Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6deaa0b8-7323-3c1e-9ed6-b15790501eaa.roa
File:                     6deaa0b8-7323-3c1e-9ed6-b15790501eaa.roa (raw, json)
Hash identifier:          3a0vLYJ3XwSA/znEaogkmy7PWjAHp5E/sYep0NuqpQE=
Subject key identifier:   D1:8D:AF:81:E9:F0:D2:1E:2D:45:CD:D0:7B:32:CC:51:68:3D:84:EF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA019134A93F0D89326400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6deaa0b8-7323-3c1e-9ed6-b15790501eaa.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.22.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:01:91:34:a9:3f:0d:89:32:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=07cd976f-df92-4cdf-9e6d-f6cf185bd76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:2f:b7:c1:aa:64:d6:ca:71:05:d8:ec:9d:
                    ea:e0:b7:3c:cb:96:ed:a5:1e:a2:b4:f8:3d:8a:9c:
                    ca:24:67:e4:80:86:c3:7d:73:e3:45:9b:77:3c:d2:
                    c1:b3:d5:b6:35:b3:65:26:fd:86:3c:f0:09:b5:62:
                    66:ab:2e:43:52:2b:ee:a2:a3:07:59:7c:85:81:f5:
                    5c:68:c7:2a:75:51:30:3b:2f:40:6a:a5:44:57:d6:
                    83:c1:05:bd:c1:db:f5:5f:18:c7:1a:9c:05:a5:71:
                    cd:e5:45:1b:de:be:46:76:d7:5f:fb:ed:89:43:4e:
                    66:9d:df:cd:3e:25:50:2a:0a:25:a1:73:1e:72:85:
                    b6:d5:f9:a4:53:fe:ba:c5:7e:8a:db:bf:f6:7c:e8:
                    20:49:18:55:0c:1c:2e:d7:c4:65:7d:11:12:a8:3d:
                    55:2a:71:be:38:50:e6:8e:19:5a:54:38:f5:4c:2a:
                    93:42:d4:88:14:90:15:46:51:ba:80:66:6d:57:1e:
                    cf:b7:c4:e6:9f:a3:de:47:7e:e6:51:24:79:a5:f7:
                    3f:18:81:02:37:df:e9:3b:ad:80:74:8c:8e:f6:a7:
                    66:f4:e2:12:50:03:b0:43:ad:8c:20:fd:c1:01:52:
                    dd:fc:52:13:4f:5b:ae:a2:b4:3c:85:94:47:c8:41:
                    90:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8D:AF:81:E9:F0:D2:1E:2D:45:CD:D0:7B:32:CC:51:68:3D:84:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6deaa0b8-7323-3c1e-9ed6-b15790501eaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c0:43:37:72:29:8b:46:a3:e7:7f:63:0b:20:19:fa:36:b9:
         40:d9:47:73:e9:b3:01:96:8f:17:b1:15:5a:f8:21:81:4b:16:
         bd:95:9d:40:bf:bd:92:91:5f:d9:03:b7:5e:b8:1c:d4:54:07:
         b8:c5:ef:f9:9c:b2:91:0a:27:bd:d9:a0:3d:af:d7:d8:bb:73:
         25:2c:df:d2:23:f3:07:4c:c9:d1:56:32:d1:60:f1:e6:54:8b:
         28:b5:81:3b:54:66:e6:3a:a1:c4:0d:8c:59:e3:43:9d:e9:cb:
         3d:87:64:ec:e8:df:db:aa:3b:ba:d7:07:31:12:56:c2:0f:00:
         0f:4d:8d:86:f5:60:61:6b:d3:3e:68:3c:80:28:41:55:f2:c0:
         02:d7:e7:49:bc:db:44:9c:ac:fe:d2:81:67:92:39:73:09:29:
         c0:84:9c:d5:c2:93:83:a5:96:d1:95:e9:aa:24:1b:76:da:93:
         de:3b:6f:d9:37:19:86:86:63:83:3c:27:f6:d3:f1:83:dc:c5:
         c5:a5:c7:e8:42:d6:b1:5e:45:0e:cf:d0:dd:37:27:be:a9:e5:
         92:19:56:fe:ff:8d:eb:b4:60:2a:1b:27:44:21:7c:1d:c3:1b:
         d0:d9:bc:46:2b:ec:10:5c:f2:fe:2a:14:42:6c:e9:7e:da:89:
         88:25:33:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:57:09 2025 by rpki-client