Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0bcde74-9c0f-3290-971f-4c21fdbcb47e.roa
File:                     b0bcde74-9c0f-3290-971f-4c21fdbcb47e.roa (raw, json)
Hash identifier:          X4Hb7ySSV/+bwCIiseKoxbCWJz1xyDJt3Bf1GduZrag=
Subject key identifier:   3C:9A:4F:83:91:E6:06:07:AF:4A:87:80:8D:4C:19:78:E5:69:54:23
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA4544ADE2EECC0F8A9E64
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0bcde74-9c0f-3290-971f-4c21fdbcb47e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.26.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:45:44:ad:e2:ee:cc:0f:8a:9e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=746dce3f-a600-41c1-b014-9b8472095bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:81:5b:e4:78:d2:9a:0d:5c:06:eb:35:c4:
                    7d:2c:a8:bc:0e:cb:e6:bb:65:6f:d2:c9:b8:39:f2:
                    69:8b:d7:98:bb:32:c6:5d:15:ca:3c:2c:1b:42:cf:
                    25:48:c8:fd:27:08:e5:49:14:65:70:54:25:53:f9:
                    67:22:5d:e9:d0:be:83:67:5f:73:33:7d:2c:2e:e9:
                    ae:97:44:0a:59:0f:35:e3:8d:f2:71:18:31:f7:87:
                    b9:2c:08:71:d7:49:d8:3c:6e:19:10:8c:c6:fc:05:
                    82:d9:98:f3:c2:fd:1c:66:78:d8:04:05:d5:2b:8e:
                    91:a1:70:e0:bb:89:46:1e:9b:4e:7e:7a:3c:65:c8:
                    3c:b1:c4:bd:e2:a3:b8:9d:98:f1:47:12:b9:69:39:
                    53:79:94:ce:cb:e0:00:e2:56:d2:16:7a:63:ad:ce:
                    9e:23:dc:76:08:bf:4b:ad:65:81:b9:cf:26:bd:ca:
                    21:0c:0b:57:ba:da:66:04:03:08:0c:29:cd:e3:b6:
                    7a:95:f4:71:fc:1c:74:3d:bb:76:25:51:27:80:39:
                    b4:92:39:67:7c:97:d4:f6:4f:0d:55:62:da:db:2e:
                    e7:3d:09:cb:45:a1:20:df:45:80:d1:2f:e6:03:d9:
                    2a:d4:cb:f0:7b:e0:3a:03:47:d2:42:d1:dd:9e:7b:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9A:4F:83:91:E6:06:07:AF:4A:87:80:8D:4C:19:78:E5:69:54:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0bcde74-9c0f-3290-971f-4c21fdbcb47e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:69:63:78:95:a4:99:fb:d0:6e:5d:ec:4f:d7:08:50:e5:73:
         6b:52:98:f4:cd:2d:40:f6:c5:37:7a:14:0f:c9:57:02:0d:87:
         36:1f:9f:40:90:ee:2b:a5:80:fe:7c:7b:ed:4f:92:97:d8:7a:
         da:5f:3e:eb:47:77:d3:83:fb:0b:a8:7a:2b:6a:b3:a0:c1:6e:
         b2:40:84:af:f6:5c:8b:98:f4:0b:ba:fc:d8:53:a8:23:a1:bd:
         04:53:72:76:a7:30:a1:f8:80:da:26:c7:8b:e8:96:ef:b9:96:
         a4:0c:09:95:de:df:3b:e4:c8:da:1d:e0:09:38:c4:54:c4:b7:
         30:54:e5:1f:ee:fe:98:9f:ab:4d:31:93:d4:70:88:f6:91:96:
         23:26:c8:4d:16:79:27:6b:ed:c9:5f:60:80:84:fb:b0:ca:09:
         ff:da:76:fb:3d:c6:eb:98:ea:0c:0c:79:a4:c4:34:39:07:0b:
         fd:0c:50:bd:38:84:a3:47:d8:50:41:e7:ce:e9:a5:15:8a:bb:
         bc:02:4f:23:54:70:3b:52:d3:c7:72:11:a1:b3:4a:e7:ea:0b:
         5e:35:fc:20:fd:23:ea:97:4f:66:17:30:37:5d:a3:c3:a0:73:
         cc:8a:72:b7:80:58:b8:4d:fb:f5:41:76:39:61:83:b0:c9:b0:
         41:ec:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:00:36 2025 by rpki-client