Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc7f0507-7a62-3182-beda-806aa55f9f20.roa
File:                     fc7f0507-7a62-3182-beda-806aa55f9f20.roa (raw, json)
Hash identifier:          s1qYxuMyewOmiQt23N2GfbaVqNZTPPdxJlr0nEQRcu4=
Subject key identifier:   64:F4:DD:CB:EA:DC:BA:71:92:0A:40:09:DC:C6:06:63:F7:F9:32:84
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF4E161543660D1ED83480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc7f0507-7a62-3182-beda-806aa55f9f20.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.17.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:4e:16:15:43:66:0d:1e:d8:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=cb3bc451-d1fa-49f9-9f0c-1edf94d189a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a9:e4:31:b7:1d:8f:8f:18:63:23:b4:9b:a6:
                    aa:46:70:85:f8:3c:63:3d:e6:13:6f:30:ba:a4:c4:
                    55:6d:c8:2b:92:ba:25:96:9d:d1:04:b8:51:92:eb:
                    96:61:38:4f:05:6a:e0:72:13:d8:16:d2:ca:d9:bc:
                    b0:94:93:bc:49:b4:ed:6e:da:e9:66:28:8c:c5:1d:
                    fa:c6:02:50:2e:60:78:2a:95:3c:7b:da:b9:a0:a3:
                    f1:e9:78:49:e7:39:a8:e7:a6:6b:d3:b9:2d:fc:87:
                    75:99:0e:a9:e9:d7:7f:c5:57:57:5c:73:0b:29:1b:
                    95:6a:78:64:3e:28:18:8d:fa:52:d2:99:3a:cb:d5:
                    e5:a8:eb:3c:8a:74:3c:57:f7:e8:5d:e9:e6:8e:8f:
                    96:d4:38:aa:b5:60:a3:93:fe:43:03:0d:5d:bc:fc:
                    b3:45:d3:d4:39:47:4e:1a:78:5f:6b:61:8f:ec:f1:
                    5f:d8:c7:d0:5c:5d:ee:a1:ae:33:2a:2d:12:47:19:
                    29:83:b6:09:e5:c3:93:d9:62:3d:c0:1d:83:7e:62:
                    d2:4d:05:23:67:69:c2:8c:69:8b:da:f6:54:97:0a:
                    44:c7:37:68:0f:71:ad:3a:ed:8b:58:27:a1:c4:75:
                    e0:b2:35:03:64:81:29:0b:51:27:43:96:18:d8:99:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F4:DD:CB:EA:DC:BA:71:92:0A:40:09:DC:C6:06:63:F7:F9:32:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc7f0507-7a62-3182-beda-806aa55f9f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:89:10:d6:5e:52:aa:63:08:b4:ed:38:c0:c6:5a:c5:86:bf:
         d6:ba:7f:91:07:69:2d:8e:e1:64:d3:4d:4a:07:b3:fc:05:cc:
         b9:4e:46:2b:3e:c5:cb:23:5e:f3:fd:06:85:56:b3:d6:10:84:
         46:19:33:9e:dd:c4:66:46:4f:83:dd:d2:f3:72:bd:ad:31:93:
         41:9c:e8:4f:9c:f0:4e:cd:ca:1e:bd:22:69:36:f4:b6:ab:d8:
         b7:e5:03:1a:30:15:8a:94:4a:4d:24:3b:43:0f:fd:0d:34:f8:
         46:2e:27:00:bc:9d:ff:ea:e1:2c:9b:f3:02:26:d3:86:25:4b:
         50:eb:15:a9:b7:c8:bf:31:2c:cb:2d:b1:e4:39:b1:96:8d:01:
         9d:2b:25:73:70:ce:0e:14:51:ee:e2:a6:7e:47:7c:dd:3c:cd:
         e5:3d:ed:57:23:f5:e8:fd:4f:0d:f2:36:28:0a:83:02:6c:0e:
         ce:4a:75:be:6d:5c:2e:1b:13:af:8a:14:a6:dd:7e:31:1d:95:
         b7:67:3e:37:7e:7a:dc:32:cb:18:29:a9:83:92:77:16:53:f3:
         63:a6:f0:29:55:73:5a:a4:f4:cc:f4:13:90:b1:5d:ea:92:23:
         1d:2e:9b:48:b5:d0:05:99:1f:d4:ae:85:e9:9c:0d:d4:53:0a:
         ff:2b:a4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:21:06 2025 by rpki-client