Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/730dcc3c-0c70-3c8c-9ec8-c4287bb271f9.roa
File:                     730dcc3c-0c70-3c8c-9ec8-c4287bb271f9.roa (raw, json)
Hash identifier:          IUks8MkGOBIhzltEvPwUhXgnmWTh7jZwWVuJKwLlVhE=
Subject key identifier:   D9:BE:E8:E9:4C:7E:51:EA:DD:13:E5:32:1B:CE:0F:21:BF:B4:E1:F9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF4DCB3E4DC0341B351260
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/730dcc3c-0c70-3c8c-9ec8-c4287bb271f9.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.16.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:4d:cb:3e:4d:c0:34:1b:35:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=457c8039-bc9b-4a70-8cac-df6ed13998f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:5c:35:71:27:bc:21:db:f0:e6:55:ac:57:
                    90:19:46:cb:8b:ef:13:c0:44:f8:e3:c8:97:6d:c6:
                    30:b9:6f:a8:81:ef:29:f2:cc:6a:cb:c2:3e:e9:66:
                    38:58:9f:69:62:dc:01:6c:3e:dd:fe:8e:8e:90:d8:
                    ff:ee:82:d6:14:30:90:67:80:9b:6d:c6:42:8a:b0:
                    59:08:7d:26:9d:39:02:84:46:cb:22:6d:a1:8f:09:
                    64:e1:38:9b:e6:f5:8b:a5:e2:3b:26:6b:68:a8:49:
                    ec:a5:4e:bf:08:48:07:4e:23:22:d6:c6:4e:13:85:
                    38:96:c7:0b:29:d0:1b:a5:b3:15:4a:5c:86:8e:f3:
                    14:7d:83:a9:4a:67:cf:66:fc:0b:4d:1f:0e:f0:2b:
                    32:72:bb:dd:3c:5b:87:06:87:7b:b4:09:5f:7f:fc:
                    cf:e7:35:3a:3e:58:cd:ee:d9:34:da:37:dc:e0:86:
                    a1:da:e7:80:66:06:fb:cc:69:e0:23:e0:92:6b:1f:
                    f2:b4:5e:fe:d3:3f:e3:93:c5:0e:fb:40:a8:01:4b:
                    62:3e:ff:af:94:af:87:3a:64:20:6d:70:40:09:4e:
                    92:a2:90:8f:d5:a1:14:55:22:c4:30:9a:78:3e:43:
                    98:a8:35:96:97:7c:85:28:b2:7b:d5:8f:c9:81:c9:
                    55:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BE:E8:E9:4C:7E:51:EA:DD:13:E5:32:1B:CE:0F:21:BF:B4:E1:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/730dcc3c-0c70-3c8c-9ec8-c4287bb271f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:58:f0:fd:4c:35:75:4a:5f:46:5a:b4:ec:0e:0f:47:3a:99:
         bb:01:47:49:9b:38:0f:65:45:65:ec:35:f0:80:a9:94:77:a4:
         dd:f5:09:be:cb:81:e2:18:cf:f0:02:45:46:23:d8:10:4f:20:
         1b:55:a2:5c:d4:53:8a:55:01:0e:25:19:f2:4f:db:92:e0:7c:
         52:74:6a:58:2a:d9:9e:44:8a:68:df:39:5c:97:cd:a2:4e:2e:
         d0:f7:0e:43:9a:05:1c:d1:94:b8:b6:87:c5:a8:16:84:88:07:
         6a:83:39:3c:17:d5:80:29:75:aa:9c:37:2b:80:4a:43:04:10:
         ba:5c:d5:90:a9:33:87:09:0b:42:a0:05:21:3d:d5:d6:c7:42:
         7a:6a:30:07:6d:46:c2:82:dd:c4:db:a7:99:0e:c1:e7:de:4f:
         57:46:23:0f:e5:2a:d7:54:d7:86:4f:92:06:24:1c:55:db:df:
         dd:e9:ad:2c:ed:23:92:be:90:b7:49:69:4d:bb:f7:98:d0:16:
         5b:0f:3f:02:07:ff:ed:9c:4b:bd:12:54:94:76:ad:dd:aa:44:
         09:44:5c:53:e7:c4:fe:2d:f7:a4:ef:7a:dd:ec:0f:00:40:37:
         09:8b:ca:46:15:80:8e:7c:88:7d:cf:ba:b8:e9:d0:fa:08:97:
         ea:86:32:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh703LPk3ANBs1EmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk
NDU3YzgwMzktYmM5Yi00YTcwLThjYWMtZGY2ZWQxMzk5OGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYhcNXEnvCHb8OZVrFeQGUbLi+8TwET448iX
bcYwuW+oge8p8sxqy8I+6WY4WJ9pYtwBbD7d/o6OkNj/7oLWFDCQZ4CbbcZCirBZ
CH0mnTkChEbLIm2hjwlk4Tib5vWLpeI7JmtoqEnspU6/CEgHTiMi1sZOE4U4lscL
KdAbpbMVSlyGjvMUfYOpSmfPZvwLTR8O8CsycrvdPFuHBod7tAlff/zP5zU6PljN
7tk02jfc4Iah2ueAZgb7zGngI+CSax/ytF7+0z/jk8UO+0CoAUtiPv+vlK+HOmQg
bXBACU6SopCP1aEUVSLEMJp4PkOYqDWWl3yFKLJ71Y/JgclVvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNm+6OlMflHq3RPlMhvODyG/tOH5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzMwZGNjM2MtMGM3MC0z
YzhjLTllYzgtYzQyODdiYjI3MWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRBYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5Y8P1MNXVKX0ZatOwOD0c6mbsBR0mbOA9lRWXsNfCAqZR3pN31Cb7L
geIYz/ACRUYj2BBPIBtVolzUU4pVAQ4lGfJP25LgfFJ0algq2Z5EimjfOVyXzaJO
LtD3DkOaBRzRlLi2h8WoFoSIB2qDOTwX1YApdaqcNyuASkMEELpc1ZCpM4cJC0Kg
BSE91dbHQnpqMAdtRsKC3cTbp5kOwefeT1dGIw/lKtdU14ZPkgYkHFXb393prSzt
I5K+kLdJaU2795jQFlsPPwIH/+2cS70SVJR2rd2qRAlEXFPnxP4t96Tvet3sDwBA
NwmLykYVgI58iH3Purjp0PoIl+qGMjM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:40:04 2025 by rpki-client