Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c04fd2c8-e872-38dc-b55a-8b1773dde455.roa
File:                     c04fd2c8-e872-38dc-b55a-8b1773dde455.roa (raw, json)
Hash identifier:          mpUY1Y8fXAjwpvaWqI+SqgrVOjjQu03+0e8JhzELmEY=
Subject key identifier:   25:7B:DE:38:12:83:08:F0:24:67:E0:CC:82:78:C0:0E:68:5C:73:08
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784B89517A854B5694D1C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c04fd2c8-e872-38dc-b55a-8b1773dde455.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.22.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:b8:95:17:a8:54:b5:69:4d:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=7254ad51-151b-4b26-8d7f-25248dc46c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:8a:6a:84:3a:4a:ff:a1:95:fd:46:35:a6:
                    d7:8f:98:c2:71:79:e9:e7:57:f3:e0:86:b1:85:ad:
                    1b:b5:72:a1:c9:94:33:a8:7b:18:8e:62:df:f5:4f:
                    07:5b:e1:15:a9:18:65:dc:2b:a8:8f:d6:a8:4d:3e:
                    ad:96:fe:40:80:16:61:e8:25:bb:f2:05:d6:1b:73:
                    d5:cb:bd:07:6d:a2:31:f4:a9:fd:f2:37:cb:72:a6:
                    d1:b9:71:17:2f:18:64:6e:d5:44:ee:17:78:98:10:
                    46:f7:ba:c2:79:9e:7b:a3:71:a1:b6:24:92:db:95:
                    be:21:68:a4:df:ba:3e:a8:a8:d5:63:64:d1:2c:e9:
                    71:95:7a:36:15:2e:01:91:fc:0b:05:be:a4:0b:bf:
                    9f:76:bc:19:6f:9f:9e:a5:99:14:c7:84:9c:a7:59:
                    bb:a2:55:95:27:98:5c:95:04:9e:fd:13:01:72:be:
                    84:95:6f:3a:e8:86:ae:2e:4c:fc:87:b3:f6:bb:73:
                    c2:ef:c9:81:0f:d4:e1:df:22:7b:c8:ca:a7:bd:2d:
                    00:cd:49:55:59:4c:9c:c0:3e:0e:f4:48:82:25:65:
                    a8:3f:39:83:6f:ee:a4:e2:34:06:cb:77:9b:18:0f:
                    11:10:47:72:28:59:c4:cb:ec:a8:84:81:24:76:f5:
                    e9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7B:DE:38:12:83:08:F0:24:67:E0:CC:82:78:C0:0E:68:5C:73:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c04fd2c8-e872-38dc-b55a-8b1773dde455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5c:2f:65:aa:ec:15:33:bb:bb:5a:10:91:3e:17:aa:2f:de:
         f3:cf:6c:c9:b3:b2:c7:76:1c:38:bd:ef:b2:79:28:ca:24:da:
         52:36:25:c8:50:71:62:28:87:61:79:5b:27:57:f7:ba:4b:00:
         e9:fd:5a:31:ee:37:69:67:7f:43:d5:06:7f:a3:2e:39:2e:39:
         56:c2:5f:0e:fb:37:17:57:c5:4e:64:59:99:d6:78:84:e7:07:
         d8:05:9f:2d:33:48:12:87:32:f4:02:59:e3:41:7a:7e:7b:92:
         73:f7:6a:8b:7a:3c:e4:89:47:ad:c4:d5:07:d8:31:65:15:54:
         69:45:27:98:3d:5e:57:3b:7c:c5:a8:1b:f7:d9:52:c0:59:dc:
         ef:9a:6a:46:d7:24:bf:01:b4:f5:84:a7:0f:fa:93:3d:50:f1:
         4f:41:aa:99:b1:1f:11:b5:6f:09:11:a5:f4:ca:5f:fe:28:1c:
         85:cf:21:90:92:f9:92:5c:f5:f1:30:d2:9b:f4:37:d0:0c:73:
         fc:e4:c5:13:49:2f:a7:b7:0d:7f:d9:79:99:1a:02:40:26:db:
         80:0a:e4:80:6e:4f:b3:e8:55:70:3b:e2:dc:d2:07:79:82:c0:
         3c:bc:c9:b5:be:d2:57:cd:db:c5:3a:7e:21:1c:ca:a5:ac:d8:
         c0:ff:61:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLiVF6hUtWlNHAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
NzI1NGFkNTEtMTUxYi00YjI2LThkN2YtMjUyNDhkYzQ2YzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkmKaoQ6Sv+hlf1GNabXj5jCcXnp51fz4Iax
ha0btXKhyZQzqHsYjmLf9U8HW+EVqRhl3Cuoj9aoTT6tlv5AgBZh6CW78gXWG3PV
y70HbaIx9Kn98jfLcqbRuXEXLxhkbtVE7hd4mBBG97rCeZ57o3GhtiSS25W+IWik
37o+qKjVY2TRLOlxlXo2FS4BkfwLBb6kC7+fdrwZb5+epZkUx4Scp1m7olWVJ5hc
lQSe/RMBcr6ElW866IauLkz8h7P2u3PC78mBD9Th3yJ7yMqnvS0AzUlVWUycwD4O
9EiCJWWoPzmDb+6k4jQGy3ebGA8REEdyKFnEy+yohIEkdvXpdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCV73jgSgwjwJGfgzIJ4wA5oXHMIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzA0ZmQyYzgtZTg3Mi0z
OGRjLWI1NWEtOGIxNzczZGRlNDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtcL2Wq7BUzu7taEJE+F6ov3vPPbMmzssd2HDi977J5KMok2lI2JchQ
cWIoh2F5WydX97pLAOn9WjHuN2lnf0PVBn+jLjkuOVbCXw77NxdXxU5kWZnWeITn
B9gFny0zSBKHMvQCWeNBen57knP3aot6POSJR63E1QfYMWUVVGlFJ5g9Xlc7fMWo
G/fZUsBZ3O+aakbXJL8BtPWEpw/6kz1Q8U9BqpmxHxG1bwkRpfTKX/4oHIXPIZCS
+ZJc9fEw0pv0N9AMc/zkxRNJL6e3DX/ZeZkaAkAm24AK5IBuT7PoVXA74tzSB3mC
wDy8ybW+0lfN28U6fiEcyqWs2MD/YSw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:43:13 2025 by rpki-client