Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e979364-a13b-37dc-861b-0361f656029d.roa
File:                     1e979364-a13b-37dc-861b-0361f656029d.roa (raw, json)
Hash identifier:          yb35NjAcAXKdGhd+sqw8jTS4swnHBniTlPCuy+5+eEM=
Subject key identifier:   5A:FE:FD:26:14:62:B0:85:89:44:4A:44:11:13:DE:B0:20:E0:38:27
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584996C48A57791AFCCBEA7D3200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e979364-a13b-37dc-861b-0361f656029d.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.25.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:8a:57:79:1a:fc:cb:ea:7d:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=310cff57-f51c-436b-9827-9daf473dc611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2d:f9:f4:e9:ce:cd:e7:f1:63:3c:af:e1:ff:
                    28:7a:a3:7d:f4:a4:84:d3:e3:37:aa:48:27:0a:01:
                    4e:42:92:ff:06:bb:86:95:3b:de:1b:b5:ed:a4:36:
                    b5:91:b4:92:03:31:33:e0:18:0a:f2:91:8d:a9:1d:
                    88:76:82:98:bd:5b:2e:19:97:e5:db:78:48:e1:12:
                    18:7e:d2:b3:41:19:01:c6:1c:1d:60:75:1a:22:3b:
                    3c:f0:dc:43:a7:01:28:f0:40:89:de:a6:cd:a4:6d:
                    d1:a6:3b:ff:d3:28:d4:19:fc:db:b6:97:2f:8f:1f:
                    bb:a1:b8:49:27:4c:b5:3c:16:f7:1d:08:a2:2d:96:
                    44:5d:e6:b3:21:37:8b:a3:da:52:1a:21:7d:3c:66:
                    1b:ef:7d:b2:11:f0:cc:e3:58:af:ab:e0:53:d1:13:
                    87:9f:9e:21:ba:e5:d0:0d:a1:31:b5:42:c5:2a:d6:
                    1d:11:c9:ca:70:b9:0b:0d:f1:db:eb:f5:c9:5e:2b:
                    5d:25:4d:e9:da:2a:1d:3e:10:b0:73:30:59:4d:ac:
                    bb:60:91:ba:f4:48:af:3a:df:55:53:e2:d4:59:1f:
                    8f:b9:b1:c6:60:04:8d:f2:cc:f8:e3:dd:b0:6f:af:
                    85:a5:93:02:1e:08:c5:01:35:1e:5c:c6:82:33:de:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FE:FD:26:14:62:B0:85:89:44:4A:44:11:13:DE:B0:20:E0:38:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e979364-a13b-37dc-861b-0361f656029d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:47:94:7e:a8:96:2a:db:71:5b:2e:fb:a6:30:55:cd:75:b7:
         16:7d:02:b9:cb:68:7c:bd:b8:d8:3a:74:31:c7:8b:16:4b:d7:
         bc:3b:3b:99:2e:7a:6d:e8:19:6d:2d:3b:9d:57:5f:0a:d5:fe:
         b8:a6:74:ef:a1:ed:70:ec:a3:77:e5:6a:bc:ce:bc:ff:25:51:
         7e:19:27:56:33:c9:6d:7b:b0:b4:02:6b:9c:83:23:88:32:13:
         a5:b9:ee:ca:cc:4a:7d:d3:38:ea:c1:cc:7a:ff:39:50:b7:e4:
         b9:83:58:13:4a:95:e9:48:88:ba:f8:75:13:2e:30:f4:cf:5f:
         2c:cf:60:41:e2:34:91:24:44:b5:48:36:4e:37:21:2a:08:f4:
         f5:a3:23:82:3e:68:4a:51:23:31:d7:50:fb:21:36:6e:b8:b1:
         a9:ab:b8:e1:97:2c:f3:f4:c2:c1:ff:5a:c6:48:a0:6b:99:51:
         58:59:06:20:2c:f3:b3:07:69:49:5e:52:c9:50:b9:3f:aa:21:
         3c:82:2e:1c:4b:3a:4c:d1:f8:4b:2f:b2:68:c1:21:53:c9:09:
         c4:f6:55:d1:a3:2e:e9:58:57:28:16:ed:f8:6a:43:7c:f5:16:
         ed:77:08:f2:85:22:07:01:9c:92:45:b4:b5:ce:7b:9b:a5:87:
         c0:23:22:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:00:18 2025 by rpki-client