Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee249b8d-3b35-3b31-a36c-076f5eff8ea6.roa
File:                     ee249b8d-3b35-3b31-a36c-076f5eff8ea6.roa (raw, json)
Hash identifier:          GLvS52QtTAkXujlbz4XP6EJmCOUxQT8gb5VgYwAkpmM=
Subject key identifier:   2A:40:84:09:20:FA:80:80:40:9C:21:AC:80:B5:FB:D8:90:D1:D8:FB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C57D562B82EA255F2FCE3D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee249b8d-3b35-3b31-a36c-076f5eff8ea6.roa
Signing time:             Tue 04 Feb 2025 13:53:40 +0000
ROA not before:           Tue 04 Feb 2025 13:53:40 +0000
ROA not after:            Mon 05 May 2025 12:53:40 +0000
asID:                     30036
IP address blocks:        173.21.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:7d:56:2b:82:ea:25:5f:2f:ce:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:53:40 2025 GMT
            Not After : May  5 12:53:40 2025 GMT
        Subject: CN=8906e1a1-5d52-4340-8598-679d9e4bbd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:ec:c8:08:57:a3:6f:0b:e2:d3:4f:07:ab:
                    a9:b5:3e:56:3d:55:84:8b:e1:4f:0b:14:64:b3:b3:
                    00:a9:ea:22:80:5a:32:d1:0d:b4:8c:31:1b:e1:4c:
                    f7:c6:c8:0f:20:76:09:74:1b:7c:7d:05:92:c4:50:
                    bc:64:b4:36:71:df:d0:45:8b:7b:50:1a:a2:1d:af:
                    d3:06:cf:f3:3c:05:05:ce:e9:37:b4:3b:97:2c:4a:
                    b0:0f:40:3e:02:e3:0d:be:a7:52:3f:25:18:8c:c4:
                    0f:94:99:8e:6e:3e:2a:68:1c:97:f6:4a:20:c5:27:
                    7e:87:70:24:58:69:a5:73:ec:34:8d:90:d4:0a:fd:
                    c9:cb:31:73:42:25:8c:f4:75:bb:08:e1:4f:7d:6d:
                    10:0c:2e:fa:f8:49:21:7a:1f:be:61:01:b6:27:ea:
                    24:ec:48:23:07:0e:f5:d4:54:42:90:1f:83:2e:70:
                    93:10:57:92:fe:65:b3:e2:15:74:2d:6d:d4:4d:2b:
                    ff:3f:ad:de:53:c9:e5:94:0a:54:0d:9a:57:23:b3:
                    c4:8c:ee:ab:ec:2f:66:e9:73:a4:f5:9a:e9:78:4c:
                    52:2f:23:00:9a:46:05:a5:c9:ef:b2:fc:c6:b3:a7:
                    ce:f2:5d:57:96:3f:da:78:7e:2c:83:33:b1:8f:03:
                    8e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:40:84:09:20:FA:80:80:40:9C:21:AC:80:B5:FB:D8:90:D1:D8:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee249b8d-3b35-3b31-a36c-076f5eff8ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:65:c5:2d:ee:3e:bd:b9:eb:98:38:da:67:12:cb:3b:7a:da:
         22:74:98:84:b1:46:fd:42:ab:de:a4:ba:5f:8a:4d:e2:4a:8b:
         74:32:5a:27:af:3f:21:bc:81:82:d9:e5:d4:9f:ae:7c:e6:eb:
         de:49:a3:0d:0e:ff:aa:4b:7a:25:35:c4:3a:1b:3f:be:c2:51:
         06:a5:52:99:a2:6f:7e:fc:01:b8:a3:24:60:ea:39:dd:4c:60:
         b9:d9:6f:3a:5a:58:0d:85:6f:cf:35:0b:2f:a8:5c:b1:55:ef:
         9c:36:0c:ec:06:91:62:ab:2f:a0:8e:68:bf:f7:f2:1d:c5:86:
         ad:36:4d:25:9b:2a:37:a3:e6:66:63:8a:22:e6:e6:46:21:fa:
         aa:32:fe:ce:f2:5b:08:5a:a5:80:3d:39:ff:01:c7:d0:de:b8:
         73:0b:66:fb:b5:f7:11:5e:96:2a:7f:a0:b2:af:34:17:52:56:
         da:79:db:1f:d9:cf:6d:ec:62:d2:b8:0e:47:f5:53:c9:d6:7f:
         a5:d6:29:69:00:9a:3a:95:fc:d6:35:f2:2c:f7:da:d5:d0:3c:
         b6:c0:af:e5:ed:81:43:3a:28:3c:ce:d0:f2:b2:59:29:ab:1c:
         56:9b:10:02:aa:a1:46:a7:c6:15:51:20:61:9a:cf:34:b4:5f:
         6c:ac:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:27 2025 by rpki-client