Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfa7b05d-13b7-35c6-8de0-99282151b7d2.roa
File:                     dfa7b05d-13b7-35c6-8de0-99282151b7d2.roa (raw, json)
Hash identifier:          jgo5Xg0BVy3fT553DmaT2oVuEZUsW+vsMGEv9ojhlEo=
Subject key identifier:   E8:F1:F9:41:99:9C:2A:B4:F6:DA:97:13:67:8E:C5:98:42:78:8F:CA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7FDAEFF530B202465FCB100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfa7b05d-13b7-35c6-8de0-99282151b7d2.roa
Signing time:             Wed 05 Feb 2025 11:23:53 +0000
ROA not before:           Wed 05 Feb 2025 11:23:53 +0000
ROA not after:            Tue 06 May 2025 10:23:53 +0000
asID:                     30036
IP address blocks:        173.19.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:fd:ae:ff:53:0b:20:24:65:fc:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:23:53 2025 GMT
            Not After : May  6 10:23:53 2025 GMT
        Subject: CN=05752f3a-05f2-488d-9780-23def1d7e380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:91:a9:d8:36:40:39:62:ed:02:90:0c:2b:42:
                    a8:3d:87:70:e6:62:f0:f3:0a:05:b7:d0:30:b0:39:
                    bb:54:ed:d2:50:13:3b:b1:fa:db:c5:11:de:ce:35:
                    9e:a1:0f:59:64:28:d4:79:69:46:bd:d7:dc:c1:f4:
                    fb:5f:0b:c3:49:ef:74:d2:6b:db:78:16:63:ab:0e:
                    dd:8b:4a:f0:6a:29:46:e2:40:cb:18:38:ae:66:74:
                    a9:0c:74:e2:66:4f:be:a8:48:d5:25:25:6a:a7:20:
                    11:03:e2:64:65:34:ef:0a:0e:c2:5a:7b:3e:d2:e9:
                    a4:b4:4a:c2:4d:d6:1c:28:a8:39:64:10:a9:61:d2:
                    ab:66:5c:b9:92:1d:75:eb:eb:0f:62:35:2c:c2:43:
                    29:6b:0a:30:a0:85:ae:e2:5d:b3:08:be:1b:86:4b:
                    07:de:48:b9:d3:71:aa:d4:1a:51:89:41:0c:38:74:
                    13:d7:6c:e3:b8:3b:b2:6d:ca:96:49:d5:5a:df:99:
                    75:91:55:71:2f:1d:e2:ea:d9:da:99:dc:a3:b6:30:
                    81:03:ee:74:d8:34:d7:9a:41:0b:0a:e0:65:f6:b0:
                    48:93:f7:0d:dc:47:75:14:f8:d0:2a:26:c0:51:a0:
                    64:e9:22:fb:4a:4d:3a:20:bb:91:58:eb:ea:78:27:
                    ab:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F1:F9:41:99:9C:2A:B4:F6:DA:97:13:67:8E:C5:98:42:78:8F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfa7b05d-13b7-35c6-8de0-99282151b7d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ca:a2:c6:1d:10:ee:e1:41:ea:f3:9e:1f:db:4e:cd:cd:ce:
         36:ae:a6:db:a7:1d:70:96:af:b3:93:60:28:dc:0b:02:38:2e:
         f9:62:0c:12:c4:08:a1:a5:cf:4f:4e:b5:ac:3f:5e:1e:b0:be:
         9c:36:b0:2f:f7:1c:d2:25:15:21:fb:e8:ec:47:b5:1d:8d:d3:
         5c:44:8b:de:45:aa:72:ef:3a:e0:a0:1b:c1:eb:30:2c:26:91:
         3d:e3:a2:d3:11:9b:59:26:d7:d3:03:c9:d5:03:2f:45:34:76:
         78:44:45:ae:7f:a2:2a:92:3d:94:be:df:ad:bf:9a:fa:a3:73:
         b6:6e:c6:26:e0:e8:5d:b4:54:19:59:5a:28:9d:32:fa:c7:ce:
         88:8f:35:10:29:2e:c1:af:b3:bb:f7:2f:7e:e1:4c:11:92:0d:
         58:b8:e5:13:8f:96:6b:54:74:e6:87:e2:af:07:43:61:e1:c3:
         aa:34:53:96:b3:5f:ea:09:d8:97:04:4c:5d:5b:48:43:03:d9:
         e0:14:e4:b2:3d:63:42:dc:a9:f8:3b:ef:08:37:4d:04:6e:34:
         c2:79:a6:b2:32:a8:94:46:18:14:36:21:3e:0c:5b:5e:dd:f8:
         1e:46:a7:9f:5d:cb:c5:ad:d5:4f:15:66:ce:16:23:0b:2a:e0:
         50:12:4c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:57 2025 by rpki-client