Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d093b16d-711e-3915-b953-540cf2cb267c.roa
File:                     d093b16d-711e-3915-b953-540cf2cb267c.roa (raw, json)
Hash identifier:          zLxT49n3U3e4ziINzkiRDS+dSdtY2QEp4sx0chIkBkY=
Subject key identifier:   45:A7:83:8E:D4:03:6A:F8:6B:3C:96:26:06:F2:8C:DC:0E:00:4F:47
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849765015E291876AB022BF2080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d093b16d-711e-3915-b953-540cf2cb267c.roa
Signing time:             Tue 08 Apr 2025 22:00:34 +0000
ROA not before:           Tue 08 Apr 2025 22:00:34 +0000
ROA not after:            Mon 07 Jul 2025 22:00:34 +0000
asID:                     30036
IP address blocks:        173.25.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:50:15:e2:91:87:6a:b0:22:bf:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr  8 22:00:34 2025 GMT
            Not After : Jul  7 22:00:34 2025 GMT
        Subject: CN=b425d516-703a-4625-947f-73cc1ab3d503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:e6:fd:4d:e1:54:a9:92:2d:fb:22:62:fc:
                    d8:65:cf:62:56:19:00:0c:c4:48:91:5a:a2:a7:30:
                    1c:57:e8:71:ee:ab:d8:4a:44:88:32:98:52:14:d6:
                    2b:e6:c0:e0:4e:16:00:59:e0:6c:a2:8f:e4:f1:b4:
                    1d:f3:91:e0:21:17:08:38:42:33:82:ab:e7:1a:22:
                    6a:53:87:f5:22:df:c4:e9:cc:70:45:b6:04:26:4f:
                    77:ad:cd:2e:f7:f6:25:e1:1a:fc:5d:82:36:fc:da:
                    e5:d9:90:07:93:2e:a0:a3:79:05:1c:1f:57:eb:8e:
                    24:64:62:a2:79:70:8f:d1:13:fd:c6:36:cd:cd:a3:
                    88:cf:b1:8c:81:86:6f:01:af:52:3c:1f:d1:67:ed:
                    b3:ec:3e:eb:ce:23:76:e5:95:99:cb:d7:ef:a8:c8:
                    88:58:1c:1b:cc:73:1f:96:0e:fe:87:59:e2:73:09:
                    cd:fc:2a:90:ad:9f:4e:8d:92:76:5e:4d:85:63:09:
                    dd:5c:96:78:ed:d1:c6:c5:33:44:af:27:c3:f1:07:
                    e1:52:0d:a3:6c:7b:7e:43:f8:c9:05:ad:82:90:16:
                    7b:e8:c8:d8:04:5f:70:26:df:be:97:a2:80:97:70:
                    a0:cc:02:a8:03:be:49:16:54:be:2b:63:f8:1d:58:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A7:83:8E:D4:03:6A:F8:6B:3C:96:26:06:F2:8C:DC:0E:00:4F:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d093b16d-711e-3915-b953-540cf2cb267c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b5:3b:01:a5:4d:43:4e:04:55:f0:15:ff:cc:1e:9d:0b:83:
         6f:1a:8b:26:88:c1:3f:dc:17:da:40:de:48:79:c8:ab:aa:7c:
         9a:73:a3:59:3e:c1:b9:57:fd:9a:84:74:d1:50:c3:fc:4c:f4:
         3a:29:9c:cd:f8:10:bd:8b:da:a4:72:4d:26:22:a5:a6:99:7f:
         d6:0f:df:1a:d1:17:0c:7d:40:d2:7f:56:dd:09:bc:61:f9:62:
         ee:be:de:1d:10:9b:e8:88:5b:6a:7d:25:39:9a:4c:23:f5:86:
         dd:83:d2:cb:99:88:f5:72:2a:c2:3f:be:4f:44:a1:4f:61:72:
         75:d9:04:f3:d5:52:08:3a:67:b9:31:b0:3b:5b:fa:36:88:98:
         d3:b5:2d:9d:d8:ed:98:03:23:2b:c9:85:e7:09:78:81:a7:b7:
         95:ba:5c:be:89:4b:47:b8:3e:da:99:34:a2:47:19:68:6d:7a:
         7d:69:a3:f2:fb:d2:a4:5d:ad:9f:a8:57:a1:8c:f3:04:53:45:
         2b:31:6b:35:8a:25:28:34:47:10:a5:df:8a:1f:95:a7:62:6f:
         f0:68:c5:30:15:2b:37:5b:33:22:f1:2e:04:39:4a:c5:0d:15:
         b6:3f:63:49:cd:4d:e9:3e:f9:24:d7:87:4e:ba:4e:eb:df:e0:
         23:b9:33:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:57:18 2025 by rpki-client