Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/446f3aaf-5c12-3e23-b485-b8cb7c799bb9.roa
File:                     446f3aaf-5c12-3e23-b485-b8cb7c799bb9.roa (raw, json)
Hash identifier:          Y+D1+QpxcoIeai6diV3C9l5A0XjNCFAJybJWUPquPB4=
Subject key identifier:   BB:C5:01:AF:E0:FE:1F:74:38:B4:80:04:A0:FF:2F:8C:8E:EC:0E:98
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA1D4FD102D8E5DC5CE380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/446f3aaf-5c12-3e23-b485-b8cb7c799bb9.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.23.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:1d:4f:d1:02:d8:e5:dc:5c:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=5f1b20f6-9b9d-4301-9d66-f5ea4ddb5516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:c9:c8:58:f4:34:76:c9:60:4d:49:d4:9b:
                    d8:8f:29:9b:8a:a8:c8:ab:96:3c:b7:e3:bb:b1:1b:
                    68:5e:d6:fe:f2:2b:dd:e7:04:12:9c:cb:25:7e:43:
                    65:4c:b2:07:dc:e5:ab:e6:c2:b3:45:48:01:50:8f:
                    c7:3f:d5:ae:97:11:b0:3c:dd:5d:ff:d6:51:9e:04:
                    5c:f3:0a:22:c3:df:3f:0e:fe:34:b9:de:07:10:11:
                    2b:d4:41:d4:25:60:41:83:2b:56:80:3a:ef:d7:de:
                    03:9d:ba:1b:ee:28:02:42:06:ca:f8:2c:ce:7d:7b:
                    b2:39:76:70:43:60:55:ad:4a:33:eb:28:a5:11:45:
                    d2:b5:a2:3a:56:07:f5:66:1f:7b:f2:fd:39:ad:ec:
                    d3:80:a4:4d:68:f2:7b:5e:7e:22:7f:6f:95:df:7f:
                    72:3c:80:6f:be:95:10:b3:90:4d:b8:47:05:23:56:
                    ba:c2:93:12:10:4b:66:1b:5f:f6:38:16:3d:33:84:
                    c5:cd:72:9c:15:61:4a:83:d3:55:c2:e1:06:01:27:
                    34:a5:87:18:97:11:c7:40:4b:a6:3c:24:c4:28:ae:
                    8c:99:63:a1:51:ed:19:61:f1:09:3e:99:40:11:fd:
                    aa:61:64:88:6e:40:a2:22:14:40:7f:c8:53:b1:44:
                    90:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C5:01:AF:E0:FE:1F:74:38:B4:80:04:A0:FF:2F:8C:8E:EC:0E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/446f3aaf-5c12-3e23-b485-b8cb7c799bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:df:65:8e:75:63:6c:6b:94:ac:e3:d8:3e:04:bd:31:13:04:
         d9:ce:4d:6c:8e:e3:23:f9:b9:8f:e5:56:8c:a7:42:6e:9c:11:
         07:7c:0e:10:3c:04:16:a2:ef:40:4f:14:12:47:b5:39:8d:19:
         fe:21:4d:06:db:f6:87:3a:e5:cf:96:96:92:a4:34:1e:44:77:
         ef:e1:fc:b5:d2:55:67:0a:12:15:17:d8:c4:96:da:02:27:06:
         b5:ca:68:c2:d1:5b:68:b6:4c:14:e0:a6:91:f9:06:b7:27:48:
         73:ac:85:41:c9:e5:a5:d2:99:17:d8:0a:6c:c0:5c:ea:03:9b:
         68:5c:ed:61:55:8b:93:42:ef:31:9e:02:97:0c:d7:28:72:e2:
         f5:46:0b:53:98:c5:50:d2:b4:a9:49:18:69:8b:6f:42:b9:79:
         fc:d8:c5:5c:18:1c:09:30:1c:c4:74:44:fb:7d:9d:64:d9:47:
         79:60:e4:0a:19:30:bb:d8:c2:94:68:e4:8d:62:aa:e3:68:79:
         14:95:3b:67:71:82:3f:b9:7e:61:50:55:4f:51:47:53:cb:fb:
         64:73:c3:03:9d:7f:03:7a:51:df:33:d4:3b:48:5b:d6:2b:dd:
         fa:6f:21:17:1d:e1:22:a0:1d:3c:5e:c3:36:50:4d:ad:72:bb:
         15:24:c8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:57:10 2025 by rpki-client