Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/305635b5-5b70-356a-b7b8-d6281a27dc04.roa
File:                     305635b5-5b70-356a-b7b8-d6281a27dc04.roa (raw, json)
Hash identifier:          I4qv9Aoitm7eUfPPiBSJDuaqoENL4bonG8E+wDmBguY=
Subject key identifier:   DB:A5:73:75:57:C7:97:4F:7B:26:F5:5F:F4:8B:B8:F2:C4:B2:3C:41
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784ABC92492E7F83C4E17D0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/305635b5-5b70-356a-b7b8-d6281a27dc04.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        150.195.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:ab:c9:24:92:e7:f8:3c:4e:17:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=38a0331c-2a0a-4620-bddd-36505775f5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:89:04:79:ce:63:ed:1a:9c:a2:1f:56:0b:c6:
                    72:3d:b6:04:5d:4f:62:00:e1:98:5f:49:9e:61:b9:
                    2d:7b:dc:ad:57:ee:8e:2d:ec:be:09:b2:7f:9a:c2:
                    f5:ad:5e:d8:4d:1d:6d:5f:80:93:8f:12:b1:32:52:
                    2a:0b:41:95:92:f1:f4:6b:bd:18:f6:0a:ae:6a:8c:
                    62:7b:37:f9:ce:e3:04:47:b4:3b:fb:24:95:e7:b5:
                    75:e0:c4:22:30:d4:e6:e1:71:ed:4e:0e:c5:27:50:
                    45:2d:a7:cb:5b:f0:d7:8f:35:b9:ea:2c:98:92:6f:
                    ba:80:ff:7c:1a:79:aa:cb:29:88:f8:9f:66:30:ad:
                    68:da:d3:96:75:9d:bd:cd:7c:82:8a:0a:ab:17:d6:
                    e2:35:dd:ad:5e:11:6c:6d:d0:81:a1:17:62:03:1b:
                    8b:a9:81:94:f4:b3:40:a8:66:a1:39:74:d1:ca:7c:
                    b7:ba:25:15:01:6c:14:cd:cc:7d:aa:f6:e0:13:62:
                    02:3b:9e:f4:2a:ee:a2:97:85:d3:ea:2b:15:e7:2a:
                    7f:54:db:05:e4:b4:b5:5f:f7:1b:c5:f6:60:ea:f4:
                    c9:ea:cd:15:03:98:bf:5b:94:83:16:ac:a0:6b:45:
                    37:2f:e4:8b:48:3f:9e:e5:96:fd:76:45:88:96:1f:
                    be:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A5:73:75:57:C7:97:4F:7B:26:F5:5F:F4:8B:B8:F2:C4:B2:3C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/305635b5-5b70-356a-b7b8-d6281a27dc04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d0:5d:f8:12:ff:cc:89:60:6e:1e:f2:89:a2:18:0a:ab:82:
         5f:84:28:e3:9b:3d:36:85:0f:dd:6e:55:bf:83:7e:c0:39:c9:
         02:e4:65:a6:60:10:49:68:c7:94:32:8e:c9:c7:9e:2a:9c:d4:
         9e:a6:81:c3:d6:d8:0c:0b:a0:23:fc:bf:47:21:64:c4:2d:14:
         f3:cf:3c:d1:c6:ea:fb:66:89:2d:d8:a9:66:ba:7d:93:f2:b2:
         8f:a9:21:c1:9d:63:43:e0:e2:3b:25:8d:5b:28:2d:4c:3b:0a:
         4f:8b:0f:74:ec:f9:63:62:36:bf:1d:a8:59:97:58:be:d1:86:
         15:a7:1f:db:b5:b9:93:10:08:6b:a5:bd:69:87:11:e3:0d:7c:
         c2:d6:09:32:d2:45:65:97:61:a0:c7:bc:56:85:df:1f:26:d3:
         49:f2:81:7e:fb:67:1e:6d:a1:a9:af:d6:ab:cc:44:61:ad:f1:
         c0:55:05:89:c5:b8:4a:c1:f2:42:ea:2e:0f:f6:2a:88:6c:3b:
         02:df:d9:e0:c5:9e:27:58:6f:c9:77:86:4d:cb:fd:54:d0:6f:
         eb:3e:e5:9c:9b:16:11:74:1d:b9:29:44:fb:fd:9d:b5:84:38:
         bb:8e:cc:30:4b:0a:f0:6a:ca:60:7d:a1:0c:d8:e3:f1:f0:99:
         3e:fd:cc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:37 2025 by rpki-client