Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36af8151-27ed-3eff-bdfd-dd5a5fc7f4c0.roa
File:                     36af8151-27ed-3eff-bdfd-dd5a5fc7f4c0.roa (raw, json)
Hash identifier:          gUG9iP/bBfIqjplvySl8oqzicBNsZP9wGpVnDCTKQ8o=
Subject key identifier:   7C:8C:5E:DF:81:C6:B3:C5:99:3F:A2:10:75:89:A3:5E:A1:F4:2F:AC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849C20A04563E00FDA0DE868000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36af8151-27ed-3eff-bdfd-dd5a5fc7f4c0.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     30036
IP address blocks:        173.28.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:04:56:3e:00:fd:a0:de:86:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=e23751a8-1393-46f8-a916-6a77db017ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:6f:4d:df:fe:c2:e9:5f:3a:ec:1c:c0:61:
                    a3:e4:43:55:2d:3d:71:20:8e:62:d1:04:58:19:11:
                    ab:8f:a3:f2:1f:23:67:91:15:89:f5:60:2b:fc:85:
                    6a:19:c1:35:ca:e3:03:fb:f1:ec:a3:42:9f:d4:3c:
                    5e:fd:53:bf:95:f2:47:19:9f:1c:ec:a6:51:df:ec:
                    47:73:e1:3c:49:5f:28:19:0f:60:36:bb:f0:fb:08:
                    df:5f:3d:07:06:8f:03:06:b0:0b:56:b0:fb:5e:52:
                    f4:b1:c9:8e:7d:a0:2f:ec:eb:bb:ad:b0:ac:8f:d3:
                    a1:12:f9:a8:b8:9c:ca:0c:f5:54:c7:14:2c:37:c3:
                    77:f7:db:e3:8e:65:96:66:e4:92:95:02:16:8d:09:
                    36:62:7b:be:aa:0d:e6:74:40:87:3f:52:61:e4:5b:
                    8d:13:98:d3:8b:f7:39:30:8c:05:c5:8d:0c:60:42:
                    5d:f7:b9:f6:ab:05:ff:2f:b7:2c:1a:16:da:8d:1c:
                    d8:09:20:2b:61:80:be:29:57:1d:e8:27:68:a6:bf:
                    30:58:12:34:97:2a:27:d6:59:93:b1:6e:11:d6:17:
                    d0:aa:d2:10:fe:bb:37:83:bb:fd:a0:76:a0:de:31:
                    9c:98:7c:8c:6b:28:2a:87:19:53:0d:6c:e8:d5:d5:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8C:5E:DF:81:C6:B3:C5:99:3F:A2:10:75:89:A3:5E:A1:F4:2F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36af8151-27ed-3eff-bdfd-dd5a5fc7f4c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:60:03:8d:c8:dd:fa:f0:f4:3e:00:96:33:c7:c0:e1:5a:30:
         d3:61:58:52:5b:df:99:f9:eb:41:8a:58:eb:27:31:17:66:9c:
         18:aa:5e:04:87:5b:69:6b:44:b4:2b:2e:9a:f7:5f:e9:6d:a0:
         b1:7a:90:bb:d0:55:1d:8e:4b:ee:05:d9:7f:44:f2:75:59:06:
         cc:5c:03:89:89:a5:b2:ea:46:a2:b7:a0:64:0f:3d:9c:c7:1a:
         f7:fb:c2:6d:c0:ad:e8:90:28:57:89:ed:fc:b7:b6:bf:48:d7:
         78:1a:54:6e:f7:60:9a:2b:5b:14:fb:29:c5:b1:fa:e1:14:36:
         39:13:ce:54:43:00:42:46:1b:a9:c1:2f:21:79:45:8d:47:fd:
         d5:e6:41:33:4d:0c:f3:fc:be:dd:90:47:f9:d8:4e:ec:58:55:
         82:12:ee:b4:80:59:c1:36:41:3d:eb:92:78:b4:3d:68:43:56:
         d2:c0:11:75:e8:d2:be:fe:8b:a6:3e:24:d4:d3:89:3d:17:52:
         e2:a9:80:37:72:96:9c:b6:ab:4c:84:f1:55:d6:82:2d:ea:d8:
         bd:a7:d0:5e:af:24:20:2f:d6:e8:a7:e1:1a:81:fd:13:a0:1d:
         65:78:5d:c1:fa:59:86:ca:c7:53:00:8c:bc:73:cb:45:1d:58:
         d1:d4:87:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:15:43 2025 by rpki-client