Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33970069-3209-3c10-8707-5939c7c3d774.roa
File:                     33970069-3209-3c10-8707-5939c7c3d774.roa (raw, json)
Hash identifier:          x12zdkdbz5n6A8qUIWp46xaQ5kXyng8R3NGJfQvHWXI=
Subject key identifier:   CE:EE:A2:00:87:4F:20:7F:C2:CA:85:B7:66:37:11:CC:06:C2:18:99
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784A47B74BA1D31447FA4C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33970069-3209-3c10-8707-5939c7c3d774.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.16.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:a4:7b:74:ba:1d:31:44:7f:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=b83593b8-a68e-42e6-82ea-0cd7c3112e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:f2:c7:77:71:ea:93:3f:5e:69:45:17:9d:
                    b4:74:71:fb:b9:8b:9d:23:82:40:d4:87:54:07:51:
                    8f:ab:96:da:30:69:84:c9:a4:e0:6a:3b:f2:57:de:
                    8b:da:40:e1:e5:a2:94:a7:fb:6b:41:4e:bb:9f:da:
                    b0:1a:2f:4e:f3:14:33:a6:96:61:53:da:8f:11:8a:
                    a2:fc:a0:e5:23:79:ca:6f:72:61:86:2d:91:71:a2:
                    2e:cc:22:9e:20:26:65:9e:14:d8:5b:66:03:78:3f:
                    ff:1b:ee:74:cb:71:73:cb:c2:44:0b:14:90:c2:49:
                    89:1a:e1:6c:c4:1f:3b:4f:f2:ea:7c:33:eb:da:e2:
                    66:cd:32:1e:79:73:60:4e:fd:b6:a8:12:42:dd:22:
                    c0:58:f7:84:c7:72:c4:13:7f:37:ad:cd:91:43:13:
                    05:25:62:0d:dc:a2:74:d7:42:3b:84:e4:37:e5:6b:
                    52:d6:ee:8b:5b:fd:5f:59:d4:6c:68:54:7e:bf:47:
                    3e:3a:b6:6f:f1:3d:12:63:5a:c0:98:cc:d4:58:7c:
                    d3:9a:64:3b:d7:28:69:e5:7f:02:ba:3d:61:ca:63:
                    d8:33:88:90:2f:53:45:e0:31:4b:3b:b6:55:b0:15:
                    14:be:45:e0:e1:53:88:75:54:8a:e1:60:d7:48:7a:
                    4d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EE:A2:00:87:4F:20:7F:C2:CA:85:B7:66:37:11:CC:06:C2:18:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33970069-3209-3c10-8707-5939c7c3d774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:1f:a2:1c:9d:f3:91:98:e0:a6:78:c6:c1:55:b5:10:6f:84:
         03:59:9f:a7:c6:14:1a:2d:02:c4:88:95:1a:07:d4:3c:6c:8d:
         41:a9:bc:1f:c3:ab:df:7b:56:a0:15:6e:ee:00:4a:38:b0:b1:
         01:dd:e5:dc:3e:b1:82:0f:d1:ed:b4:02:fa:b1:f2:01:f3:a8:
         41:a8:da:88:e6:98:6c:ae:8a:d9:64:0b:c5:f8:e7:d2:2b:ac:
         8c:84:ba:88:31:8b:38:1c:69:f9:70:02:8b:5e:b5:e7:da:87:
         e5:8a:50:59:9f:3b:df:0b:88:ea:1b:ce:0d:23:20:4d:50:53:
         2b:ef:4b:ba:da:98:22:6e:ce:51:47:5b:0e:92:d7:90:b5:0d:
         fa:66:08:91:5b:65:5c:fb:4a:23:1c:55:ca:44:85:60:c4:59:
         7d:0f:a8:19:c2:48:6e:f3:f3:54:c1:d5:05:32:d5:32:99:77:
         ae:4d:cf:d7:f3:66:10:6e:f7:59:08:6b:69:29:02:18:88:50:
         a5:e5:ca:ad:77:74:1c:44:a8:f6:81:2a:3f:15:07:f6:0e:65:
         8e:25:ab:85:b1:c4:c5:f5:9a:53:bb:b8:f5:cd:93:97:cf:e2:
         8c:cd:b6:a8:94:12:e8:bf:f7:31:af:8e:5e:25:c2:4d:ab:60:
         27:d4:c5:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKR7dLodMUR/pMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
YjgzNTkzYjgtYTY4ZS00MmU2LTgyZWEtMGNkN2MzMTEyZTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuzyx3dx6pM/XmlFF520dHH7uYudI4JA1IdU
B1GPq5baMGmEyaTgajvyV96L2kDh5aKUp/trQU67n9qwGi9O8xQzppZhU9qPEYqi
/KDlI3nKb3Jhhi2RcaIuzCKeICZlnhTYW2YDeD//G+50y3Fzy8JECxSQwkmJGuFs
xB87T/LqfDPr2uJmzTIeeXNgTv22qBJC3SLAWPeEx3LEE383rc2RQxMFJWIN3KJ0
10I7hOQ35WtS1u6LW/1fWdRsaFR+v0c+OrZv8T0SY1rAmMzUWHzTmmQ71yhp5X8C
uj1hymPYM4iQL1NF4DFLO7ZVsBUUvkXg4VOIdVSK4WDXSHpN1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM7uogCHTyB/wsqFt2Y3EcwGwhiZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzM5NzAwNjktMzIwOS0z
YzEwLTg3MDctNTkzOWM3YzNkNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRCQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEEfohyd85GY4KZ4xsFVtRBvhANZn6fGFBotAsSIlRoH1DxsjUGpvB/D
q997VqAVbu4ASjiwsQHd5dw+sYIP0e20Avqx8gHzqEGo2ojmmGyuitlkC8X459Ir
rIyEuogxizgcaflwAotetefah+WKUFmfO98LiOobzg0jIE1QUyvvS7ramCJuzlFH
Ww6S15C1DfpmCJFbZVz7SiMcVcpEhWDEWX0PqBnCSG7z81TB1QUy1TKZd65Nz9fz
ZhBu91kIa2kpAhiIUKXlyq13dBxEqPaBKj8VB/YOZY4lq4WxxMX1mlO7uPXNk5fP
4ozNtqiUEui/9zGvjl4lwk2rYCfUxTo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:05:00 2025 by rpki-client