Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/619584d3-02ce-3499-88ac-4b0d7ca144a9.roa
File:                     619584d3-02ce-3499-88ac-4b0d7ca144a9.roa (raw, json)
Hash identifier:          5xA7k7ECSZtvM2CfphnNccCf/cgHz0QH7tr+NIEx5ao=
Subject key identifier:   0C:D4:E6:AA:78:2A:A0:8C:EA:7C:8A:41:18:1A:AC:18:6A:16:ED:40
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA0125554E3CD3A4B58080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/619584d3-02ce-3499-88ac-4b0d7ca144a9.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        150.195.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:01:25:55:4e:3c:d3:a4:b5:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ea0eb2c8-bfaa-4383-8195-12e9dd0a684c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d4:d0:7f:59:5d:91:e2:c1:11:46:0b:b5:10:
                    9d:85:e5:b6:ff:81:06:10:1b:02:fe:c9:9d:ff:37:
                    3f:a2:bc:2f:be:ce:c9:e1:a0:ce:ed:84:00:eb:8f:
                    83:21:b6:81:4a:5c:c5:c3:fe:4f:d9:6c:af:f5:57:
                    d4:42:d5:aa:6e:61:a8:3f:7d:2f:3c:9a:dd:b4:3f:
                    03:2c:28:88:90:a9:7b:6c:e3:29:a9:b1:d7:e7:9c:
                    a0:9f:da:d5:13:94:d9:42:e6:31:ce:48:e9:3d:97:
                    e3:62:d4:0f:bf:58:4f:d5:71:3e:f6:d2:1e:13:48:
                    55:73:76:7d:0f:02:0b:ab:1c:85:32:58:a2:17:e5:
                    f4:c2:18:80:2b:42:75:cf:b3:eb:43:e6:dc:3a:bf:
                    52:ae:c9:1e:fb:e5:d1:db:8d:32:3a:25:1d:99:6e:
                    e5:d1:8b:99:8f:d0:e3:d3:99:bb:a2:34:d2:61:37:
                    55:2d:ed:ee:8f:82:07:b0:20:94:65:e9:0f:9b:1c:
                    2c:99:8e:c2:ea:fd:60:a5:ba:c9:c7:de:28:42:95:
                    d9:c5:62:fc:0a:6b:d7:62:89:3e:d3:d8:84:7d:77:
                    c8:93:04:55:25:3e:e8:c2:8d:fb:ed:ab:e6:d3:fd:
                    33:8e:dd:4d:02:da:9f:32:5a:e6:d9:93:bd:99:69:
                    e2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D4:E6:AA:78:2A:A0:8C:EA:7C:8A:41:18:1A:AC:18:6A:16:ED:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/619584d3-02ce-3499-88ac-4b0d7ca144a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:d6:07:81:bc:12:e8:23:ff:77:c9:15:1d:44:a6:82:d1:
         c6:d7:b1:7e:bd:3c:dd:13:1b:65:92:b5:bc:47:b0:79:b7:45:
         4a:d7:b9:24:cb:6c:d5:53:39:e8:a2:fc:77:e5:28:dd:8e:a8:
         eb:02:d0:bb:bb:1c:71:cf:ad:ee:6b:c1:ce:f8:57:c1:dd:30:
         2e:b0:5e:03:ee:02:81:53:5f:4b:7f:24:33:3a:40:c8:5b:aa:
         b2:7c:43:7d:b6:b8:42:b1:4a:a0:7b:25:cb:be:22:4e:60:72:
         53:97:c6:99:8f:d0:bc:a3:d6:a6:fb:98:22:df:b4:29:8d:84:
         83:e3:d4:55:bd:9a:75:f7:ba:93:53:ff:55:bc:47:8c:ff:db:
         95:0b:f0:59:05:05:5c:7f:33:51:7b:ad:b9:82:4d:73:3f:33:
         f1:b9:35:3d:6c:d5:30:67:1b:d2:bf:a9:8a:1a:43:d6:f6:a9:
         72:5c:a6:7c:a1:7b:40:1d:e3:63:dd:6c:cb:7e:3a:9b:28:4c:
         99:ad:70:e0:1f:95:5c:3a:92:19:90:ae:e5:e1:0d:79:59:6d:
         3a:1b:88:cd:2a:4c:cb:7b:c2:9c:b4:04:87:a2:22:27:33:8f:
         98:ec:4c:2e:5b:48:14:67:9c:05:e6:1f:84:0a:2d:27:d7:33:
         a8:d4:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:22 2025 by rpki-client