Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd48ed6b-cf4f-3f79-8ac2-398d28656cd6.roa
File:                     bd48ed6b-cf4f-3f79-8ac2-398d28656cd6.roa (raw, json)
Hash identifier:          at52OT0VsFuBvMU6Y6dzLKyNHWP9HQiehZ3ZSuuVVH0=
Subject key identifier:   5A:50:56:00:F1:09:B3:1E:BD:E8:E9:7D:46:D8:29:50:E2:92:06:1E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA4437D75F49D1D908E980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd48ed6b-cf4f-3f79-8ac2-398d28656cd6.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.23.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:44:37:d7:5f:49:d1:d9:08:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=1544de3d-e08a-46e5-9348-d1557aae14e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:46:8e:c1:8f:a9:4e:9a:1b:ed:9e:d7:8b:
                    85:f6:26:34:17:b5:ec:44:c8:13:cb:b7:47:f0:b0:
                    88:1d:c3:b6:82:92:2a:32:26:54:ce:86:49:cb:31:
                    09:78:69:6d:c4:c1:15:78:85:1d:a1:0d:68:f7:ce:
                    55:a7:6a:f9:69:9d:1e:10:95:27:90:b3:5f:59:0f:
                    e7:5a:0c:de:71:90:ea:43:0f:4e:18:68:37:64:07:
                    99:7d:1e:c2:48:e6:36:51:d6:ef:19:18:55:2f:0c:
                    c9:23:f4:65:52:7e:01:b9:01:65:67:e1:ba:d8:f6:
                    ca:de:66:76:f1:7d:f4:3c:26:aa:ee:15:9f:fd:50:
                    90:07:6d:63:91:6b:83:b4:c9:fc:98:10:05:1b:b0:
                    a7:7e:af:d6:d7:df:e7:bd:52:ab:ff:0d:25:20:73:
                    c0:cd:e2:8b:5b:d1:94:ea:41:b1:2b:99:18:62:bf:
                    60:04:65:e5:04:98:9f:a0:f9:8d:7e:e1:29:f7:f4:
                    29:21:3b:90:ce:01:11:ea:dc:a0:26:7d:1f:dd:79:
                    bc:a0:58:a7:dc:8e:48:86:c0:3a:a3:06:91:a6:ef:
                    15:99:4c:bd:b3:e9:e7:a9:b9:16:29:0f:f0:66:99:
                    53:56:9c:8b:a3:0b:dd:ca:d2:48:7a:af:17:62:da:
                    80:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:50:56:00:F1:09:B3:1E:BD:E8:E9:7D:46:D8:29:50:E2:92:06:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd48ed6b-cf4f-3f79-8ac2-398d28656cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:03:c0:0d:65:a3:b2:70:55:ed:32:e0:83:1a:b8:1d:a8:6d:
         24:b3:a7:d6:bf:e9:ed:43:1a:26:50:80:0f:f8:d8:ef:78:67:
         ac:09:1a:be:23:30:19:a3:13:8c:f6:3b:16:f0:bb:70:62:ea:
         d0:1d:52:70:31:1e:38:bf:78:6b:4b:3c:19:c7:89:43:f5:01:
         80:3d:0f:d0:77:2a:72:3a:45:7b:f5:1d:7c:4d:b1:af:26:6c:
         74:ce:6a:10:23:3d:79:11:d5:f5:c9:39:e1:c4:cc:fd:eb:fc:
         5d:5d:93:14:14:8d:74:3d:d0:0c:6a:54:6f:e2:b1:d9:97:52:
         39:9b:4f:9e:77:15:48:f6:b2:8a:ae:51:a7:1a:f6:1b:4c:0e:
         01:13:e5:e1:52:45:ec:3a:03:91:b5:7a:8d:21:d4:90:3c:42:
         52:4a:28:68:b6:29:13:54:33:8d:5c:c8:38:70:6d:5a:2b:11:
         16:f1:2b:c4:0e:60:63:63:f1:d5:fd:78:d8:28:23:08:99:6d:
         98:98:b7:43:7a:b3:19:4e:d4:63:15:7d:e6:ff:19:fc:57:b6:
         94:7d:18:e5:42:6d:62:6e:98:c3:83:f5:3d:e7:a0:bf:c9:5b:
         f0:4c:18:d6:7e:31:b7:07:df:c3:9b:b0:e1:64:79:00:23:8c:
         14:70:b1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:27 2025 by rpki-client