Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc231298-b16e-336f-8896-dea6060bb4c7.roa
File:                     dc231298-b16e-336f-8896-dea6060bb4c7.roa (raw, json)
Hash identifier:          ogqfTW66SwWIY2v4I+EvzLNFZrYF4IGggDXs/0RT/k8=
Subject key identifier:   64:C7:6E:51:3C:85:8C:CB:F6:3E:C9:32:4C:18:A1:5F:BE:62:A6:B9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C57582285EDDD2F5E0A15440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc231298-b16e-336f-8896-dea6060bb4c7.roa
Signing time:             Tue 04 Feb 2025 13:37:54 +0000
ROA not before:           Tue 04 Feb 2025 13:37:54 +0000
ROA not after:            Mon 05 May 2025 12:37:54 +0000
asID:                     30036
IP address blocks:        173.18.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:75:82:28:5e:dd:d2:f5:e0:a1:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:37:54 2025 GMT
            Not After : May  5 12:37:54 2025 GMT
        Subject: CN=2bc7a1d0-8ed9-411f-a2a6-292a066979dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c9:8d:d8:0f:a6:6b:36:9d:be:bc:3e:56:8a:
                    e1:2a:a7:d2:ec:fe:fb:25:98:31:f6:a2:fa:8e:43:
                    08:7d:8b:ec:dd:39:63:f6:9b:13:e1:bd:83:60:0e:
                    6f:3e:37:e9:9e:1d:56:2d:6b:b7:6d:8b:28:6e:95:
                    0b:7e:c8:51:80:6d:99:cc:93:d7:74:97:54:5d:ff:
                    cb:cc:72:63:9a:71:f0:df:a2:49:88:ee:bc:31:ba:
                    58:3d:78:6e:d4:b0:69:dd:b6:78:06:5b:1c:b1:e2:
                    5f:1b:4b:f3:2c:c8:25:c9:7a:43:3d:aa:8c:f9:cd:
                    8f:0a:b3:e8:6f:4c:62:92:45:61:06:ee:b2:10:1f:
                    84:05:dd:07:a9:46:39:2d:f2:97:c9:a3:12:7f:ac:
                    e0:00:b6:7b:e8:13:08:5d:ae:52:3d:3e:34:0f:a5:
                    30:b2:d7:bf:13:06:33:ea:ec:f9:9a:b2:e6:74:82:
                    10:06:43:cd:84:d1:64:a8:41:83:6c:fd:f9:52:af:
                    5a:05:b2:b6:9e:e4:88:d3:f3:5d:c4:0c:be:f8:6b:
                    05:d0:8d:f9:2d:bc:c5:1f:de:9a:00:e8:23:a6:11:
                    5d:96:23:6e:22:2a:cf:0c:aa:17:22:9f:b0:b6:16:
                    b4:4f:a6:17:0b:57:d9:0d:d4:a0:55:3a:e7:a1:fe:
                    b8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C7:6E:51:3C:85:8C:CB:F6:3E:C9:32:4C:18:A1:5F:BE:62:A6:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc231298-b16e-336f-8896-dea6060bb4c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:06:d9:84:92:2d:70:34:b7:fc:0c:a9:17:57:f2:fd:2a:7f:
         6c:7c:9c:26:28:96:77:76:c2:35:87:8e:fa:a3:bd:71:60:f5:
         dd:4d:a7:a9:c4:9f:18:3f:9c:0b:ff:36:3c:38:0c:43:93:49:
         1e:f8:25:25:89:8d:ad:28:bc:62:33:02:1b:a6:c7:7d:b0:e0:
         c9:ce:f0:6c:bc:3e:fb:e9:f4:f7:6b:97:4d:ca:f8:5d:1f:b1:
         19:7c:57:86:30:f9:ad:05:4b:57:f7:4d:34:dc:09:f2:73:5c:
         e5:61:c0:74:50:18:e5:df:d6:69:a3:c1:13:da:d6:4a:35:e2:
         83:31:67:33:2d:cc:69:7f:3c:2d:36:cc:76:96:72:fe:12:2b:
         ed:40:43:b8:c1:ed:86:da:7f:4b:d6:3d:93:82:e1:f6:02:24:
         c1:c1:5d:4e:8f:44:6f:8e:6c:2c:01:2e:71:09:4a:48:52:ff:
         ae:cb:94:93:dc:84:d6:db:8d:b4:61:aa:d6:3d:0d:6f:b0:e1:
         f4:6d:bf:8c:a7:0f:6c:6f:ee:14:66:53:9b:30:65:ce:a3:44:
         b7:cd:e9:3b:8e:d5:76:bb:17:3c:b0:31:ad:d3:47:37:4d:2b:
         9b:94:86:cc:9b:38:89:6e:fd:59:c7:7f:4c:d1:a4:98:4a:db:
         ea:75:19:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdYIoXt3S9eChVEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzMzc1NFoXDTI1MDUwNTEyMzc1NFowLzEtMCsGA1UEAxMk
MmJjN2ExZDAtOGVkOS00MTFmLWEyYTYtMjkyYTA2Njk3OWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcmN2A+mazadvrw+VorhKqfS7P77JZgx9qL6
jkMIfYvs3Tlj9psT4b2DYA5vPjfpnh1WLWu3bYsobpULfshRgG2ZzJPXdJdUXf/L
zHJjmnHw36JJiO68MbpYPXhu1LBp3bZ4BlscseJfG0vzLMglyXpDPaqM+c2PCrPo
b0xikkVhBu6yEB+EBd0HqUY5LfKXyaMSf6zgALZ76BMIXa5SPT40D6Uwste/EwYz
6uz5mrLmdIIQBkPNhNFkqEGDbP35Uq9aBbK2nuSI0/NdxAy++GsF0I35LbzFH96a
AOgjphFdliNuIirPDKoXIp+wtha0T6YXC1fZDdSgVTrnof64fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTHblE8hYzL9j7JMkwYoV++Yqa5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGMyMzEyOTgtYjE2ZS0z
MzZmLTg4OTYtZGVhNjA2MGJiNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRKwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEgG2YSSLXA0t/wMqRdX8v0qf2x8nCYolnd2wjWHjvqjvXFg9d1Np6nE
nxg/nAv/Njw4DEOTSR74JSWJja0ovGIzAhumx32w4MnO8Gy8Pvvp9Pdrl03K+F0f
sRl8V4Yw+a0FS1f3TTTcCfJzXOVhwHRQGOXf1mmjwRPa1ko14oMxZzMtzGl/PC02
zHaWcv4SK+1AQ7jB7Ybaf0vWPZOC4fYCJMHBXU6PRG+ObCwBLnEJSkhS/67LlJPc
hNbbjbRhqtY9DW+w4fRtv4ynD2xv7hRmU5swZc6jRLfN6TuO1Xa7FzywMa3TRzdN
K5uUhsybOIlu/VnHf0zRpJhK2+p1Gak=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:27:58 2025 by rpki-client