Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f51256b6-1b39-3896-943a-6ed7586f559f.roa
File:                     f51256b6-1b39-3896-943a-6ed7586f559f.roa (raw, json)
Hash identifier:          nk3Ex3HG4iOxLyfHaC/I5v+66R2hdzVSmPBcJxL1ZJQ=
Subject key identifier:   26:E5:DC:43:4A:91:3A:12:25:E0:EC:C8:6E:00:F5:8E:40:0A:71:18
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858497BB8C93D3B46410E4067D200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f51256b6-1b39-3896-943a-6ed7586f559f.roa
Signing time:             Thu 10 Apr 2025 20:30:34 +0000
ROA not before:           Thu 10 Apr 2025 20:30:34 +0000
ROA not after:            Wed 09 Jul 2025 20:30:34 +0000
asID:                     30036
IP address blocks:        173.23.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7b:b8:c9:3d:3b:46:41:0e:40:67:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 10 20:30:34 2025 GMT
            Not After : Jul  9 20:30:34 2025 GMT
        Subject: CN=d12c5d61-bc4d-43eb-bc5a-d39f52f53d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:31:be:b7:84:75:52:8d:8d:11:e6:08:20:
                    68:b7:b4:5a:ff:02:11:fe:09:6e:56:e7:9b:ca:eb:
                    aa:0a:6c:93:c3:47:3d:c1:5e:75:e5:46:99:c8:43:
                    ff:b2:b9:fb:22:7e:37:12:46:d3:8c:2a:27:34:db:
                    55:38:5d:51:fb:db:7d:a5:a7:a6:43:ea:12:45:5a:
                    f2:19:7e:c4:e3:df:4c:6f:d3:dd:6f:d5:6e:93:ab:
                    c3:41:19:60:dc:d8:1b:37:74:db:ad:b3:ca:c0:b7:
                    0a:a6:54:ff:d5:bc:8c:90:41:09:70:c1:e3:32:bf:
                    6c:dc:df:eb:f3:78:8d:90:de:37:50:d7:4a:ed:ff:
                    32:91:1f:50:fa:65:9c:29:24:a7:82:e2:32:b7:c0:
                    3c:31:c8:a0:0a:2a:29:d1:7d:ef:84:49:a8:d5:20:
                    db:b5:ad:05:fc:a0:30:47:b6:b2:80:ec:05:49:67:
                    12:a8:f1:c1:f2:2e:16:9a:3a:b1:9a:f8:7e:88:17:
                    52:4b:c1:c5:da:b1:1c:67:75:fa:68:c3:29:e8:3d:
                    e9:e1:da:8c:a2:ce:06:4e:81:09:76:2c:0f:f4:27:
                    cf:f9:00:17:14:9e:a6:9b:de:bb:b9:03:c0:97:13:
                    d3:55:a5:49:71:a0:53:80:8b:83:da:84:07:21:f8:
                    56:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E5:DC:43:4A:91:3A:12:25:E0:EC:C8:6E:00:F5:8E:40:0A:71:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f51256b6-1b39-3896-943a-6ed7586f559f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a1:b4:f7:a7:53:b7:48:3f:85:55:24:71:3a:54:fb:97:ed:
         6d:a4:38:c6:b3:2a:cb:ac:9e:d0:c2:a4:ad:bb:75:7e:09:4f:
         84:36:c3:31:39:21:4a:de:26:34:e2:cc:b1:da:9c:a1:3e:87:
         a9:3b:c7:91:4c:3d:e7:98:1b:b1:75:95:73:ed:94:f8:47:d6:
         75:ab:dd:c1:92:59:fc:bb:75:d8:79:1c:1c:4d:2d:4b:41:f3:
         9e:85:0f:d7:f5:13:96:a1:b7:4c:5e:ad:1d:85:4a:00:69:80:
         42:6e:33:f7:28:94:90:a5:8a:bf:04:72:72:62:09:13:66:e6:
         f0:ce:45:3c:38:ab:0c:08:38:ab:b7:3a:4b:8b:b1:c9:b0:27:
         1e:f2:3f:a7:9c:56:aa:95:ee:a8:80:8b:10:e8:07:21:9f:5d:
         99:0d:ad:30:63:b6:3a:6c:79:95:f3:7e:53:7c:85:66:ed:be:
         51:c9:4a:07:de:f3:33:f7:f4:13:a6:76:fe:8c:2d:40:a4:be:
         63:49:af:d1:0b:09:41:3f:1d:46:f0:ae:46:cb:63:34:7b:16:
         15:2e:08:41:48:ef:82:ec:bf:7b:61:2d:d1:60:a3:d2:e5:5e:
         b5:64:f9:f8:36:81:6f:0c:16:e5:b0:74:c3:42:8f:bc:f7:56:
         24:34:a8:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl7uMk9O0ZBDkBn0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQxMDIwMzAzNFoXDTI1MDcwOTIwMzAzNFowLzEtMCsGA1UEAxMk
ZDEyYzVkNjEtYmM0ZC00M2ViLWJjNWEtZDM5ZjUyZjUzZDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqMxvreEdVKNjRHmCCBot7Ra/wIR/gluVueb
yuuqCmyTw0c9wV515UaZyEP/srn7In43EkbTjConNNtVOF1R+9t9paemQ+oSRVry
GX7E499Mb9Pdb9Vuk6vDQRlg3NgbN3TbrbPKwLcKplT/1byMkEEJcMHjMr9s3N/r
83iNkN43UNdK7f8ykR9Q+mWcKSSnguIyt8A8McigCiop0X3vhEmo1SDbta0F/KAw
R7aygOwFSWcSqPHB8i4Wmjqxmvh+iBdSS8HF2rEcZ3X6aMMp6D3p4dqMos4GToEJ
diwP9CfP+QAXFJ6mm967uQPAlxPTVaVJcaBTgIuD2oQHIfhWZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCbl3ENKkToSJeDsyG4A9Y5ACnEYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjUxMjU2YjYtMWIzOS0z
ODk2LTk0M2EtNmVkNzU4NmY1NTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRcrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+htPenU7dIP4VVJHE6VPuX7W2kOMazKsusntDCpK27dX4JT4Q2wzE5
IUreJjTizLHanKE+h6k7x5FMPeeYG7F1lXPtlPhH1nWr3cGSWfy7ddh5HBxNLUtB
856FD9f1E5aht0xerR2FSgBpgEJuM/colJClir8EcnJiCRNm5vDORTw4qwwIOKu3
OkuLscmwJx7yP6ecVqqV7qiAixDoByGfXZkNrTBjtjpseZXzflN8hWbtvlHJSgfe
8zP39BOmdv6MLUCkvmNJr9ELCUE/HUbwrkbLYzR7FhUuCEFI74Lsv3thLdFgo9Ll
XrVk+fg2gW8MFuWwdMNCj7z3ViQ0qAs=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:34:56 2025 by rpki-client