Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/69b339e0-4f41-350f-b98b-95eb332834cf.roa
File:                     69b339e0-4f41-350f-b98b-95eb332834cf.roa (raw, json)
Hash identifier:          PoAbMUNM/MD5UMjNRQcyVqoSfC9iivrbG46a8ya4Fgw=
Subject key identifier:   C5:7E:5C:4E:75:EC:7E:55:E1:08:B8:45:79:97:69:B5:B6:9C:D7:C0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA32834AB975A409D85500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/69b339e0-4f41-350f-b98b-95eb332834cf.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.17.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:32:83:4a:b9:75:a4:09:d8:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=37525c2e-7900-4ffc-941a-10d665e1b7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e4:94:78:ba:da:97:c8:a6:be:56:97:e5:c3:
                    94:e1:ba:cd:af:86:2d:41:fb:1c:7d:bd:f9:ec:b3:
                    d2:77:1f:3d:fb:d3:cb:5f:d5:55:6f:7b:7b:d9:60:
                    e0:3f:52:ad:0b:f9:b1:50:db:a9:65:8b:4c:e6:32:
                    e5:50:03:2f:a2:f6:c2:7e:dc:43:7d:c8:bb:d4:55:
                    ae:08:ad:de:e2:99:3f:c4:6c:73:a7:d8:2c:13:7d:
                    11:62:cd:cd:04:4d:6a:72:37:e1:2b:7f:7d:c3:93:
                    12:3c:ca:7f:1b:58:c1:b8:3d:ec:da:0a:24:b8:6b:
                    1f:6d:3a:7d:9a:e8:51:69:8a:05:1b:b5:6a:54:01:
                    7d:01:ce:79:29:d9:f7:a4:84:28:4c:e2:34:2b:2c:
                    a6:a3:e8:b9:42:1a:b4:31:18:0c:81:91:02:cd:bf:
                    31:43:e2:3b:7f:48:21:02:4c:cb:ac:ff:1e:59:f8:
                    36:8b:20:68:9b:1c:80:8e:ae:13:77:48:cf:f0:70:
                    a3:27:a3:fd:a9:6c:5b:1e:be:3c:53:d7:24:57:32:
                    37:16:f8:33:57:30:ab:2a:0e:62:ba:04:18:c7:50:
                    a6:5f:e4:9e:87:c6:fc:1d:a4:92:49:29:31:e1:6b:
                    93:77:c1:c9:bf:7b:7e:a4:95:a3:40:45:e9:ae:ca:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7E:5C:4E:75:EC:7E:55:E1:08:B8:45:79:97:69:B5:B6:9C:D7:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/69b339e0-4f41-350f-b98b-95eb332834cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8b:aa:66:6d:44:7d:f9:1e:24:db:7c:55:02:5f:40:d8:85:
         09:a2:00:a5:64:d6:dc:76:ff:b9:07:3c:a5:16:ac:60:48:32:
         21:c8:dd:47:0b:f1:93:f0:b4:cc:8e:41:a5:9c:af:26:b3:a1:
         c2:ca:fd:29:51:76:38:ce:6a:fb:b2:5c:2d:12:a4:45:b0:02:
         98:11:79:79:99:3b:5d:e2:ec:46:d3:c4:f4:28:f4:fe:14:a0:
         53:9b:2a:80:24:bb:e8:8d:68:23:e7:3a:e8:fa:1d:75:f7:43:
         a1:39:ef:49:15:c5:71:dc:8c:33:a1:36:8f:a2:86:bc:d7:f2:
         62:d8:c2:a2:84:f6:04:65:be:5e:9f:c3:8c:d7:22:96:26:d6:
         80:28:fc:98:e3:be:32:47:af:6c:b4:52:83:3a:1c:0d:b1:b2:
         f9:37:74:af:0d:97:14:14:da:37:87:e6:5e:ae:26:92:d5:8c:
         db:bf:e6:41:46:7a:c4:72:c5:b0:d7:e1:a2:ed:8a:42:1b:9c:
         ad:ab:6d:9b:88:e3:6d:19:9c:05:5d:2d:53:5e:cf:d6:72:c1:
         5f:b4:f0:28:b5:71:76:84:d7:98:f0:57:02:48:73:bb:6f:68:
         a2:1f:8c:9d:2d:23:ad:5b:4b:61:9c:0d:ff:6f:4f:0f:cd:c4:
         c0:5e:d3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:29:26 2025 by rpki-client