Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cac07a3-6995-30ed-b8d7-26a4f88de0a6.roa
File:                     8cac07a3-6995-30ed-b8d7-26a4f88de0a6.roa (raw, json)
Hash identifier:          2W40GEvcgOzUPVmMXX4JhXe/sCr3ILjYYF4Co50mqvM=
Subject key identifier:   FB:21:5C:E5:17:02:49:3A:B2:C0:5A:63:1D:8C:6E:50:06:CC:E4:EE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA1F5B7A93385A47BC3280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cac07a3-6995-30ed-b8d7-26a4f88de0a6.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.19.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:1f:5b:7a:93:38:5a:47:bc:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=f1161a45-c884-4dab-86b2-329989eacff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:06:2c:f6:55:aa:7a:04:98:1e:ff:8b:b5:
                    d0:b6:7e:ec:de:c3:fe:d4:36:0f:96:1e:0d:bf:3b:
                    24:e3:6f:39:2f:9f:c8:99:74:59:0f:e8:43:ab:45:
                    d5:97:13:2c:18:31:89:57:d2:2f:80:e4:cb:bd:95:
                    48:d2:ca:c6:e1:d2:38:6e:98:47:63:fd:1d:92:8e:
                    fe:68:70:f0:fd:5f:a6:9a:5c:6e:c9:0c:be:ac:e0:
                    49:55:6c:f9:30:45:e7:fe:0b:32:cb:1f:11:cc:43:
                    c6:cd:b1:7f:4d:c4:43:98:9f:c6:c1:7d:4c:2b:f4:
                    b5:d4:ac:a7:30:64:93:33:49:41:7a:95:74:c9:6a:
                    7a:69:bf:c9:dd:28:47:e3:f9:15:32:dc:b1:cf:85:
                    ac:db:46:43:d2:c1:ec:67:6f:63:e1:52:0d:45:1e:
                    7c:7d:d1:79:a9:3b:05:e5:00:cd:6f:e0:d8:c9:57:
                    2c:a8:f3:04:0b:a7:e1:c8:57:54:bf:59:93:84:31:
                    ca:5a:76:de:9d:55:34:eb:ec:e9:59:bb:04:8a:f3:
                    3f:fe:24:4c:c8:48:ba:f8:bc:a5:dd:22:27:e3:02:
                    be:ca:b5:6c:e1:db:c7:a5:01:59:b1:80:41:cf:27:
                    7d:dc:a2:b5:5f:b9:72:8b:10:4b:d8:60:f9:c2:6a:
                    90:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:21:5C:E5:17:02:49:3A:B2:C0:5A:63:1D:8C:6E:50:06:CC:E4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cac07a3-6995-30ed-b8d7-26a4f88de0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a0:07:27:99:8f:23:ad:1a:93:8e:f1:3f:a3:ee:e5:a9:ed:
         39:4b:e0:8b:a8:cc:81:3a:94:75:81:17:3c:95:b1:71:c2:10:
         ae:ae:f9:f4:75:91:d5:f7:35:bd:7a:2a:3a:64:58:c8:a2:2f:
         60:51:3b:28:43:5b:f7:76:14:52:12:9e:6e:cd:e6:08:61:4a:
         ef:6c:fc:75:94:28:00:af:81:fd:c4:a0:f5:a5:1d:02:43:ef:
         d9:0d:c6:6b:80:22:e4:b7:fb:8d:00:36:55:39:22:48:25:d9:
         02:17:2d:32:c0:9e:7c:27:3f:ca:fb:c6:74:60:3c:41:7e:80:
         16:85:24:b9:12:d9:3b:92:7f:72:61:60:53:b5:ec:41:2c:0a:
         1b:61:64:6d:6b:43:d0:ae:21:d5:fa:ae:9d:2f:5a:e4:f9:45:
         b0:9f:70:56:50:d3:8d:c5:df:e2:bd:f7:27:cb:f0:01:10:2c:
         0e:80:3d:48:96:b4:36:03:5d:ea:a7:27:68:5b:f4:45:95:3b:
         c6:8d:3b:61:ad:a1:d8:65:69:b8:21:af:f3:cf:bd:76:11:85:
         db:91:78:58:f2:81:69:31:f2:d6:bd:30:40:72:fd:e6:15:c1:
         10:31:5d:ff:4b:f7:1e:7f:10:b8:13:90:d0:bb:90:87:2d:50:
         26:dd:ca:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuh9bepM4Wke8MoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZjExNjFhNDUtYzg4NC00ZGFiLTg2YjItMzI5OTg5ZWFjZmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgIGLPZVqnoEmB7/i7XQtn7s3sP+1DYPlh4N
vzsk4285L5/ImXRZD+hDq0XVlxMsGDGJV9IvgOTLvZVI0srG4dI4bphHY/0dko7+
aHDw/V+mmlxuyQy+rOBJVWz5MEXn/gsyyx8RzEPGzbF/TcRDmJ/GwX1MK/S11Kyn
MGSTM0lBepV0yWp6ab/J3ShH4/kVMtyxz4Ws20ZD0sHsZ29j4VINRR58fdF5qTsF
5QDNb+DYyVcsqPMEC6fhyFdUv1mThDHKWnbenVU06+zpWbsEivM//iRMyEi6+Lyl
3SIn4wK+yrVs4dvHpQFZsYBBzyd93KK1X7lyixBL2GD5wmqQCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPshXOUXAkk6ssBaYx2MblAGzOTuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGNhYzA3YTMtNjk5NS0z
MGVkLWI4ZDctMjZhNGY4OGRlMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRMhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIOgByeZjyOtGpOO8T+j7uWp7TlL4IuozIE6lHWBFzyVsXHCEK6u+fR1
kdX3Nb16KjpkWMiiL2BROyhDW/d2FFISnm7N5ghhSu9s/HWUKACvgf3EoPWlHQJD
79kNxmuAIuS3+40ANlU5Ikgl2QIXLTLAnnwnP8r7xnRgPEF+gBaFJLkS2TuSf3Jh
YFO17EEsChthZG1rQ9CuIdX6rp0vWuT5RbCfcFZQ043F3+K99yfL8AEQLA6APUiW
tDYDXeqnJ2hb9EWVO8aNO2Gtodhlabghr/PPvXYRhduReFjygWkx8ta9MEBy/eYV
wRAxXf9L9x5/ELgTkNC7kIctUCbdyt8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:56:46 2025 by rpki-client