Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca3c21fe-f379-3e41-9840-7a375db08dd2.roa
File:                     ca3c21fe-f379-3e41-9840-7a375db08dd2.roa (raw, json)
Hash identifier:          RjsWd9INvgzZzPQp9Zu4xWr80jHr0oHaAJ6Xwar+37s=
Subject key identifier:   6C:0A:3C:C8:40:64:DC:9D:6F:69:D8:49:AF:00:E4:87:A8:26:DC:EC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784A98FF6CAFB5D4577A300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca3c21fe-f379-3e41-9840-7a375db08dd2.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.27.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:a9:8f:f6:ca:fb:5d:45:77:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=570588d5-8b28-42fc-8810-64b84e3b2da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:52:30:50:be:fd:8d:71:79:c2:51:b6:41:70:
                    e7:a7:8a:d8:b8:2d:d1:9e:49:a9:bc:7c:3f:5f:68:
                    08:e3:a8:65:0c:2c:cb:66:e8:4e:5a:7d:28:22:0a:
                    28:76:bb:dc:50:a0:56:1c:3b:82:0e:ac:55:68:41:
                    d8:2f:76:55:08:a9:f5:0f:93:8a:ba:11:5b:f3:f3:
                    6c:c3:2b:11:6b:fd:f1:72:66:c2:e9:af:d2:3a:90:
                    11:c3:6e:2c:1b:a1:a4:01:ae:90:eb:e5:10:dd:6e:
                    fa:4c:4f:a4:d5:9c:25:04:a0:0f:4f:3f:e7:06:00:
                    c3:b7:7c:fc:b5:73:6c:64:fc:03:d7:ff:7d:64:57:
                    58:a2:36:83:fb:66:12:0d:b1:df:c6:59:2c:e5:0f:
                    6a:40:7d:2e:8d:95:c9:ad:b1:65:47:15:5f:c0:e2:
                    08:d9:31:2b:71:b3:43:a3:ce:31:fb:bc:36:e9:53:
                    a9:ba:10:f6:2d:f5:71:00:af:55:64:5f:78:fd:5f:
                    b1:81:38:c5:ab:86:c1:3b:4e:54:49:93:6d:38:3d:
                    0b:8a:e4:b1:de:f7:ab:13:10:af:8e:99:08:e1:d5:
                    26:18:92:9a:00:4a:f1:7d:dc:83:04:89:b2:58:60:
                    ad:a2:34:f2:b1:25:42:d4:3a:78:ad:9f:08:27:37:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0A:3C:C8:40:64:DC:9D:6F:69:D8:49:AF:00:E4:87:A8:26:DC:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca3c21fe-f379-3e41-9840-7a375db08dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:cb:99:55:6f:f6:20:c0:67:91:0f:be:7f:d6:c9:61:0c:cc:
         32:0a:06:6a:00:f7:da:45:4d:e5:79:c8:ad:ac:84:c0:3c:da:
         25:c9:f2:fa:25:d8:6a:f0:76:92:3b:08:78:94:07:2f:56:f9:
         f5:08:14:4f:e6:60:0b:33:c4:55:90:3a:24:ff:71:dd:60:ee:
         23:c6:38:6d:52:d1:05:07:96:9c:b2:c3:06:d9:76:9a:a7:0f:
         9f:99:69:0a:27:a0:a6:22:d7:ba:ef:74:dc:29:4d:70:ed:d2:
         4c:81:6e:a2:c4:24:33:cd:0e:6d:5e:27:57:98:b4:d1:d9:28:
         96:f5:b9:4e:86:d3:e5:91:db:32:ee:9c:7b:68:cb:f2:16:a2:
         94:da:72:ab:ba:cf:fc:c5:9b:1d:84:a8:fc:9e:22:c1:35:31:
         69:1a:fb:97:ea:40:a3:89:f0:b7:b0:a1:e7:b5:47:70:12:2d:
         5f:f3:85:a8:83:87:92:a6:d1:fd:8c:76:bd:fb:ae:6f:a1:42:
         27:1c:0d:ba:fd:65:1b:41:66:ff:ff:1b:89:b5:67:b3:12:a4:
         6f:1f:f0:a1:65:89:92:ff:d7:39:39:98:0b:eb:6f:4c:59:b7:
         aa:60:96:16:dc:fa:de:73:61:76:46:e9:b8:25:d8:8b:8b:85:
         b3:95:22:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:13 2025 by rpki-client