Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/272f8a43-bfd5-3784-80ef-ca7630e95de7.roa
File:                     272f8a43-bfd5-3784-80ef-ca7630e95de7.roa (raw, json)
Hash identifier:          wG4sVjZlz9hvoLyOYJbwpHh+ux5ic30xrCGZAbKp1N0=
Subject key identifier:   4C:F0:82:4C:06:62:D6:2A:D2:BA:20:22:EB:25:4F:9E:70:FC:2A:5B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849F38AFE27C2A1149940BBF600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/272f8a43-bfd5-3784-80ef-ca7630e95de7.roa
Signing time:             Fri 23 May 2025 18:35:18 +0000
ROA not before:           Fri 23 May 2025 18:35:18 +0000
ROA not after:            Thu 21 Aug 2025 18:35:18 +0000
asID:                     30036
IP address blocks:        173.29.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f3:8a:fe:27:c2:a1:14:99:40:bb:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 23 18:35:18 2025 GMT
            Not After : Aug 21 18:35:18 2025 GMT
        Subject: CN=36499c3e-f778-4b3d-8eee-2c8d0202700c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:c7:e7:4d:02:31:d3:41:46:08:b5:84:4c:
                    f9:00:95:1c:9f:e7:62:5b:d5:9c:93:ea:28:e9:41:
                    49:57:8a:cf:d5:4f:fa:c1:84:a2:fa:79:bd:33:0c:
                    94:6b:d5:f1:20:09:66:7a:45:b0:3c:84:0b:a2:77:
                    46:5f:48:bc:55:0e:df:a7:a7:f5:70:bc:4c:f9:6f:
                    60:01:03:63:d4:2e:b1:a6:b9:14:51:4e:aa:8c:3d:
                    16:bb:e4:01:ab:94:dd:8a:5d:df:5a:a1:40:e7:fd:
                    f8:70:c7:4f:ba:e8:f4:ca:cb:e5:14:d1:e8:7d:e9:
                    b2:27:de:ba:f1:fd:fb:c8:ec:16:cd:e0:a4:8a:65:
                    2b:79:d4:47:f4:19:c1:e4:3d:38:da:7c:e6:50:d6:
                    64:34:08:ab:bf:18:92:c4:a0:79:3c:71:e1:fd:fb:
                    49:23:2d:4b:3a:40:6a:c4:9e:51:96:f8:b4:3b:96:
                    af:d6:b7:4f:4c:2e:0a:c3:c0:94:4b:73:61:8d:61:
                    37:04:13:e2:8f:0f:f1:aa:c0:5a:05:01:bc:ff:f3:
                    87:0b:63:f5:9b:4d:19:56:08:37:b1:af:f8:fe:2c:
                    40:b3:38:a1:b4:42:bd:f9:79:84:8d:e3:0f:10:5e:
                    8f:aa:79:7e:9b:80:d5:ed:56:f0:ee:85:ea:09:6d:
                    7f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F0:82:4C:06:62:D6:2A:D2:BA:20:22:EB:25:4F:9E:70:FC:2A:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/272f8a43-bfd5-3784-80ef-ca7630e95de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:22:06:06:ce:ad:c4:52:6c:5f:83:0b:60:39:4f:f9:fb:ac:
         58:51:5e:a1:6b:4b:b2:2f:0c:d1:89:3e:7f:b3:ee:cb:dd:9e:
         40:6e:ab:87:81:ea:e6:d1:3e:1e:71:7e:6f:e2:e8:65:ab:fb:
         d4:56:12:8a:b1:06:b6:d3:b9:90:c5:6a:9c:a7:4b:85:1a:59:
         86:f4:44:3b:88:a6:0f:dc:42:ec:48:c8:93:30:62:e3:24:f9:
         95:bf:3e:96:b0:83:1f:c7:da:2b:42:bf:e3:e1:01:0d:17:7c:
         d9:c3:fb:c3:e0:10:41:2e:d1:bb:72:fd:2e:c4:7a:a2:98:24:
         46:04:cb:de:9f:26:e2:c2:64:f5:04:c5:a6:b9:72:45:dd:b4:
         92:5c:a6:26:3d:a1:f1:87:a7:1b:ef:66:5b:61:90:80:ba:bb:
         04:80:97:2c:eb:fe:a3:1d:2a:dc:91:11:06:3d:02:3e:d0:c1:
         89:f0:92:e3:6c:f3:61:02:1a:ad:0e:f3:59:7f:8e:cd:9e:7f:
         a9:6b:bb:af:e7:63:b1:0f:aa:54:06:ce:34:3a:6e:68:48:b2:
         c1:41:47:73:68:90:57:e9:e0:cf:cf:2a:f0:cb:93:c9:7e:53:
         bb:a2:38:59:ce:51:4b:d2:40:98:0a:f3:9c:5c:39:22:e1:2e:
         1a:25:83:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnziv4nwqEUmUC79gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDUyMzE4MzUxOFoXDTI1MDgyMTE4MzUxOFowLzEtMCsGA1UEAxMk
MzY0OTljM2UtZjc3OC00YjNkLThlZWUtMmM4ZDAyMDI3MDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnirH500CMdNBRgi1hEz5AJUcn+diW9Wck+oo
6UFJV4rP1U/6wYSi+nm9MwyUa9XxIAlmekWwPIQLondGX0i8VQ7fp6f1cLxM+W9g
AQNj1C6xprkUUU6qjD0Wu+QBq5Tdil3fWqFA5/34cMdPuuj0ysvlFNHofemyJ966
8f37yOwWzeCkimUredRH9BnB5D042nzmUNZkNAirvxiSxKB5PHHh/ftJIy1LOkBq
xJ5Rlvi0O5av1rdPTC4Kw8CUS3NhjWE3BBPijw/xqsBaBQG8//OHC2P1m00ZVgg3
sa/4/ixAszihtEK9+XmEjeMPEF6Pqnl+m4DV7Vbw7oXqCW1/0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEzwgkwGYtYq0rogIuslT55w/CpbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjcyZjhhNDMtYmZkNS0z
Nzg0LTgwZWYtY2E3NjMwZTk1ZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8iBgbOrcRSbF+DC2A5T/n7rFhRXqFrS7IvDNGJPn+z7svdnkBuq4eB
6ubRPh5xfm/i6GWr+9RWEoqxBrbTuZDFapynS4UaWYb0RDuIpg/cQuxIyJMwYuMk
+ZW/Ppawgx/H2itCv+PhAQ0XfNnD+8PgEEEu0bty/S7EeqKYJEYEy96fJuLCZPUE
xaa5ckXdtJJcpiY9ofGHpxvvZlthkIC6uwSAlyzr/qMdKtyREQY9Aj7QwYnwkuNs
82ECGq0O81l/js2ef6lru6/nY7EPqlQGzjQ6bmhIssFBR3NokFfp4M/PKvDLk8l+
U7uiOFnOUUvSQJgK85xcOSLhLholg/A=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:36 2025 by rpki-client