Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d949d943-7892-3285-a034-eec2956103f4.roa
File:                     d949d943-7892-3285-a034-eec2956103f4.roa (raw, json)
Hash identifier:          YJiZbxQvgWtIj6ADGxe9T5NHg7B2L2vHWaX5zjxtrms=
Subject key identifier:   2A:A5:F3:78:25:79:15:92:A5:5E:09:02:0F:F9:F7:04:AF:B7:BC:AC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA3C4BCCBE92639E5678C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d949d943-7892-3285-a034-eec2956103f4.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.26.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:3c:4b:cc:be:92:63:9e:56:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=519a26ef-776e-45fd-ac4f-0e3de705f99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:eb:05:f3:06:51:c2:05:7b:d8:aa:85:4a:
                    a9:d1:07:52:68:0d:e9:88:43:02:1d:10:4e:02:b8:
                    8a:b6:19:21:07:31:78:a1:14:81:49:a4:12:26:c8:
                    03:62:12:5b:7f:4a:13:43:0a:17:5f:8c:07:64:48:
                    7e:5a:27:76:7a:4d:42:50:0f:37:09:09:a0:74:de:
                    b8:99:23:50:0f:5a:2b:1b:ce:9b:41:f3:db:c2:b0:
                    52:9b:0e:6c:02:13:ba:1b:46:fd:af:cd:0a:7c:f4:
                    f3:3b:06:66:b1:cf:a3:a3:cf:2a:78:a4:28:f3:9d:
                    cc:67:45:09:e0:88:43:64:93:14:8b:28:03:e5:6d:
                    60:46:fd:2f:ee:9c:52:2a:a3:0d:9a:51:91:48:28:
                    40:96:a7:15:23:3e:19:2c:14:d6:05:c3:d0:86:1e:
                    d3:f3:65:a5:08:20:5a:4b:7e:6a:c3:3b:39:bc:28:
                    f2:5a:b4:5d:c7:b7:06:2e:ca:0d:5f:c4:3b:1e:df:
                    bd:e0:60:1a:91:25:d9:e0:3f:f5:66:cb:2b:93:62:
                    66:5f:ed:fc:1e:6c:a7:f2:8a:80:c7:12:28:89:c3:
                    13:c2:a0:5d:db:97:af:0a:b4:de:88:b8:92:fe:d9:
                    79:00:77:24:3a:1f:db:9a:7c:73:ee:ab:fa:88:93:
                    84:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A5:F3:78:25:79:15:92:A5:5E:09:02:0F:F9:F7:04:AF:B7:BC:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d949d943-7892-3285-a034-eec2956103f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:5e:d0:80:0d:15:60:bf:45:ee:1a:10:1f:12:6c:45:63:fc:
         55:d4:a8:73:43:56:66:b9:b3:b1:4f:17:25:21:7f:e9:6a:5d:
         ec:13:1a:c1:d8:c3:3c:7b:c6:a4:ae:57:13:a2:69:ed:1a:14:
         2a:40:ba:04:ad:e6:f6:a0:f2:36:ad:de:ea:5d:db:44:ff:3f:
         1d:eb:c6:f1:7e:ab:eb:cf:7c:c9:f2:90:60:75:79:a4:7e:cb:
         69:16:ee:e5:ea:37:fb:d1:a9:60:e7:c7:fd:2e:8a:7c:ac:5a:
         78:95:d8:99:85:01:9f:d4:57:eb:3c:02:90:86:a1:d1:00:94:
         0f:2b:39:39:e8:9f:59:a0:b1:8e:6a:13:8d:c8:ce:d2:5a:d2:
         a4:d0:45:b1:7b:0c:9f:84:54:7b:80:82:5f:9d:c0:5d:14:3c:
         4c:a7:42:10:29:3c:fd:d6:7e:cb:0f:f8:a2:f8:cc:ed:d4:19:
         2b:0c:14:7b:a1:31:8a:fd:78:68:a6:00:06:12:70:85:d0:ed:
         35:35:63:8b:34:70:96:68:61:05:5c:10:14:11:4d:12:35:c8:
         48:77:14:c1:b7:95:94:78:ef:85:0f:34:e5:0b:35:ff:ac:e0:
         8b:5a:b7:34:e0:f6:4d:ea:1f:df:c7:cb:b6:ab:81:3e:12:1b:
         2a:98:c8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:17:36 2025 by rpki-client