Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f62a57a3-c75f-38c3-a452-4d9987b634ef.roa
File:                     f62a57a3-c75f-38c3-a452-4d9987b634ef.roa (raw, json)
Hash identifier:          TELLVvGV+8Lwab8DGj6iHS21SYgyaOr8yAaNBe/UedA=
Subject key identifier:   F8:A9:D7:6A:EB:EC:1A:59:57:B9:F2:7F:66:DC:67:40:76:BC:B4:90
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849D9C4F89AC60D3838D4B329C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f62a57a3-c75f-38c3-a452-4d9987b634ef.roa
Signing time:             Wed 14 May 2025 13:01:03 +0000
ROA not before:           Wed 14 May 2025 13:01:03 +0000
ROA not after:            Tue 12 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.28.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d9:c4:f8:9a:c6:0d:38:38:d4:b3:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 14 13:01:03 2025 GMT
            Not After : Aug 12 13:01:03 2025 GMT
        Subject: CN=1577487b-e54d-43d7-8839-d91f6f912695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:14:ab:9b:c1:fb:fc:8c:68:22:87:0b:13:e9:
                    ca:fe:97:8c:a1:2e:f1:a6:2b:24:74:47:93:57:0d:
                    8c:ac:80:55:21:2f:51:c1:1d:07:fc:06:0d:8f:e6:
                    35:b3:98:eb:8a:98:bf:51:de:fe:d7:2f:1b:7e:23:
                    29:10:ca:58:bb:78:72:95:a0:70:f4:82:e7:03:30:
                    5b:fd:76:59:9f:66:6e:75:a1:c6:a3:b6:15:17:2d:
                    40:94:10:43:b7:94:e0:55:5b:f6:34:77:ac:4a:4e:
                    d8:76:83:d6:7c:4c:1f:75:96:82:cf:97:d6:ca:71:
                    46:dc:e4:d0:56:fc:65:d2:b2:4d:46:e9:00:22:e1:
                    49:c1:6a:99:96:f9:3c:34:a1:d6:df:61:6c:e9:f7:
                    fa:f2:00:af:41:35:67:66:30:f7:c6:98:ac:a0:f4:
                    ee:ad:87:7b:33:8f:dd:33:91:37:2e:1a:d2:d7:b9:
                    6f:06:d8:c6:b6:b3:f5:62:85:1a:b5:d3:a4:32:ee:
                    bb:65:45:d4:61:eb:9e:3e:aa:62:3f:b7:29:bb:29:
                    16:26:94:37:43:c6:41:eb:ef:41:e4:41:d7:ab:ba:
                    a2:82:c7:18:7c:23:74:be:c5:74:86:e1:36:28:67:
                    45:36:d1:67:f7:6b:41:6b:13:d9:d8:d5:64:a4:29:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A9:D7:6A:EB:EC:1A:59:57:B9:F2:7F:66:DC:67:40:76:BC:B4:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f62a57a3-c75f-38c3-a452-4d9987b634ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d1:33:d2:41:9b:48:a5:8d:31:19:95:0e:ac:ca:c5:05:8c:
         bc:41:57:cc:30:47:15:ea:3c:83:4c:df:fe:2d:5a:08:40:89:
         2d:a8:79:46:29:38:ad:f9:41:9e:a2:17:81:1b:d7:d5:00:50:
         18:0a:82:4c:16:fe:fe:47:f8:b8:96:c6:9e:05:e4:86:7b:41:
         83:af:94:24:38:8e:5c:a3:3f:3e:19:98:8f:75:65:09:e4:7c:
         3f:71:25:b5:7d:b0:22:50:d0:d7:22:ff:f6:f8:be:f6:cb:2b:
         5d:8d:87:15:22:87:e9:ee:5e:c6:4b:ee:1f:be:ef:ef:80:30:
         87:c7:0b:dc:1d:32:b9:3c:5e:fc:14:10:36:8e:f6:38:71:bc:
         e3:28:52:2f:aa:f1:0c:d0:42:b6:27:e3:ec:9d:13:a4:aa:5e:
         a4:1e:6d:35:00:4d:61:7b:0c:b3:57:46:11:09:49:7d:37:57:
         6f:91:77:70:b7:75:7b:71:52:0b:f7:51:48:eb:af:83:9a:24:
         a0:ad:35:dc:fe:fc:a8:39:b7:61:15:03:4b:63:d8:1f:9b:ac:
         a4:9f:a3:23:ef:92:f5:bf:0f:f6:82:20:0e:a9:29:1b:a4:d7:
         bc:f9:ce:b7:be:a8:ea:1d:cd:0c:3a:96:6b:fb:f1:03:90:7b:
         b2:18:bf:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZxPiaxg04ONSzKcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDUxNDEzMDEwM1oXDTI1MDgxMjEzMDEwM1owLzEtMCsGA1UEAxMk
MTU3NzQ4N2ItZTU0ZC00M2Q3LTg4MzktZDkxZjZmOTEyNjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxSrm8H7/IxoIocLE+nK/peMoS7xpiskdEeT
Vw2MrIBVIS9RwR0H/AYNj+Y1s5jripi/Ud7+1y8bfiMpEMpYu3hylaBw9ILnAzBb
/XZZn2ZudaHGo7YVFy1AlBBDt5TgVVv2NHesSk7YdoPWfEwfdZaCz5fWynFG3OTQ
Vvxl0rJNRukAIuFJwWqZlvk8NKHW32Fs6ff68gCvQTVnZjD3xpisoPTurYd7M4/d
M5E3LhrS17lvBtjGtrP1YoUatdOkMu67ZUXUYeuePqpiP7cpuykWJpQ3Q8ZB6+9B
5EHXq7qigscYfCN0vsV0huE2KGdFNtFn92tBaxPZ2NVkpCl0pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPip12rr7BpZV7nyf2bcZ0B2vLSQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjYyYTU3YTMtYzc1Zi0z
OGMzLWE0NTItNGQ5OTg3YjYzNGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjRM9JBm0iljTEZlQ6sysUFjLxBV8wwRxXqPINM3/4tWghAiS2oeUYp
OK35QZ6iF4Eb19UAUBgKgkwW/v5H+LiWxp4F5IZ7QYOvlCQ4jlyjPz4ZmI91ZQnk
fD9xJbV9sCJQ0Nci//b4vvbLK12NhxUih+nuXsZL7h++7++AMIfHC9wdMrk8XvwU
EDaO9jhxvOMoUi+q8QzQQrYn4+ydE6SqXqQebTUATWF7DLNXRhEJSX03V2+Rd3C3
dXtxUgv3UUjrr4OaJKCtNdz+/Kg5t2EVA0tj2B+brKSfoyPvkvW/D/aCIA6pKRuk
17z5zre+qOodzQw6lmv78QOQe7IYv5Y=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:58:15 2025 by rpki-client