Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f46d3e3-d5ef-341d-853c-ca77799c1569.roa
File:                     3f46d3e3-d5ef-341d-853c-ca77799c1569.roa (raw, json)
Hash identifier:          N+8c/KdnnRAUBoKojmxNq+K0PWNbJrLysZQd1niUI4E=
Subject key identifier:   DD:97:C9:B2:97:3A:DB:AF:FE:CA:0C:54:F0:9C:D4:40:BD:49:0E:DD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784AD9081E55BE3D37EF9A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f46d3e3-d5ef-341d-853c-ca77799c1569.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.19.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:ad:90:81:e5:5b:e3:d3:7e:f9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=cfd89d75-a544-4624-9af5-20c30eb6fe5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:08:0f:67:07:16:b5:cc:25:a1:24:2f:77:
                    09:d4:53:e1:85:aa:ef:24:fb:71:82:32:08:b4:b1:
                    a4:31:d4:6a:ea:28:cc:63:44:5d:5f:ff:62:5d:fa:
                    fc:89:62:aa:4b:91:0d:40:85:84:a2:3c:67:73:15:
                    87:dd:16:db:00:8e:16:0b:69:98:ae:0f:93:e4:46:
                    17:f5:f0:35:0a:28:26:ed:85:fa:e3:e2:01:e5:f8:
                    25:a6:da:87:71:e8:c8:46:50:86:8f:3a:22:3f:37:
                    5b:cf:87:80:51:4b:77:e8:ab:54:9f:9c:06:10:eb:
                    84:5c:c3:d9:56:c3:e6:47:93:39:fe:7f:8e:f0:81:
                    1a:2b:69:35:72:51:f7:de:eb:b4:c5:dd:3c:67:67:
                    db:17:4d:5e:4d:e9:7e:c0:94:f4:fc:2d:7b:dc:12:
                    82:80:b3:a7:ad:ca:55:f6:1a:fc:09:ae:1c:09:ee:
                    c2:60:83:83:54:ef:b6:0a:5a:13:93:05:fa:a0:aa:
                    f9:c5:14:45:65:da:8b:cf:a4:c1:18:c7:bf:b4:d1:
                    1f:c0:fe:10:d9:a0:ed:82:9b:53:13:ad:b2:d2:ae:
                    32:53:1c:6b:10:7a:73:8b:9c:a5:70:ca:1e:b6:69:
                    29:cc:64:cd:ee:5d:27:34:98:aa:3c:6e:a7:98:5c:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:97:C9:B2:97:3A:DB:AF:FE:CA:0C:54:F0:9C:D4:40:BD:49:0E:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f46d3e3-d5ef-341d-853c-ca77799c1569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:52:f3:26:44:dd:d6:9e:95:4b:fa:fb:25:83:fb:ce:20:17:
         6b:7a:7a:29:77:20:68:ea:42:ed:80:55:ea:79:51:e6:3a:4d:
         47:47:99:ec:01:57:11:b6:99:cf:f1:e3:d9:2a:82:88:3c:27:
         9b:0d:9b:a7:f8:5d:b6:4b:9c:98:ab:6c:56:f7:78:a6:74:a9:
         3f:06:4c:af:56:9b:8f:c9:35:0b:5a:49:0b:21:3d:69:9e:5e:
         ca:48:6b:be:3f:6a:eb:0d:80:2b:0b:94:83:e5:a9:10:f3:ac:
         2b:16:8e:da:a2:8c:bf:da:34:b1:77:54:9a:ae:b2:00:be:10:
         38:0f:65:7a:dd:c0:03:74:09:d4:6c:5c:ce:aa:38:2f:64:b9:
         53:7e:13:a4:12:29:4d:04:74:8e:65:b2:75:35:14:13:6a:fc:
         8d:22:43:bd:be:a1:f6:57:50:59:94:70:2f:75:7e:b2:08:ec:
         bb:98:bc:ce:d2:bb:d5:73:76:55:d4:1f:8a:13:59:58:18:2a:
         97:2b:68:c6:f1:38:ca:ca:f5:2c:12:98:5b:3f:47:a7:1d:c5:
         d7:df:6a:68:9c:a0:87:62:ea:9f:28:7a:9d:ea:80:b1:b0:0e:
         d7:5c:a7:1f:25:bc:b2:8e:40:f3:19:bd:3d:8d:25:17:95:24:
         24:e5:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:49:47 2025 by rpki-client