Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74a44a82-0cc4-3587-bd68-459ca1d3d994.roa
File:                     74a44a82-0cc4-3587-bd68-459ca1d3d994.roa (raw, json)
Hash identifier:          OeBF2TsNHSP/Me97DtHzqBCYT757Kf1GMluxnBLvrrY=
Subject key identifier:   7B:54:82:E1:40:04:96:AB:81:3E:C3:42:6C:0A:26:9A:F7:35:8B:32
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784A16852B4D8CBE204C880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74a44a82-0cc4-3587-bd68-459ca1d3d994.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.30.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:a1:68:52:b4:d8:cb:e2:04:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=226d0d33-2b24-49d1-ad13-e04a9b1da9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:84:90:bc:b2:9a:25:f4:0d:cb:8d:5d:6d:
                    0b:a9:5f:09:be:e4:bb:ef:e6:52:06:5e:f7:b7:48:
                    8f:73:60:5b:f7:97:e4:ea:9e:b0:0d:87:71:c7:3a:
                    ca:27:cb:3a:6d:d5:98:4f:94:41:58:65:f7:4b:60:
                    54:ac:22:0e:a7:d9:02:a3:1a:01:72:55:c3:57:02:
                    f4:78:97:1a:da:5a:60:60:9f:41:1d:9b:fe:c7:28:
                    1f:2c:91:2b:f2:dc:e2:3e:a7:8b:75:ab:64:47:b0:
                    54:82:4f:cf:d2:ce:37:aa:62:a3:84:3b:c4:ae:39:
                    19:8f:05:cd:b4:cd:8e:e7:cf:c5:7b:04:02:34:d4:
                    62:76:b9:ec:b6:8c:cf:45:be:09:c9:cc:1a:a9:7b:
                    68:aa:0e:a4:85:c2:e7:7e:57:5a:36:79:3b:96:16:
                    cc:52:b6:9c:5b:52:02:60:d2:f5:34:19:d0:09:89:
                    f5:2f:69:12:78:4e:0e:23:83:5e:59:a4:cf:a7:fa:
                    1f:9a:eb:73:ae:d9:ce:58:26:17:d7:31:5f:c8:b5:
                    e3:ba:ed:36:a5:92:a1:13:18:67:57:12:bd:71:e5:
                    98:b0:3d:57:6f:2c:23:c1:13:bd:8a:64:4f:47:c2:
                    b5:05:68:d9:89:79:10:a2:af:e5:90:af:85:b8:c5:
                    03:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:54:82:E1:40:04:96:AB:81:3E:C3:42:6C:0A:26:9A:F7:35:8B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74a44a82-0cc4-3587-bd68-459ca1d3d994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:58:1f:6a:ec:9f:7d:8f:60:b4:ec:02:c1:f3:bf:ed:6a:8d:
         76:9c:27:e2:15:ce:48:c9:09:a3:75:3b:31:b6:48:a7:df:e4:
         bc:51:96:67:92:95:ba:46:52:30:3c:0d:92:d4:89:40:34:3b:
         65:de:70:e5:c2:18:71:b6:7b:4d:b2:b6:6c:47:58:ed:a5:32:
         c7:b9:84:ba:20:dc:af:32:06:9e:de:07:5e:36:50:39:b2:65:
         39:61:e9:f7:22:41:b6:97:63:69:5d:8e:5a:ef:ab:54:11:3b:
         57:55:84:72:5d:63:a5:ff:40:39:a7:d1:e8:8d:72:b8:23:36:
         c4:4b:ef:42:e6:5c:5e:33:e6:f0:87:40:5b:3d:5c:31:34:fc:
         2c:81:89:90:c4:f7:7c:e3:d2:86:54:65:40:2f:ff:73:e0:c8:
         b6:55:b8:5f:9a:26:ff:0a:a2:81:d9:c2:79:33:91:fd:9d:58:
         2c:c3:16:b3:04:b0:40:0e:aa:58:ae:77:a1:69:f5:76:21:f2:
         f8:67:09:50:8c:6d:d5:bf:ef:d2:83:54:b4:26:28:2b:d2:34:
         83:f4:cd:84:bd:53:93:b5:6e:21:9b:d2:6d:7e:a0:20:ba:c3:
         83:67:74:14:c3:7e:87:ef:ec:dc:5f:50:8b:d0:85:7a:ba:53:
         96:33:45:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKFoUrTYy+IEyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
MjI2ZDBkMzMtMmIyNC00OWQxLWFkMTMtZTA0YTliMWRhOWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4aEkLyymiX0DcuNXW0LqV8JvuS77+ZSBl73
t0iPc2Bb95fk6p6wDYdxxzrKJ8s6bdWYT5RBWGX3S2BUrCIOp9kCoxoBclXDVwL0
eJca2lpgYJ9BHZv+xygfLJEr8tziPqeLdatkR7BUgk/P0s43qmKjhDvErjkZjwXN
tM2O58/FewQCNNRidrnstozPRb4JycwaqXtoqg6khcLnfldaNnk7lhbMUracW1IC
YNL1NBnQCYn1L2kSeE4OI4NeWaTPp/ofmutzrtnOWCYX1zFfyLXjuu02pZKhExhn
VxK9ceWYsD1XbywjwRO9imRPR8K1BWjZiXkQoq/lkK+FuMUDGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHtUguFABJargT7DQmwKJpr3NYsyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzRhNDRhODItMGNjNC0z
NTg3LWJkNjgtNDU5Y2ExZDNkOTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR5QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEVYH2rsn32PYLTsAsHzv+1qjXacJ+IVzkjJCaN1OzG2SKff5LxRlmeS
lbpGUjA8DZLUiUA0O2XecOXCGHG2e02ytmxHWO2lMse5hLog3K8yBp7eB142UDmy
ZTlh6fciQbaXY2ldjlrvq1QRO1dVhHJdY6X/QDmn0eiNcrgjNsRL70LmXF4z5vCH
QFs9XDE0/CyBiZDE93zj0oZUZUAv/3PgyLZVuF+aJv8KooHZwnkzkf2dWCzDFrME
sEAOqliud6Fp9XYh8vhnCVCMbdW/79KDVLQmKCvSNIP0zYS9U5O1biGb0m1+oCC6
w4NndBTDfofv7NxfUIvQhXq6U5YzRVw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:41 2025 by rpki-client