Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/337df950-6eaf-3e9d-936b-d50519c2dbd8.roa
File:                     337df950-6eaf-3e9d-936b-d50519c2dbd8.roa (raw, json)
Hash identifier:          m2smcpxSotyTHT053WUs1q9W37J33nWIytGor7ZhcDE=
Subject key identifier:   36:88:7B:8D:B2:CF:B1:8D:FC:F5:1B:CD:36:B4:4E:AC:81:1E:E0:DC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF56206B44A63B86CEB000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/337df950-6eaf-3e9d-936b-d50519c2dbd8.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.16.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:56:20:6b:44:a6:3b:86:ce:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=fa265a95-d72e-46d7-88ab-21db719a6266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:67:a5:90:83:9e:40:ab:a9:42:19:6e:6f:
                    5e:98:b0:5d:af:6d:09:d9:f2:68:5e:61:c3:f1:e6:
                    45:93:03:68:54:2a:20:a7:d2:f2:cf:30:06:c2:8b:
                    b4:06:88:7c:c5:f9:0f:0e:01:75:43:f8:83:fb:9e:
                    c8:5a:74:8f:7b:e1:26:49:f6:0d:19:f7:5f:19:10:
                    69:cc:c4:66:ea:0e:07:9b:d2:af:7d:29:f8:f3:06:
                    39:55:6f:de:7b:2f:87:87:23:fc:45:a8:e6:10:c4:
                    24:fb:f8:06:b2:c6:7c:b4:49:df:b1:9c:9c:a4:de:
                    62:f5:b3:59:29:d6:02:1a:e3:25:0f:66:62:e8:7d:
                    98:b7:a6:3e:cd:9d:0b:30:c0:8c:27:48:b2:3c:9d:
                    b0:62:6c:01:3c:e2:b3:bc:2d:dc:c3:bb:e2:de:2c:
                    fb:86:d6:be:69:89:d8:a5:e8:eb:12:5b:e3:9b:13:
                    dd:9a:95:ed:8c:e4:c2:b8:8e:9e:ac:71:09:2b:bf:
                    c0:ef:89:76:b5:f6:c0:c1:4c:9e:d1:29:02:4d:69:
                    84:db:05:aa:c0:df:ab:33:d5:f1:d4:65:e6:f9:ab:
                    85:ee:95:6d:98:90:8b:c4:e4:af:b3:75:97:75:bc:
                    bb:83:94:9a:f4:18:b6:03:59:1e:24:9d:74:75:7f:
                    51:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:88:7B:8D:B2:CF:B1:8D:FC:F5:1B:CD:36:B4:4E:AC:81:1E:E0:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/337df950-6eaf-3e9d-936b-d50519c2dbd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:48:26:28:45:69:f0:1b:3e:29:87:40:be:5e:c3:14:78:47:
         d6:cb:31:3f:1e:22:71:fe:17:ac:5e:29:06:13:51:21:73:6a:
         22:46:7b:20:1a:d8:6c:20:36:2f:1c:ef:03:f7:96:e1:4e:52:
         69:2b:59:97:d7:18:9a:4c:ae:56:2b:d4:fa:00:81:31:23:ee:
         15:2e:e1:46:2c:ce:2d:05:f7:33:8d:5c:e6:37:e9:07:9a:60:
         fc:dd:f1:f2:3e:79:73:b2:34:59:ad:5b:65:58:7e:ff:23:94:
         d9:0c:e8:1b:43:63:e6:b3:fe:84:81:26:63:1c:06:f9:5d:8a:
         d7:b8:78:ec:c5:af:7c:29:3c:e1:bf:77:22:b7:63:c7:f6:f2:
         4a:27:2b:7e:6c:d1:71:4e:a1:98:41:01:b6:95:df:18:54:9b:
         98:5b:e7:e4:96:17:f0:18:e8:7d:6b:7c:85:93:82:67:ff:c4:
         58:45:b9:0c:c3:45:ed:e2:f9:ed:a5:60:8c:91:7c:32:8c:9a:
         0e:90:43:44:6d:1f:d0:c2:89:4b:d3:74:2c:30:04:b1:fe:1b:
         2f:96:60:8c:18:3a:3d:17:40:c9:dc:35:d4:a7:c6:13:08:95:
         0b:e4:c4:ee:4f:c7:08:78:67:47:d1:83:74:c9:22:ed:c5:65:
         20:e4:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:51:23 2025 by rpki-client