Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/355f7c8c-0fde-3c5b-b1f9-9c63c894cedd.roa
File:                     355f7c8c-0fde-3c5b-b1f9-9c63c894cedd.roa (raw, json)
Hash identifier:          +cMmG7Rvi9HdhKVNv1wRzUuf1H10sCKEuvdSJ0zyi28=
Subject key identifier:   3C:34:49:39:E3:D7:26:68:3C:05:49:CB:2B:A2:63:93:05:0E:67:6B
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F43285849ED5855EA5EA1281F07FBAE00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/355f7c8c-0fde-3c5b-b1f9-9c63c894cedd.roa
Signing time:             Wed 21 May 2025 13:18:23 +0000
ROA not before:           Wed 21 May 2025 13:18:23 +0000
ROA not after:            Tue 19 Aug 2025 13:18:23 +0000
asID:                     3257
IP address blocks:        173.44.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:58:55:ea:5e:a1:28:1f:07:fb:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May 21 13:18:23 2025 GMT
            Not After : Aug 19 13:18:23 2025 GMT
        Subject: CN=adaa4be6-d506-44bf-9f8e-ddeed0216ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7a:b2:e7:96:6d:49:26:2d:ba:57:d5:fa:6b:
                    5b:90:33:17:56:60:e6:96:fb:02:55:3c:1e:46:86:
                    d4:04:bc:c6:29:a3:7a:89:8c:e7:d7:77:da:95:4b:
                    ed:d4:52:ab:6f:0e:66:f9:df:ef:f9:ae:a1:06:7c:
                    b2:bd:f8:b6:2d:ed:04:d4:b5:5e:48:b7:73:63:04:
                    61:2a:56:1c:bc:07:d9:81:8c:51:ba:88:ce:c3:5f:
                    be:fe:bf:98:5c:64:97:52:ff:b3:c9:7d:f2:65:bc:
                    68:ff:b5:04:0e:f4:2c:d2:f9:91:86:78:be:c4:58:
                    0e:08:9c:d6:b7:d4:26:44:ad:5f:0b:98:34:8b:b6:
                    cb:9e:43:40:f4:1f:1b:a7:7a:35:51:9c:7f:e5:63:
                    05:8d:9e:5d:cd:81:65:91:e0:4b:1a:15:de:5e:76:
                    98:c4:d3:10:74:5b:50:03:23:21:29:3f:a1:e6:1d:
                    e1:5e:ad:48:85:04:6c:7d:9b:85:fd:74:af:24:0c:
                    b6:e2:0a:90:7d:fd:31:26:ae:91:b6:01:cb:44:e0:
                    d5:53:96:3f:37:e0:67:4a:65:f0:90:30:15:db:a5:
                    81:ff:a7:c4:b6:68:74:1b:31:6d:7f:54:ef:44:7f:
                    93:af:4b:8b:2e:d8:5b:16:d2:f3:c4:9d:bb:30:b1:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:34:49:39:E3:D7:26:68:3C:05:49:CB:2B:A2:63:93:05:0E:67:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/355f7c8c-0fde-3c5b-b1f9-9c63c894cedd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:8d:17:8e:35:df:dc:d3:34:6b:ac:e9:c6:4f:49:9b:86:8e:
         eb:34:30:b6:85:f1:1d:3b:98:a1:17:49:fc:1e:fd:a0:76:10:
         0c:ab:59:21:1a:a1:1f:76:85:fa:0d:d5:b0:2a:6c:fa:d4:9a:
         aa:5f:30:de:34:ad:99:4b:32:5c:e6:50:7f:4f:fb:f0:b3:fc:
         7b:00:03:a5:74:92:0a:af:01:68:71:38:1d:6e:3c:11:f4:50:
         4d:71:75:7d:1b:ee:b5:83:79:91:bd:e4:0a:24:97:a2:f9:5e:
         0e:d6:d3:c3:25:8e:d9:bc:d3:d1:1d:fa:74:3e:7b:90:1a:51:
         b2:c6:46:2e:c9:7f:0c:45:e3:b2:15:dc:6a:e8:0f:97:50:db:
         6f:f2:57:37:c2:d8:20:05:4c:7f:eb:36:71:e0:bf:d9:0b:69:
         18:a1:94:7e:b0:43:9f:58:68:bd:d1:cd:8d:b1:4c:fc:47:1a:
         2e:2f:e3:aa:45:f2:8c:90:b2:e8:19:87:fd:1e:2e:ef:75:f9:
         d7:7a:b3:01:7d:6a:76:9e:f7:d5:b8:29:67:77:2d:35:03:fc:
         ad:f0:e7:0f:b5:0f:b6:65:b7:85:4f:99:9f:71:6c:da:92:b8:
         2e:dc:d5:d7:9b:e4:bc:2e:bb:39:35:30:b6:9a:fa:be:35:f5:
         fc:72:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:42:27 2025 by rpki-client