Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e80f94d-b3ef-3902-a29c-a7c71d0b76bf.roa
File:                     6e80f94d-b3ef-3902-a29c-a7c71d0b76bf.roa (raw, json)
Hash identifier:          NVmj+4TwSNbJBhsb71JNWIbfD45k+5Ny4yAm1Ah0Cgo=
Subject key identifier:   1A:3E:34:69:18:74:C4:48:7D:74:DB:03:E1:A0:29:A3:94:D5:82:30
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CD1FDBE335833EA6EB4140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e80f94d-b3ef-3902-a29c-a7c71d0b76bf.roa
Signing time:             Thu 24 Apr 2025 11:52:16 +0000
ROA not before:           Thu 24 Apr 2025 11:52:16 +0000
ROA not after:            Wed 23 Jul 2025 11:52:16 +0000
asID:                     19905
IP address blocks:        173.20.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:cd:1f:db:e3:35:83:3e:a6:eb:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:52:16 2025 GMT
            Not After : Jul 23 11:52:16 2025 GMT
        Subject: CN=0bb7e3fc-2534-43c6-a80f-a0f1f770d552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:c1:67:6e:48:82:17:38:2c:ff:3d:c6:31:
                    5c:af:cb:58:9f:1c:01:89:00:2b:cc:0a:ee:ae:ce:
                    4c:60:ee:82:b2:78:41:b8:90:52:65:65:37:62:18:
                    93:73:14:04:67:b8:0c:f7:03:11:7a:58:9d:f0:f0:
                    b3:38:3f:01:8e:16:f0:d1:d1:df:59:5b:45:32:16:
                    c6:40:22:6f:6d:8e:c4:88:c7:23:a4:0e:8b:bc:d2:
                    74:5e:82:0d:99:0c:64:e5:f2:63:1a:29:c2:31:a4:
                    40:c0:c9:38:11:c7:56:eb:b2:ff:95:98:db:4a:7b:
                    71:b1:87:6f:15:a0:b5:d6:d5:ab:ab:22:e8:c3:cd:
                    27:90:b6:c8:e0:68:ce:cf:4a:3d:6d:11:e3:c1:94:
                    b8:7b:28:2c:be:fb:cc:28:61:f5:03:d9:a2:6f:f7:
                    9c:77:66:ed:72:ec:cb:61:a0:0d:6d:8b:56:6b:5d:
                    69:f8:8e:2b:93:fa:e3:11:15:06:a4:5c:84:7b:ee:
                    97:76:ee:f4:a5:bd:e2:42:82:96:4e:6d:d4:bd:49:
                    d2:63:4a:61:6f:16:39:d1:89:6f:38:85:3f:c3:9d:
                    99:a2:91:bc:20:ca:6d:00:32:c0:ca:50:f7:fe:fd:
                    4e:c1:9e:25:c9:0f:04:8f:cb:59:48:dc:ff:59:ef:
                    64:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3E:34:69:18:74:C4:48:7D:74:DB:03:E1:A0:29:A3:94:D5:82:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e80f94d-b3ef-3902-a29c-a7c71d0b76bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:95:7e:08:23:d8:e4:76:67:2e:1a:ae:b8:76:d7:ea:16:2f:
         69:75:87:aa:b9:c9:e2:9f:50:5d:19:a6:cf:e8:0f:3d:55:30:
         b5:d0:5c:8e:2f:1f:7c:ae:87:49:83:24:13:3a:cd:f0:0f:e3:
         e5:11:fb:e0:c5:f7:48:99:80:c6:89:b3:e5:49:1a:7a:e7:c1:
         c0:36:83:14:fb:c0:75:cf:dd:9b:c2:28:27:94:21:f8:5c:db:
         8f:1f:41:81:e7:00:82:cf:8f:ef:6a:36:e9:02:8f:fa:28:9e:
         3a:43:98:db:ce:1e:f5:00:60:32:1b:b7:ed:44:13:7e:60:eb:
         95:5f:02:6f:a1:c3:5f:6f:2b:c3:5e:fa:20:72:34:f4:84:6e:
         ed:56:c4:6c:44:ca:f2:6c:2f:50:a7:34:52:b8:46:27:31:b1:
         0d:16:04:0c:2c:24:77:d3:43:a8:ee:55:a7:6c:ad:9b:41:be:
         60:bc:3b:6f:dd:8a:4e:d2:ad:d5:bc:7b:12:ce:bb:80:16:15:
         5c:b2:fe:6e:9e:ef:3f:7c:38:94:0c:d0:20:50:f0:63:e2:64:
         48:46:12:eb:75:a4:f9:d8:3b:2a:c3:71:b9:70:a8:74:2b:03:
         99:3a:8c:ad:a5:6c:1e:ee:48:69:d1:74:97:91:8e:25:e2:bf:
         9c:a8:0c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:46:05 2025 by rpki-client