Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/61fb4c25-3250-39ca-9af1-37036ccc411d.roa
File:                     61fb4c25-3250-39ca-9af1-37036ccc411d.roa (raw, json)
Hash identifier:          GnWDtQsO8EPAm6OPUeV5WxZYqRpjOS2ZViQPqT8JhNw=
Subject key identifier:   E8:C6:02:88:E7:A8:EA:C8:7F:48:FD:43:26:D1:D2:38:E3:4E:8D:B7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784AF2600C2AE36B8F22220
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/61fb4c25-3250-39ca-9af1-37036ccc411d.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.23.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:af:26:00:c2:ae:36:b8:f2:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=aba7589f-a8e1-489f-9b77-83c088aa4cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:24:0e:4c:66:eb:8b:68:95:fc:72:b1:cb:
                    a3:9f:7e:ea:d1:d7:3a:5d:d9:5d:f5:7e:0b:37:65:
                    ad:c5:e0:b2:d9:5d:95:4c:08:84:bd:1f:b3:72:76:
                    a7:4c:3d:62:23:20:15:a6:75:0a:48:4f:dc:8f:7d:
                    2d:62:a5:5c:99:a6:cb:9d:8c:4b:4d:a9:32:fe:e5:
                    dd:96:9d:20:d0:bd:6c:a6:53:7f:4f:6c:55:c8:45:
                    c5:41:9c:93:59:17:18:53:90:9e:05:7f:4d:d8:e9:
                    ab:8c:99:52:85:b9:98:50:3f:57:48:cb:a6:4f:f0:
                    15:fe:02:e2:a9:3e:4b:85:65:23:af:67:1c:39:77:
                    bb:fe:b5:d7:d6:4a:b7:5a:c6:a0:e7:f4:9b:ad:71:
                    3f:24:f2:bb:72:fa:75:33:08:b9:ac:20:14:ca:40:
                    d6:5d:34:a1:cc:68:96:fa:eb:eb:d6:23:54:f1:8f:
                    98:a1:82:5b:46:0d:6b:a4:b4:7d:01:25:4e:ec:77:
                    08:ea:f5:e5:6f:cd:67:9b:2d:ec:09:f4:3f:ee:e9:
                    f7:c3:a3:23:6f:e5:93:41:0e:02:69:26:b9:9f:93:
                    35:37:dc:64:b6:2b:11:c0:08:82:7c:46:1f:f6:e7:
                    2b:91:85:77:b3:b3:c7:cd:65:b9:84:62:85:1d:56:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C6:02:88:E7:A8:EA:C8:7F:48:FD:43:26:D1:D2:38:E3:4E:8D:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/61fb4c25-3250-39ca-9af1-37036ccc411d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4d:9a:47:fe:21:58:11:19:5a:d4:9f:dc:c2:6e:70:75:a8:
         f1:60:4b:a6:cc:06:b2:3c:77:2b:75:03:73:ad:ff:70:84:3f:
         c1:de:59:31:92:7c:81:6d:a0:e0:b0:cd:d4:24:45:87:ad:49:
         09:1c:31:75:c1:8e:e3:91:9a:99:db:27:2e:4b:92:b9:49:cc:
         ac:98:d1:a8:39:fd:6d:c5:36:27:d2:df:53:f2:5f:04:16:37:
         d2:86:6e:f4:e0:eb:83:15:9d:c9:10:97:8c:15:7d:e9:64:07:
         3c:d4:61:92:84:48:25:6c:50:6e:b4:3d:67:99:cb:fc:bc:f4:
         cd:4c:c1:e4:55:75:65:98:64:e0:44:8d:02:05:04:e6:cb:01:
         d9:24:34:fe:c1:9f:1c:c4:d1:c5:f0:15:70:69:a1:90:7f:f2:
         30:f0:fb:a7:d1:85:a0:83:02:42:e5:4a:6d:9b:2c:66:45:93:
         e5:f7:7c:18:ee:9c:cb:02:92:54:e4:23:7c:61:db:f6:35:a2:
         89:f7:98:d2:04:38:a1:70:9e:f1:dc:47:5c:14:4c:c0:31:c7:
         b9:5d:10:c1:07:2d:86:38:a5:24:af:d6:cf:63:40:92:e6:8e:
         80:c4:97:50:76:e8:62:d7:51:d0:b6:0f:4b:8e:19:1f:a4:09:
         c2:be:5b:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhK8mAMKuNrjyIiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
YWJhNzU4OWYtYThlMS00ODlmLTliNzctODNjMDg4YWE0Y2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMAkDkxm64tolfxyscujn37q0dc6Xdld9X4L
N2WtxeCy2V2VTAiEvR+zcnanTD1iIyAVpnUKSE/cj30tYqVcmabLnYxLTaky/uXd
lp0g0L1splN/T2xVyEXFQZyTWRcYU5CeBX9N2OmrjJlShbmYUD9XSMumT/AV/gLi
qT5LhWUjr2ccOXe7/rXX1kq3Wsag5/SbrXE/JPK7cvp1Mwi5rCAUykDWXTShzGiW
+uvr1iNU8Y+YoYJbRg1rpLR9ASVO7HcI6vXlb81nmy3sCfQ/7un3w6Mjb+WTQQ4C
aSa5n5M1N9xktisRwAiCfEYf9ucrkYV3s7PHzWW5hGKFHVZ08wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjGAojnqOrIf0j9QybR0jjjTo23MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjFmYjRjMjUtMzI1MC0z
OWNhLTlhZjEtMzcwMzZjY2M0MTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1Nmkf+IVgRGVrUn9zCbnB1qPFgS6bMBrI8dyt1A3Ot/3CEP8HeWTGS
fIFtoOCwzdQkRYetSQkcMXXBjuORmpnbJy5LkrlJzKyY0ag5/W3FNifS31PyXwQW
N9KGbvTg64MVnckQl4wVfelkBzzUYZKESCVsUG60PWeZy/y89M1MweRVdWWYZOBE
jQIFBObLAdkkNP7BnxzE0cXwFXBpoZB/8jDw+6fRhaCDAkLlSm2bLGZFk+X3fBju
nMsCklTkI3xh2/Y1oon3mNIEOKFwnvHcR1wUTMAxx7ldEMEHLYY4pSSv1s9jQJLm
joDEl1B26GLXUdC2D0uOGR+kCcK+W3o=
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:54:48 2025 by rpki-client