Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d533cb52-1ba4-3b30-b946-4ed3961687be.roa
File:                     d533cb52-1ba4-3b30-b946-4ed3961687be.roa (raw, json)
Hash identifier:          iALE/a6pp7qIs8kO5oD62AG9BKJOnwdkTXGmbcaSxLY=
Subject key identifier:   29:B4:C2:A5:7E:4C:29:D2:91:F4:A5:CA:D9:C7:50:6B:11:93:00:76
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4B9FF5B3F330ABF6DEF1700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d533cb52-1ba4-3b30-b946-4ed3961687be.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.26.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:b9:ff:5b:3f:33:0a:bf:6d:ef:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=717bad9c-a850-4b7a-92b3-7b09972503fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:e2:99:cc:6f:b9:69:d5:94:dc:bb:4e:36:
                    31:6c:46:bd:01:fe:19:30:17:11:4d:9d:99:13:4d:
                    f9:83:94:e5:06:9b:3a:9c:e4:13:36:56:ab:6f:0f:
                    f7:4c:c7:0d:7a:32:f0:32:85:57:2d:a5:96:f9:08:
                    e0:a5:d2:a2:b1:ed:6e:79:da:ea:0a:1a:cc:e0:33:
                    60:45:97:5c:fa:d7:55:ff:31:4e:89:8f:b0:a7:29:
                    57:76:4b:49:df:a5:15:9c:34:93:a0:c2:a6:76:d2:
                    67:8f:d0:df:8a:e9:1f:e6:4e:e0:d4:5b:d5:65:5c:
                    55:c4:29:c5:f8:b9:5d:b5:5f:cc:7d:3a:f4:6d:6f:
                    fa:24:0f:2f:f6:e6:a5:26:ff:41:7e:16:77:f0:64:
                    66:28:ad:39:b1:f6:64:79:1c:f2:f1:cc:0c:dd:3c:
                    32:50:80:a1:33:ff:0e:75:14:08:64:f3:2b:a6:e0:
                    52:d5:07:1e:e5:e3:bf:77:e7:de:53:50:14:d7:d0:
                    ce:1c:15:6f:66:af:98:f0:3e:5d:42:79:b7:ba:42:
                    b1:10:e4:42:4d:ec:6a:5a:70:36:17:2c:ea:5f:6b:
                    cb:57:63:f7:18:98:0c:b0:ce:4d:00:f3:e6:79:56:
                    bb:61:c0:db:19:69:e6:f1:30:82:c7:80:7b:52:76:
                    31:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B4:C2:A5:7E:4C:29:D2:91:F4:A5:CA:D9:C7:50:6B:11:93:00:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d533cb52-1ba4-3b30-b946-4ed3961687be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d1:50:05:88:7b:79:1d:63:0e:52:6b:df:a9:70:9a:15:06:
         36:ba:9a:26:47:9f:82:03:16:6f:83:eb:05:8b:ff:32:79:99:
         31:b5:ff:d0:24:ca:4c:4a:d6:5c:8d:f6:50:02:41:b3:25:41:
         b9:07:a5:0a:b8:b7:83:d6:67:98:12:03:23:d1:5a:71:ed:86:
         11:13:e8:04:30:d2:01:34:4f:d1:45:cb:f0:9b:20:ab:e1:8b:
         89:86:82:48:3d:43:7e:3f:22:2b:97:a1:73:a3:5b:f4:9b:06:
         7f:ae:b3:34:94:ee:d1:df:ab:2b:a7:b5:a4:83:bd:7b:39:d0:
         9d:69:77:44:0b:c1:93:e6:b6:cb:1c:84:48:d2:67:43:3a:40:
         f6:31:7a:9d:35:4b:76:83:74:06:13:f6:1b:ce:1e:06:82:28:
         b4:3a:25:32:c6:70:7d:44:ca:52:40:eb:a8:09:a0:32:14:c3:
         ce:a7:c2:be:a4:c5:9d:c1:d9:f7:40:1f:99:73:3e:bd:31:2b:
         24:be:99:4d:42:7a:51:db:a9:03:28:24:cf:e4:1a:cc:9e:24:
         81:39:d4:4b:0e:06:31:d6:18:70:15:5c:46:40:b0:40:83:25:
         90:41:8c:e0:2d:38:1e:65:54:cb:5f:9a:f0:a2:1d:6a:79:f8:
         59:2a:ba:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuf9bPzMKv23vFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NzE3YmFkOWMtYTg1MC00YjdhLTkyYjMtN2IwOTk3MjUwM2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyvimcxvuWnVlNy7TjYxbEa9Af4ZMBcRTZ2Z
E035g5TlBps6nOQTNlarbw/3TMcNejLwMoVXLaWW+QjgpdKise1uedrqChrM4DNg
RZdc+tdV/zFOiY+wpylXdktJ36UVnDSToMKmdtJnj9Dfiukf5k7g1FvVZVxVxCnF
+LldtV/MfTr0bW/6JA8v9ualJv9BfhZ38GRmKK05sfZkeRzy8cwM3TwyUIChM/8O
dRQIZPMrpuBS1Qce5eO/d+feU1AU19DOHBVvZq+Y8D5dQnm3ukKxEORCTexqWnA2
FyzqX2vLV2P3GJgMsM5NAPPmeVa7YcDbGWnm8TCCx4B7UnYxUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCm0wqV+TCnSkfSlytnHUGsRkwB2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDUzM2NiNTItMWJhNC0z
YjMwLWI5NDYtNGVkMzk2MTY4N2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRrQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXRUAWIe3kdYw5Sa9+pcJoVBja6miZHn4IDFm+D6wWL/zJ5mTG1/9Ak
ykxK1lyN9lACQbMlQbkHpQq4t4PWZ5gSAyPRWnHthhET6AQw0gE0T9FFy/CbIKvh
i4mGgkg9Q34/IiuXoXOjW/SbBn+uszSU7tHfqyuntaSDvXs50J1pd0QLwZPmtssc
hEjSZ0M6QPYxep01S3aDdAYT9hvOHgaCKLQ6JTLGcH1EylJA66gJoDIUw86nwr6k
xZ3B2fdAH5lzPr0xKyS+mU1CelHbqQMoJM/kGsyeJIE51EsOBjHWGHAVXEZAsECD
JZBBjOAtOB5lVMtfmvCiHWp5+Fkquik=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:27:06 2025 by rpki-client