Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97978250-1bd4-3852-9992-24ba25c2e9b8.roa
File:                     97978250-1bd4-3852-9992-24ba25c2e9b8.roa (raw, json)
Hash identifier:          nfAhksVU2n/im52qXCGAPoFJrTmrYgD+XZMwtYfOaOM=
Subject key identifier:   4A:C8:40:37:FE:B2:47:DC:88:DF:D5:DB:98:13:67:E3:F1:87:43:BE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CD9F10F63985AA6970C1C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97978250-1bd4-3852-9992-24ba25c2e9b8.roa
Signing time:             Thu 24 Apr 2025 11:53:16 +0000
ROA not before:           Thu 24 Apr 2025 11:53:16 +0000
ROA not after:            Wed 23 Jul 2025 11:53:16 +0000
asID:                     19905
IP address blocks:        173.19.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:cd:9f:10:f6:39:85:aa:69:70:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:53:16 2025 GMT
            Not After : Jul 23 11:53:16 2025 GMT
        Subject: CN=c088e025-9be5-4f53-92cd-13c059cf416f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d5:4f:24:4c:7a:0c:d8:47:e8:96:97:a6:a5:
                    f9:78:6e:c3:8e:d2:1e:1e:4c:c1:17:c5:20:3d:55:
                    fa:6a:90:26:e9:6b:82:d1:91:f0:7d:af:46:0a:0f:
                    01:cc:9d:a3:a3:ca:1f:b0:4b:bc:cf:d9:74:ed:99:
                    57:a7:9f:12:13:82:ec:18:a0:b9:ff:b1:55:93:f1:
                    7a:de:5e:ed:ec:35:f4:1d:05:06:63:ac:71:36:68:
                    06:f4:59:78:ea:ac:cf:79:11:c8:f1:8a:b0:2d:3a:
                    d7:da:38:b3:8c:76:20:9b:6e:d2:8a:39:61:9d:d6:
                    33:bf:ba:2b:f4:16:bc:8b:52:6a:86:eb:4b:0e:f2:
                    c7:da:fd:24:f0:42:11:67:f0:6a:ab:be:11:74:58:
                    5e:40:4e:17:b1:d3:db:67:6e:cd:45:85:c9:b9:54:
                    7e:80:69:65:08:a0:bf:bb:a3:f3:22:3e:09:8a:31:
                    6c:6e:2e:01:75:4e:0e:78:4b:4c:b2:29:5a:23:82:
                    4b:57:7e:da:18:30:c0:ee:3d:26:d5:fd:d3:0b:57:
                    83:d1:7c:b8:db:ce:7f:3e:37:95:aa:ca:68:45:26:
                    2a:18:c9:98:00:6e:12:66:d3:b2:18:19:d3:81:c4:
                    68:a2:90:86:90:cf:28:be:1e:f6:4c:89:2f:99:e2:
                    e0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C8:40:37:FE:B2:47:DC:88:DF:D5:DB:98:13:67:E3:F1:87:43:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97978250-1bd4-3852-9992-24ba25c2e9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:13:c7:0c:ab:32:02:db:cd:25:6f:69:1b:7c:7d:f3:9d:d8:
         83:3e:36:bd:ec:de:58:b2:45:5f:9f:f1:53:2b:64:08:42:fc:
         86:9a:c1:59:e4:82:77:03:b8:e6:53:53:79:e9:d7:d2:63:9a:
         42:be:4d:75:d7:7d:84:30:04:94:45:ac:33:d0:6d:99:61:67:
         18:86:01:35:4d:6b:64:2e:ed:5a:f0:37:aa:bb:4c:57:b0:78:
         47:18:93:72:e1:fc:e6:55:b7:e2:15:01:9a:a7:21:87:db:fe:
         5c:64:bc:48:f0:45:b4:2b:5e:de:ee:27:ac:2a:69:3a:42:e7:
         3f:c7:ea:0c:28:33:43:ba:fd:14:ec:a5:f3:c9:4e:69:77:88:
         c7:18:68:d4:5f:a3:a1:2c:72:fd:79:3f:a7:af:c8:5d:7b:33:
         56:31:52:28:1d:c3:a7:81:08:ff:36:45:64:a2:59:52:d6:fe:
         60:2c:b2:56:0d:9a:27:b8:3d:36:9c:59:7c:41:b7:f6:ff:33:
         a1:24:e9:bb:07:26:5b:b6:b0:84:d3:8f:6a:d1:b3:54:4d:24:
         63:0e:57:96:f5:10:2a:ea:c6:0a:81:00:fd:df:b2:5f:87:c3:
         7c:17:42:33:9f:a4:00:6f:22:93:d1:b3:75:4b:58:e8:fe:88:
         1c:7d:e1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:45 2025 by rpki-client