Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b265247-9563-319b-85d7-b24107caa5f8.roa
File:                     3b265247-9563-319b-85d7-b24107caa5f8.roa (raw, json)
Hash identifier:          eTwlGZBsnym0Ymzx/mFcb6VqU1LLLgplQOVfRGdsVzg=
Subject key identifier:   AA:66:AA:58:64:EB:F9:33:F1:A4:53:C1:62:D7:3A:A9:30:8B:63:B5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF5641796176342A7F8B90
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b265247-9563-319b-85d7-b24107caa5f8.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.17.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:56:41:79:61:76:34:2a:7f:8b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=35e4c761-a26a-4d8d-b21a-a7a65ec337c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:3e:51:eb:22:e8:c8:52:2a:1b:a6:e3:7f:
                    a2:46:66:74:58:cc:b0:a0:6c:bc:29:63:a5:ff:0a:
                    dd:c8:78:07:3f:8b:a3:03:5b:69:9a:c9:46:1c:fc:
                    80:a8:dd:1e:17:72:38:62:92:14:0e:e3:bf:db:2a:
                    dd:61:83:b2:16:f9:89:4b:1e:9b:89:6e:6e:eb:cb:
                    5b:2a:3d:79:d5:f8:ac:8f:b6:9b:80:7b:9c:43:7a:
                    5c:a5:46:d0:2e:1a:f5:69:d4:e9:4d:f5:48:a9:53:
                    73:92:8e:ae:98:f2:bd:83:ba:ff:d4:21:73:0d:a3:
                    84:fa:6d:c2:80:66:d2:f0:e9:c5:8f:33:73:47:7f:
                    9f:85:1d:5f:4c:c2:91:b8:0b:c0:ca:f0:8b:7a:b6:
                    b6:1d:bc:fc:75:f3:38:68:7b:5f:d1:f9:84:4e:d8:
                    b5:b3:8e:28:2b:f5:20:3f:1f:07:53:b3:27:f6:16:
                    a4:7c:d8:9b:ef:d3:88:fd:3d:b1:cc:b4:aa:64:12:
                    5e:75:5c:ac:c8:4d:eb:9c:9f:08:ea:5b:a0:0b:e9:
                    af:b2:8e:8d:c5:53:63:77:18:a1:ae:ae:c3:44:ab:
                    b7:00:ad:f2:31:8b:70:b3:f4:40:35:81:f5:a2:46:
                    3f:26:5a:09:7b:05:0e:5f:53:b7:52:12:de:0a:0a:
                    ae:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:66:AA:58:64:EB:F9:33:F1:A4:53:C1:62:D7:3A:A9:30:8B:63:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b265247-9563-319b-85d7-b24107caa5f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:74:7c:af:7f:f4:00:57:5b:ab:c7:90:b6:e5:42:5d:a6:25:
         0a:87:1d:36:9b:22:be:c9:b6:fb:ac:2e:26:c9:1b:c5:58:6d:
         8f:c4:cd:e6:85:45:34:23:cf:7e:91:82:c2:71:74:14:90:e7:
         8a:a6:b8:f3:73:82:be:28:41:a2:16:a3:fd:2c:5c:49:b5:52:
         5a:f5:40:f5:29:a2:22:3a:98:9b:44:46:f3:72:1a:fe:c6:bb:
         10:ab:12:2f:b0:33:55:58:5e:73:d3:63:a2:c7:a6:89:e8:c1:
         0e:8f:a8:30:e9:49:5f:71:b1:9e:b2:09:a3:00:c3:5e:6c:96:
         73:b6:2b:18:64:ba:f7:16:91:fd:92:32:b9:f7:3d:e5:1c:a6:
         35:8d:6c:93:db:91:f2:db:62:42:c2:ae:45:65:ac:2d:b8:5d:
         80:39:86:2e:cf:ad:f4:e4:95:7a:0e:fa:62:f9:d4:7f:ff:57:
         35:15:1c:00:f7:b5:56:9a:ba:78:09:6f:33:dd:87:03:33:73:
         1a:ef:a0:8e:5c:79:7a:5e:80:ce:57:ea:09:28:b5:91:f0:5f:
         7f:f8:72:f7:31:de:de:17:8f:75:f5:a0:40:36:16:17:2b:1c:
         82:26:24:cb:2c:b8:95:03:95:ae:e2:61:b1:a3:7e:48:98:60:
         e1:c2:11:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:17:13 2025 by rpki-client