Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ead67949-e28e-318d-8313-24f4bcd49220.roa
File:                     ead67949-e28e-318d-8313-24f4bcd49220.roa (raw, json)
Hash identifier:          bgPJqDIn+OOKeeYyD1ZQ1g+JCabK7HgiYPi0VzKhipM=
Subject key identifier:   63:29:54:2C:5C:AF:9D:06:00:63:08:6C:8D:57:1C:7F:FD:27:CF:97
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A61F32AF58CC7E74D60525C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ead67949-e28e-318d-8313-24f4bcd49220.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     30036
IP address blocks:        173.24.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:32:af:58:cc:7e:74:d6:05:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=2ccfad37-eed5-40e9-a3a8-d2a814627598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:48:3b:ec:3c:1f:ea:e4:fe:b8:9e:22:f2:
                    a1:4f:3a:24:92:01:a2:ee:83:21:2a:af:af:90:cf:
                    34:08:bf:f5:d3:f6:5c:2e:f5:21:e0:19:4a:fa:8d:
                    77:38:0c:d2:e5:13:13:5b:97:a3:19:fe:67:92:38:
                    94:d8:7b:59:16:1e:3f:cd:f5:b5:5f:1f:f1:08:fd:
                    1b:06:12:4d:c3:c5:40:57:bd:f3:19:ff:38:de:c9:
                    eb:84:1a:39:47:5e:c9:0b:9d:43:13:62:5f:4e:e7:
                    90:a6:59:3d:ff:99:a4:c6:10:77:74:fd:ee:d8:d5:
                    69:8c:32:27:7d:a7:39:58:f8:26:62:ce:83:ad:79:
                    ff:b3:e5:d0:1a:32:f9:dc:17:91:90:61:69:8d:ea:
                    23:d2:aa:e0:83:c8:69:9e:1b:21:57:d0:d8:45:de:
                    2d:7f:c9:06:3b:34:a2:7b:85:88:19:8a:f8:11:e4:
                    92:b8:92:db:44:cd:f2:32:70:9b:66:31:53:da:4a:
                    80:85:f6:6c:fd:7e:26:1b:13:5b:c4:a7:34:96:a3:
                    b6:2b:85:88:74:d2:32:f1:0d:26:e2:a6:71:b4:f1:
                    5a:5c:09:d3:f4:07:98:a1:64:78:87:0f:43:97:df:
                    61:c5:72:26:d1:ca:45:ff:50:19:88:8d:0e:36:05:
                    20:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:29:54:2C:5C:AF:9D:06:00:63:08:6C:8D:57:1C:7F:FD:27:CF:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ead67949-e28e-318d-8313-24f4bcd49220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:07:71:7c:3b:dc:cc:d5:6b:51:71:6d:e1:36:d4:70:73:2f:
         71:60:93:1a:8b:81:57:74:19:ef:ac:95:11:d1:64:b8:7f:21:
         e3:a5:3a:75:97:71:5f:24:32:c3:a1:3a:01:46:b9:3d:72:61:
         4f:b6:b5:9c:bb:1e:36:44:6e:63:3a:19:1b:46:24:ae:5f:ce:
         95:1a:fa:4e:48:72:be:d4:5e:76:4b:8f:f2:89:6b:fe:79:aa:
         50:c4:3b:77:75:c8:b5:43:c5:0a:60:1e:21:8c:7b:c6:0e:e0:
         95:5a:89:08:30:3b:3f:20:4e:04:09:e9:d7:b9:a6:6c:6c:0f:
         37:85:ef:72:6b:8f:85:d9:0b:9a:eb:2c:6a:69:da:2c:6d:c8:
         96:66:fa:9d:49:93:38:82:e6:5f:06:dd:0b:66:a9:ce:04:62:
         89:a8:2e:ce:6f:52:b6:29:6f:38:d9:58:54:d2:56:bb:01:c4:
         8d:b4:84:1f:5a:86:99:24:e8:10:d3:1d:6f:7c:c4:24:ac:ae:
         0d:7f:8f:62:df:55:21:4a:58:a7:32:fe:7c:2a:72:30:ab:8e:
         69:51:d6:b5:e5:ab:26:f1:ae:09:19:63:f9:03:36:60:39:4f:
         a2:ec:45:6c:de:78:0f:be:4d:24:ca:e1:3c:de:3f:5f:1a:2a:
         f8:e4:2c:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzKvWMx+dNYFJcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk
MmNjZmFkMzctZWVkNS00MGU5LWEzYTgtZDJhODE0NjI3NTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD1IO+w8H+rk/rieIvKhTzokkgGi7oMhKq+v
kM80CL/10/ZcLvUh4BlK+o13OAzS5RMTW5ejGf5nkjiU2HtZFh4/zfW1Xx/xCP0b
BhJNw8VAV73zGf843snrhBo5R17JC51DE2JfTueQplk9/5mkxhB3dP3u2NVpjDIn
fac5WPgmYs6DrXn/s+XQGjL53BeRkGFpjeoj0qrgg8hpnhshV9DYRd4tf8kGOzSi
e4WIGYr4EeSSuJLbRM3yMnCbZjFT2kqAhfZs/X4mGxNbxKc0lqO2K4WIdNIy8Q0m
4qZxtPFaXAnT9AeYoWR4hw9Dl99hxXIm0cpF/1AZiI0ONgUgJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMpVCxcr50GAGMIbI1XHH/9J8+XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWFkNjc5NDktZTI4ZS0z
MThkLTgzMTMtMjRmNGJjZDQ5MjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRigMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEHcXw73MzVa1FxbeE21HBzL3FgkxqLgVd0Ge+slRHRZLh/IeOlOnWX
cV8kMsOhOgFGuT1yYU+2tZy7HjZEbmM6GRtGJK5fzpUa+k5Icr7UXnZLj/KJa/55
qlDEO3d1yLVDxQpgHiGMe8YO4JVaiQgwOz8gTgQJ6de5pmxsDzeF73Jrj4XZC5rr
LGpp2ixtyJZm+p1JkziC5l8G3Qtmqc4EYomoLs5vUrYpbzjZWFTSVrsBxI20hB9a
hpkk6BDTHW98xCSsrg1/j2LfVSFKWKcy/nwqcjCrjmlR1rXlqybxrgkZY/kDNmA5
T6LsRWzeeA++TSTK4TzeP18aKvjkLG4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:56:05 2025 by rpki-client