Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/78268ac0-5cc0-38bd-a2e1-a189d4f0d918.roa
File:                     78268ac0-5cc0-38bd-a2e1-a189d4f0d918.roa (raw, json)
Hash identifier:          uxzBLfULL1u/y3ZH5xObVXlvbi/4Cuz8kGrgMqMyOFE=
Subject key identifier:   8E:AC:D0:3E:07:8B:26:3D:DF:DE:3E:DE:59:51:CB:AD:CA:42:B0:A8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA0163ADC1F19128E17800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/78268ac0-5cc0-38bd-a2e1-a189d4f0d918.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.21.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:01:63:ad:c1:f1:91:28:e1:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=270606bb-b114-4a21-a84d-09aec658e5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:3c:11:1c:a4:0c:33:ba:e3:a8:bb:5e:bf:
                    77:c6:a1:f2:72:d8:5f:a4:24:ea:5b:31:9e:fd:60:
                    da:1b:e2:67:4c:a7:c7:6e:3f:6f:85:97:3e:9e:be:
                    a7:ef:a5:de:76:76:f9:e3:d7:39:3b:fb:e4:92:06:
                    52:51:bd:1c:e4:60:1a:bf:f9:8b:7f:95:3f:8c:09:
                    a1:29:56:ce:4f:79:5e:1e:d7:fc:2b:e8:57:cf:cc:
                    b7:f7:df:02:a8:a2:2d:26:af:c4:b3:25:a2:bc:57:
                    3c:e4:5f:fd:1c:f1:09:16:17:fb:5c:83:27:02:e6:
                    f5:44:ef:13:40:63:b0:62:ae:c9:84:74:50:08:87:
                    29:1e:ec:e3:0b:cc:c7:e1:00:c4:fd:4a:55:62:a7:
                    35:ab:32:fe:e5:1a:91:a2:c0:01:74:a0:94:a7:31:
                    55:a1:e3:1c:33:5d:41:23:71:3e:03:54:23:26:03:
                    8c:28:87:67:a0:5a:af:fd:41:9c:81:90:a2:d2:11:
                    9e:d0:84:22:74:64:91:36:ce:01:c0:0a:0c:68:9e:
                    94:b3:b4:1f:95:59:da:bd:90:cd:e7:6b:f5:e5:8d:
                    ef:aa:f9:34:ce:c1:62:c4:7e:3d:86:95:ff:45:4d:
                    8c:dc:87:f5:dc:6f:33:00:28:a1:99:ce:bc:63:7b:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AC:D0:3E:07:8B:26:3D:DF:DE:3E:DE:59:51:CB:AD:CA:42:B0:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/78268ac0-5cc0-38bd-a2e1-a189d4f0d918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:33:12:74:8a:53:9c:42:bd:9d:0c:5f:7f:12:77:00:26:63:
         eb:9d:4b:27:24:75:33:8a:87:a0:96:a8:11:03:50:62:ce:53:
         57:d7:f2:72:aa:bd:1b:08:d8:23:38:6f:64:bd:3b:b9:00:91:
         10:6c:01:a5:31:1e:20:34:52:cb:b2:49:27:bd:ca:21:78:11:
         fe:6d:3e:27:9b:61:d6:b2:f9:19:28:8d:3f:fd:a7:b0:ad:81:
         7c:05:76:74:c2:75:6a:81:21:1d:ed:85:cf:82:a3:c6:13:2e:
         f9:c1:b3:7d:3c:c3:08:25:bb:bb:d6:64:ba:a7:9a:35:00:b9:
         9e:f7:a1:db:4a:43:68:78:6e:02:7f:d1:e4:8f:fc:8d:78:66:
         97:25:e8:31:6d:fe:84:22:07:d6:d0:81:78:b8:17:25:e5:e5:
         96:0b:12:d0:27:65:0b:e2:94:23:b8:71:b5:26:f6:19:f9:d7:
         1e:e3:7d:dd:2c:b7:26:4b:7c:19:e6:90:18:d4:fa:5f:b9:e8:
         1a:01:1b:8b:38:a2:9d:b7:70:bd:10:73:87:04:ac:d6:aa:f8:
         5a:bf:dc:3f:61:b7:09:34:74:3f:e9:f8:52:08:50:29:01:9c:
         2e:40:21:32:9c:c4:3c:72:c6:2e:5f:6b:35:bc:07:e3:e1:1d:
         46:02:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:57:05 2025 by rpki-client