Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74f7b179-d350-3df7-8a84-df668b6878a8.roa
File:                     74f7b179-d350-3df7-8a84-df668b6878a8.roa (raw, json)
Hash identifier:          VpAWAlTzH8gUZMzex475XPG3Am9DUN+0u6SIQrgYZDk=
Subject key identifier:   F3:FC:0E:C0:3D:04:DD:BF:55:5C:3B:6C:D0:4A:71:BB:66:02:D5:57
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584996C4964F6D1734075052A900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74f7b179-d350-3df7-8a84-df668b6878a8.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.25.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:96:4f:6d:17:34:07:50:52:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=7d4acec0-7de0-41c3-a3eb-a006f2d75ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b7:f8:ff:aa:6c:b4:9f:a5:7f:7b:c5:1c:0a:
                    2a:c0:ad:30:b4:cf:3b:fa:ab:7a:4d:aa:62:d1:02:
                    18:cd:a6:03:26:b5:55:9d:cd:36:47:8c:6c:1f:f8:
                    ff:6d:39:b7:b6:63:76:02:59:a1:93:17:2f:6b:9c:
                    53:85:8a:36:1c:c1:3c:38:f0:a0:cf:eb:33:8c:0a:
                    70:af:13:8a:4a:97:5a:9c:ea:65:31:6f:46:cc:c9:
                    8f:51:89:ca:2f:2d:64:e0:76:a6:41:7e:84:96:b0:
                    1f:06:d1:36:b9:c3:23:0f:74:cc:86:03:4a:f5:8b:
                    e8:f7:b2:cf:b2:4b:87:a9:26:8c:69:f8:99:98:a6:
                    62:70:cf:e8:15:6e:1d:27:b2:71:88:88:11:6f:0f:
                    2d:c7:34:83:e2:b9:d1:dd:69:6c:02:76:3d:76:3b:
                    c0:c0:2c:b6:a6:75:3b:74:b9:36:c8:bd:93:bd:bb:
                    9f:7d:a7:13:2a:02:79:a3:1f:b5:f8:d3:77:a1:a6:
                    3a:b8:f4:39:cb:66:bb:f6:2e:59:dd:ad:54:67:28:
                    80:2f:ab:91:32:cd:f0:37:c5:b9:ea:e0:83:08:3d:
                    75:78:db:d7:5a:66:e6:f6:15:ec:44:90:39:0a:74:
                    9d:d1:ed:98:dc:d8:70:07:48:5f:c0:6c:ce:6b:3b:
                    52:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FC:0E:C0:3D:04:DD:BF:55:5C:3B:6C:D0:4A:71:BB:66:02:D5:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74f7b179-d350-3df7-8a84-df668b6878a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:76:07:47:2c:03:6c:96:17:ee:ea:71:87:cc:26:ed:20:02:
         a1:7b:97:25:74:2d:7b:4a:93:10:06:5d:c7:75:56:94:82:71:
         14:ef:1f:8e:3a:a6:c2:43:43:c1:2a:af:63:cb:ea:c3:8a:a7:
         16:ce:d2:b8:38:71:5f:cb:4f:3c:db:bd:3b:2d:86:cd:44:38:
         75:52:d8:45:c6:00:98:84:af:02:53:6b:48:8c:67:94:18:65:
         45:b2:9c:12:63:f1:5b:e9:b4:3d:3d:f0:43:01:a9:73:ee:78:
         33:41:78:e2:ea:af:b6:2d:4d:e6:d6:fc:84:8d:b6:fc:68:f5:
         92:ad:a7:4e:38:e7:1e:03:2e:fd:4e:55:84:ce:f8:26:71:28:
         ee:2b:26:4e:a6:0b:ef:78:22:e8:71:d0:a2:4b:1f:1b:3e:f1:
         51:dc:2f:99:66:ff:3c:da:37:27:b2:c8:94:e1:bf:ae:9e:d3:
         97:15:77:9d:9c:6a:bf:a9:a7:50:37:5b:8d:e4:73:21:9d:df:
         be:8f:40:64:a4:a5:b5:58:de:85:d2:f4:c2:4a:0b:06:76:aa:
         7d:57:cf:55:9d:db:e1:f4:d1:e7:9f:cf:74:c0:45:3a:fc:75:
         7e:85:8b:70:48:71:59:68:db:49:b9:96:b8:0d:a5:1e:c2:55:
         ec:5e:d2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:44:27 2025 by rpki-client