Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e524d76-fae5-3ce0-bebf-8621945ec0c0.roa
File:                     8e524d76-fae5-3ce0-bebf-8621945ec0c0.roa (raw, json)
Hash identifier:          7bkdYtmdazDoxTcmERHuDnE74WnPnfAh6Ml3M3Sqcyk=
Subject key identifier:   2C:E0:F3:6F:F0:69:08:47:51:B9:51:0E:19:A3:7B:26:37:03:EA:C2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A0D6A7C65FAD6095711417F60
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e524d76-fae5-3ce0-bebf-8621945ec0c0.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        173.17.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:7c:65:fa:d6:09:57:11:41:7f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=e640412c-767d-4c3e-9666-c6006c2addc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:35:06:22:22:1f:95:48:d2:e1:72:45:3f:
                    bf:be:21:27:b7:8f:bc:3a:e9:74:da:59:49:30:ad:
                    10:8a:54:20:57:87:e0:cf:1b:a6:8f:fd:19:5e:64:
                    2b:75:4d:db:9d:79:68:5f:55:66:b7:1b:b0:12:da:
                    8b:a4:55:2e:b4:95:bb:86:2d:b7:16:65:0d:c7:68:
                    d6:01:11:0b:d5:8a:9c:0a:08:88:3a:43:27:99:89:
                    70:53:c5:e1:fc:bb:ee:9d:40:e6:36:9c:70:2a:9e:
                    57:ee:75:42:1d:37:ff:0e:15:29:66:0b:3e:2f:8d:
                    6f:62:90:13:4b:23:d2:b3:5f:56:ef:73:f1:48:95:
                    06:69:ba:5c:f0:5b:c8:e9:77:d7:bf:c7:58:dd:45:
                    42:ae:14:06:03:79:0f:eb:40:c2:7a:65:be:75:ae:
                    8b:3f:c9:1a:99:b3:38:86:f6:2b:61:3b:92:d3:cf:
                    a9:ef:39:47:bb:5a:fc:66:e1:90:d2:77:ca:7c:1e:
                    39:3a:5e:5c:bb:f8:c1:7e:25:04:aa:a0:2a:0b:1a:
                    d1:97:1c:8d:0b:f9:10:7a:ea:ed:25:44:d1:f7:f8:
                    7d:5c:5b:c4:31:49:e4:e3:ff:42:22:97:8d:f9:d2:
                    b6:a0:a8:b8:2a:6b:67:85:59:69:44:eb:b3:0b:40:
                    9b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E0:F3:6F:F0:69:08:47:51:B9:51:0E:19:A3:7B:26:37:03:EA:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e524d76-fae5-3ce0-bebf-8621945ec0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:69:db:d1:7c:1b:ed:63:c4:b7:42:fd:9e:42:37:ed:55:fe:
         62:fe:2e:c0:ca:5a:e9:ce:85:37:18:df:61:7a:45:1b:2b:fd:
         3a:61:29:8f:29:a8:70:51:13:f8:97:a6:18:67:55:d5:eb:0e:
         1a:c7:cb:07:74:a9:72:92:75:27:6b:f7:3e:59:94:97:00:28:
         31:1a:26:23:3b:20:fe:a3:49:12:f9:40:50:bb:6a:31:05:a7:
         68:67:a2:a5:b9:3c:5d:af:a2:35:b7:cc:61:4c:9e:8c:0f:ed:
         13:57:89:6c:4d:e9:cf:5f:e9:fc:d4:7c:14:dd:b2:0b:fe:4a:
         a2:70:0f:de:b8:66:a2:cd:f0:96:2d:0a:00:3a:06:d0:dd:bb:
         87:c7:ab:7d:49:a0:d2:37:34:fb:0a:6a:90:c5:1a:93:e5:60:
         b2:9f:98:f4:d3:a8:c3:74:ca:3d:62:fc:e3:00:e4:f9:39:60:
         3b:78:fc:5d:23:f4:52:e3:21:98:de:86:48:fc:b7:ab:0c:2e:
         73:95:c5:ab:35:73:4f:2c:6e:89:4f:48:d1:03:94:85:8b:34:
         60:e3:57:28:12:f2:fb:c6:c7:4f:12:30:39:a5:50:f4:8c:b6:
         24:d5:4f:9c:57:b5:04:30:5b:78:a8:e2:22:88:bf:af:2f:8d:
         97:f2:6b:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNanxl+tYJVxFBf2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk
ZTY0MDQxMmMtNzY3ZC00YzNlLTk2NjYtYzYwMDZjMmFkZGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrQ1BiIiH5VI0uFyRT+/viEnt4+8Oul02llJ
MK0QilQgV4fgzxumj/0ZXmQrdU3bnXloX1VmtxuwEtqLpFUutJW7hi23FmUNx2jW
AREL1YqcCgiIOkMnmYlwU8Xh/LvunUDmNpxwKp5X7nVCHTf/DhUpZgs+L41vYpAT
SyPSs19W73PxSJUGabpc8FvI6XfXv8dY3UVCrhQGA3kP60DCemW+da6LP8kambM4
hvYrYTuS08+p7zlHu1r8ZuGQ0nfKfB45Ol5cu/jBfiUEqqAqCxrRlxyNC/kQeurt
JUTR9/h9XFvEMUnk4/9CIpeN+dK2oKi4KmtnhVlpROuzC0CbhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzg82/waQhHUblRDhmjeyY3A+rCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGU1MjRkNzYtZmFlNS0z
Y2UwLWJlYmYtODYyMTk0NWVjMGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACVp29F8G+1jxLdC/Z5CN+1V/mL+LsDKWunOhTcY32F6RRsr/TphKY8p
qHBRE/iXphhnVdXrDhrHywd0qXKSdSdr9z5ZlJcAKDEaJiM7IP6jSRL5QFC7ajEF
p2hnoqW5PF2vojW3zGFMnowP7RNXiWxN6c9f6fzUfBTdsgv+SqJwD964ZqLN8JYt
CgA6BtDdu4fHq31JoNI3NPsKapDFGpPlYLKfmPTTqMN0yj1i/OMA5Pk5YDt4/F0j
9FLjIZjehkj8t6sMLnOVxas1c08sbolPSNEDlIWLNGDjVygS8vvGx08SMDmlUPSM
tiTVT5xXtQQwW3io4iKIv68vjZfya6s=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:57 2025 by rpki-client