Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e13c595b-7b88-369d-8c9a-c4209b71be98.roa
File:                     e13c595b-7b88-369d-8c9a-c4209b71be98.roa (raw, json)
Hash identifier:          c6/tSbnCQbtwbr8CdOSIGFOe+iTyislL696SUIlsmbQ=
Subject key identifier:   69:A9:BC:17:31:33:14:67:28:E2:BF:76:FA:F7:D8:D9:C9:89:23:24
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849849EF30FDBDAE2D264192940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e13c595b-7b88-369d-8c9a-c4209b71be98.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     30036
IP address blocks:        173.30.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:f3:0f:db:da:e2:d2:64:19:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=9bfe86db-d814-4dc2-b0fe-b74563a5a13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:77:33:a8:fd:de:2b:c0:01:d5:08:ca:4c:
                    c9:39:2e:b7:5b:f2:c7:34:df:0a:2b:d1:f7:6f:21:
                    73:83:c9:87:2b:03:4a:1d:e1:d7:ae:9a:c6:21:5d:
                    8c:57:ac:c8:02:6e:2e:36:01:74:9f:cb:f5:12:40:
                    ac:13:de:01:31:fb:38:e7:84:24:de:53:e5:20:b2:
                    9e:d1:c9:87:91:fe:f7:46:f2:76:1c:a7:65:d6:b2:
                    11:8a:8a:a3:ce:50:a1:74:35:3e:5a:8c:c7:e3:08:
                    bf:bb:5d:e6:b9:6a:16:83:7e:1d:a8:3c:bc:2e:be:
                    d5:e6:6b:91:61:9d:8e:4b:9b:47:e7:c4:72:2e:80:
                    76:3a:fd:dc:fd:63:cc:e9:e4:6f:68:e3:73:8f:31:
                    0b:df:8d:4b:cd:02:8f:49:62:b6:43:1c:4a:be:72:
                    b2:dd:63:fb:e3:0c:0f:f8:95:19:84:d3:2e:42:20:
                    12:fa:cd:b5:7e:45:79:6b:25:2f:af:aa:38:90:13:
                    06:57:cf:28:fd:7f:5e:60:7d:79:78:23:9f:02:7a:
                    63:f7:09:1f:4b:40:a3:4d:6b:5e:69:76:af:fd:e1:
                    95:b4:da:2c:0b:76:05:47:69:55:6d:c8:1b:58:23:
                    e0:45:a8:92:20:2d:2c:70:ff:03:f8:85:a1:d2:1a:
                    d6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A9:BC:17:31:33:14:67:28:E2:BF:76:FA:F7:D8:D9:C9:89:23:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e13c595b-7b88-369d-8c9a-c4209b71be98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:29:f5:0b:71:90:17:a9:eb:a4:38:60:66:21:fe:98:80:5c:
         63:f8:5e:0f:38:0d:74:99:f8:a2:78:31:17:d3:d6:1d:9a:90:
         38:12:9e:d6:57:37:64:b8:98:1f:c8:dc:a3:47:73:68:67:c0:
         c9:58:25:5b:f6:53:c7:56:e7:7a:24:df:55:ab:0e:6f:de:e9:
         d8:95:5e:3d:d8:99:6d:65:55:e9:f7:bf:45:9c:55:98:60:8d:
         72:b3:47:9b:85:1f:f5:93:40:a3:25:c0:e8:b2:82:0c:5e:7c:
         7e:17:15:13:f5:58:e7:89:0d:4a:9b:ea:1a:15:a6:b1:27:db:
         c8:60:23:64:30:3d:a0:23:2f:ed:96:b6:ca:9e:b6:6b:27:31:
         5e:7d:91:95:b4:08:1b:d4:f0:30:5a:11:e7:42:da:e2:06:9d:
         7b:ec:c4:c4:27:2e:72:92:5e:4f:87:91:9d:1d:d2:ee:4f:63:
         9a:db:2d:d6:03:21:7d:68:aa:a5:a4:02:02:67:ff:c9:a5:b3:
         8c:3b:d5:07:71:b7:d3:45:a0:8b:ce:56:de:97:d1:c1:5e:77:
         4a:b6:78:c1:a8:02:97:69:f6:21:93:9b:9b:8c:c8:5a:aa:14:
         94:6a:d6:66:24:7b:e0:de:32:ed:f5:b7:52:94:af:17:24:56:
         0e:e0:7e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:03:03 2025 by rpki-client