Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8fa0d9c2-89e0-30b2-91b3-dfcc03c262e9.roa
File:                     8fa0d9c2-89e0-30b2-91b3-dfcc03c262e9.roa (raw, json)
Hash identifier:          Mz9XMChQ+KPmiQs+Ip+szgtzJlzySHpTHQFHWLoNVyc=
Subject key identifier:   3E:33:1A:47:0D:BE:A4:E9:44:30:11:86:79:8D:D9:C8:D1:A4:76:FC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A61F31CA9B1BA924CD0AAA80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8fa0d9c2-89e0-30b2-91b3-dfcc03c262e9.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     30036
IP address blocks:        173.19.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:31:ca:9b:1b:a9:24:cd:0a:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=7bd0916a-19a8-4476-91be-7945d01ede13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:49:be:54:2e:d6:5e:ef:c6:40:94:ad:bc:34:
                    10:35:b9:d5:b9:aa:38:8b:4e:4e:b2:05:5c:5e:2a:
                    1a:b7:b8:76:3b:92:04:d3:97:50:7b:90:a0:50:5a:
                    46:bf:10:cc:21:5a:69:3f:07:d1:6d:1c:42:40:b1:
                    31:83:a0:15:ee:a6:b5:35:e5:9c:9a:eb:4c:3b:18:
                    48:3e:6e:84:d1:ec:2c:6b:8b:0d:8f:d7:0d:21:9c:
                    d5:0d:74:95:57:1f:d7:69:bf:a5:a1:d0:fa:da:46:
                    fb:17:71:45:29:0d:77:d0:80:56:42:cc:08:dc:3e:
                    27:b2:b1:ad:4d:0a:f6:9d:41:31:6f:ac:2e:7f:1b:
                    75:07:c1:31:2e:3b:e5:29:a8:a0:e9:b0:40:66:da:
                    79:a6:91:13:e7:54:09:9e:0b:26:41:2e:41:21:19:
                    b3:17:d6:93:b8:8e:11:a9:b2:59:4b:29:54:f5:ce:
                    09:e5:9a:2c:f3:db:eb:30:a7:ff:57:92:f4:1f:36:
                    a2:c9:2e:af:45:4b:84:f2:04:c3:bd:b8:e8:da:96:
                    e2:09:63:bb:08:bb:ce:86:8c:e6:b6:f5:ab:e5:06:
                    a1:56:a7:da:55:cd:f0:78:2f:b7:85:a4:62:d0:b4:
                    5d:e6:02:8b:35:a9:39:7e:82:e3:17:11:7d:b7:0e:
                    6b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:33:1A:47:0D:BE:A4:E9:44:30:11:86:79:8D:D9:C8:D1:A4:76:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8fa0d9c2-89e0-30b2-91b3-dfcc03c262e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:7c:d0:f8:f0:bc:ef:ad:36:10:23:d1:01:f3:44:43:4c:11:
         13:b8:91:4f:04:86:1c:df:d2:d5:4c:9a:89:91:26:7a:ab:19:
         2d:47:67:6e:1d:e3:5b:68:db:6c:03:45:9e:cf:75:d1:8f:77:
         4f:8a:82:20:8d:98:70:5e:94:11:73:1c:cb:88:c0:18:08:48:
         35:eb:db:23:27:d1:92:48:6e:7d:15:43:21:57:02:5d:c7:9d:
         29:43:9f:ea:eb:6d:7e:80:a6:1b:a5:2e:3c:20:c0:13:fd:d1:
         d1:00:52:15:90:49:fd:d4:fd:97:a6:4e:50:7f:ab:b6:05:e5:
         11:b8:46:68:ed:d9:b3:0d:d1:e3:6b:95:06:a2:8a:8d:00:d3:
         94:72:b6:1f:95:ac:d4:5d:08:dc:fa:d9:c9:3a:7b:6b:cc:89:
         2c:55:8a:1e:40:44:d8:59:f4:88:e9:ad:5b:f0:4e:a2:af:ee:
         65:da:5c:a9:53:a9:c2:ce:79:a4:1a:b0:18:fb:91:8b:7a:50:
         9c:04:1c:38:21:5e:29:56:d5:85:62:1e:50:9b:9e:5e:de:51:
         bd:8b:77:41:35:0a:e2:c9:ca:28:d4:a1:b0:33:ab:83:a9:68:
         f1:3a:ce:4b:d6:1a:70:3f:7f:b4:9f:60:3c:e8:eb:a8:f4:32:
         91:65:2e:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzHKmxupJM0KqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk
N2JkMDkxNmEtMTlhOC00NDc2LTkxYmUtNzk0NWQwMWVkZTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Um+VC7WXu/GQJStvDQQNbnVuao4i05OsgVc
Xioat7h2O5IE05dQe5CgUFpGvxDMIVppPwfRbRxCQLExg6AV7qa1NeWcmutMOxhI
Pm6E0ewsa4sNj9cNIZzVDXSVVx/Xab+lodD62kb7F3FFKQ130IBWQswI3D4nsrGt
TQr2nUExb6wufxt1B8ExLjvlKaig6bBAZtp5ppET51QJngsmQS5BIRmzF9aTuI4R
qbJZSylU9c4J5Zos89vrMKf/V5L0HzaiyS6vRUuE8gTDvbjo2pbiCWO7CLvOhozm
tvWr5QahVqfaVc3weC+3haRi0LRd5gKLNak5foLjFxF9tw5r9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD4zGkcNvqTpRDARhnmN2cjRpHb8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGZhMGQ5YzItODllMC0z
MGIyLTkxYjMtZGZjYzAzYzI2MmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC180PjwvO+tNhAj0QHzRENMERO4kU8Ehhzf0tVMmomRJnqrGS1HZ24d
41to22wDRZ7PddGPd0+KgiCNmHBelBFzHMuIwBgISDXr2yMn0ZJIbn0VQyFXAl3H
nSlDn+rrbX6AphulLjwgwBP90dEAUhWQSf3U/ZemTlB/q7YF5RG4Rmjt2bMN0eNr
lQaiio0A05Ryth+VrNRdCNz62ck6e2vMiSxVih5ARNhZ9IjprVvwTqKv7mXaXKlT
qcLOeaQasBj7kYt6UJwEHDghXilW1YViHlCbnl7eUb2Ld0E1CuLJyijUobAzq4Op
aPE6zkvWGnA/f7SfYDzo66j0MpFlLqs=
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:21:44 2025 by rpki-client