Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f11d55d-6b0d-3716-8a3a-df4fb25080e9.roa
File:                     5f11d55d-6b0d-3716-8a3a-df4fb25080e9.roa (raw, json)
Hash identifier:          G+HzqeLCG5T0FaNALa0cHLk9DEJUYR79X5mUZa+NfF4=
Subject key identifier:   07:58:D3:2A:1E:5F:60:DB:1D:0B:89:F5:77:F9:42:0B:23:D0:E1:F9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA40680F9CA8F0D34A0D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f11d55d-6b0d-3716-8a3a-df4fb25080e9.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.29.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:40:68:0f:9c:a8:f0:d3:4a:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=68018461-2eda-4aa8-89ff-62e92fc7c6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b3:30:46:5c:4a:c9:6c:0a:af:51:3c:83:a2:
                    45:2b:8e:5d:2c:2f:30:2d:a3:8f:7b:fd:17:f0:bf:
                    3a:b3:9a:43:67:3b:93:4a:9c:ab:1c:8e:ad:68:f4:
                    16:b0:a1:f5:34:00:82:24:86:00:2a:db:7a:68:32:
                    90:33:5f:ed:29:83:16:17:cf:7b:6c:4f:52:6d:8e:
                    61:ef:cd:95:bb:c3:a3:73:7e:00:e2:0b:7f:5a:ae:
                    4d:4a:9e:97:cd:3e:64:87:a5:2f:b7:7a:88:ff:ae:
                    e3:3f:14:64:cd:51:7e:27:83:eb:f1:f5:ad:1a:8f:
                    46:eb:07:3f:c7:92:f5:b9:ff:fc:45:26:90:b5:57:
                    86:f0:48:59:0a:26:56:b8:cf:dd:ed:fb:1c:bc:63:
                    03:6c:b3:87:5a:c6:a6:81:fe:16:73:3a:c1:60:30:
                    a6:54:fc:8c:85:b7:cc:0a:9c:3b:06:cd:ef:09:70:
                    aa:bc:c5:ab:58:74:08:e2:65:75:be:da:b6:c8:07:
                    6d:03:48:ae:86:0a:6c:66:18:9d:b0:bd:61:3c:ec:
                    c1:12:fb:dc:3f:ab:4d:3a:d9:9f:fe:00:16:e3:b1:
                    7b:a5:c3:b5:05:d7:2a:f1:dd:e2:6a:7e:6e:43:21:
                    d6:8d:4e:4c:4b:6f:7d:9c:5a:71:98:66:3e:e9:91:
                    b4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:58:D3:2A:1E:5F:60:DB:1D:0B:89:F5:77:F9:42:0B:23:D0:E1:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f11d55d-6b0d-3716-8a3a-df4fb25080e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:02:b4:73:6a:30:1e:27:c3:41:0b:d2:2e:8b:63:8b:c4:f5:
         98:77:21:1d:52:cc:2e:df:64:56:6a:c1:fd:ab:13:dd:75:a5:
         0e:a6:eb:65:66:78:94:6c:08:9c:5d:c7:45:19:2d:f3:66:50:
         57:6c:79:8e:ae:fd:c9:df:71:b9:a6:df:a0:41:3f:2c:0e:03:
         1a:4a:bb:e2:6c:03:bd:62:d4:3e:f4:12:7f:49:62:fa:76:26:
         5f:44:0f:bf:2d:74:17:8c:84:d5:0d:bc:dc:51:54:e9:52:67:
         85:11:9b:a8:c1:9d:f2:3d:f3:d4:fc:e3:6e:e0:6f:6f:d8:2f:
         c5:d7:81:33:1c:d5:0e:26:fa:8f:52:82:72:e3:6d:34:a4:20:
         63:45:b8:4b:16:2d:2e:31:8c:51:b4:d0:6f:ca:ef:62:27:4d:
         35:b8:89:17:36:da:5a:53:46:ba:9d:0b:98:1d:82:4b:71:3a:
         92:b8:68:e9:46:45:85:df:25:5e:ae:c2:09:39:6b:a2:17:14:
         eb:61:0e:77:c3:3b:90:16:6b:a0:33:58:63:69:d9:3b:bd:fb:
         6f:9c:2e:af:b9:ce:e4:dd:25:49:0e:45:b2:eb:5a:0e:6f:a8:
         6e:ef:a8:96:0a:bd:68:9a:0d:fd:f5:d8:cd:76:ee:7b:11:85:
         fc:79:4c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:53:48 2025 by rpki-client