0:6D:AD:0B:47:2F:32:F4:3C:AF:5D:DF:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbf3ccc6-818a-33aa-b232-2c839505e71f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ee:76:05:ae:02:c0:f6:b8:98:97:5b:ce:c8:54:f8:0a:9a:
         4b:7e:d1:ad:88:6d:33:11:b7:30:e1:d7:de:a1:e4:58:47:eb:
         a0:8a:b7:a8:7c:07:8a:4f:bb:2d:f6:51:19:8d:6e:5d:4c:b3:
         12:e8:bc:50:f6:92:ec:8a:b5:d8:ce:eb:b7:31:cc:4a:2f:c4:
         11:e4:68:ee:5c:a3:55:1c:f8:be:72:aa:6a:55:75:ff:29:f7:
         0e:c9:89:79:43:ba:12:d0:64:05:01:88:21:0d:3c:f9:8c:e5:
         cf:90:45:7c:02:a6:89:53:8c:85:6e:aa:ce:75:db:79:76:94:
         f9:4c:d0:26:c0:3c:56:f9:51:b4:dd:ac:32:f9:62:59:75:5b:
         d5:cc:11:d8:22:b8:cd:03:64:c0:4c:91:fe:d6:1e:d8:d5:1f:
         24:62:87:53:ba:83:c8:9e:0f:b4:dc:01:40:ba:c3:60:8e:bd:
         26:7c:06:2c:51:cb:3b:f5:76:ae:43:d1:a7:af:c5:36:10:d9:
         5c:2d:05:e3:33:24:87:5b:32:31:03:49:b6:68:4f:43:62:1a:
         ed:48:6c:2c:42:db:3d:a2:b2:ea:a1:02:28:36:82:80:a6:ac:
         36:e0:8e:51:32:1f:69:ec:dd:e9:46:c7:c9:25:a7:c4:eb:51:
         1f:c1:8c:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfg53HUIPc55sfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzNTUwN1oXDTI1MDUwNTEyNTUwN1owLzEtMCsGA1UEAxMk
ZmJjMzEwNDctODQyYS00MmMyLWI0ZGUtMDY1ODdlMWNlMTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuly0xuFmJzCubyHlbrcaYPT4WViUhKXXWZJM
NWeW/gDSQUiOfP2vH1SrTS4caz8/6q79QLsb8CLYu3Lj053vZeAbO88jBCCNvSRG
pUbYaTK9nqRi51Riw+c2p1XkkGs4YXX/O9zSkVzbcgousqdOJQXcUzIU+jo1+rSd
OisGpW5Z64RU5JcTYdYvLsDIVziTKhk49x5kJa5jfnKoYfuzep9V4xWd1feEbzlW
FKEIesyZklYMEYb6RU/f9OShRwzy/nyQ6yZf/nrdpGF18sQAL3a/GqQ/XsAvEPf/
1hzqJWWsQy92NNOaijvqhCMrdgLZQVH8J+4ncV2b4rlv+koE2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRFrp07Iovwba0LRy8y9DyvXd8mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGJmM2NjYzYtODE4YS0z
M2FhLWIyMzItMmM4Mzk1MDVlNzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXudgWuAsD2uJiXW87IVPgKmkt+0a2IbTMRtzDh196h5FhH66CKt6h8
B4pPuy32URmNbl1MsxLovFD2kuyKtdjO67cxzEovxBHkaO5co1Uc+L5yqmpVdf8p
9w7JiXlDuhLQZAUBiCENPPmM5c+QRXwCpolTjIVuqs5123l2lPlM0CbAPFb5UbTd
rDL5Yll1W9XMEdgiuM0DZMBMkf7WHtjVHyRih1O6g8ieD7TcAUC6w2COvSZ8BixR
yzv1dq5D0aevxTYQ2VwtBeMzJIdbMjEDSbZoT0NiGu1IbCxC2z2isuqhAig2goCm
rDbgjlEyH2ns3elGx8klp8TrUR/BjEM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:28 2025 by rpki-client