Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/471337fc-3363-3b07-a3cc-78a60d942a67.roa
File:                     471337fc-3363-3b07-a3cc-78a60d942a67.roa (raw, json)
Hash identifier:          4t7qK7g0DgKbL0dXncpbgtCU0eEaDVqWKJbpzsS+vqw=
Subject key identifier:   40:69:F0:21:16:6E:95:42:A8:41:6D:05:2A:42:5A:E9:2C:32:F7:4F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584996C48CA3A4443271A07D9D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/471337fc-3363-3b07-a3cc-78a60d942a67.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.17.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:8c:a3:a4:44:32:71:a0:7d:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=7ec4d8bc-6902-4132-b042-e625953433bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0c:bb:d1:39:1f:f9:81:ea:ec:f4:f3:d8:8f:
                    de:91:85:1d:44:57:a3:90:63:44:51:f7:b4:fe:03:
                    9c:71:3d:40:00:c3:4c:7d:67:64:57:aa:00:2b:4e:
                    c0:f5:3f:5d:ce:9a:d2:de:0d:3b:ac:78:8a:a9:69:
                    a2:b2:2a:32:94:6d:73:6b:62:ef:da:a3:31:3b:d0:
                    c9:f2:de:20:e4:f6:9f:77:d9:0e:5e:3b:bd:eb:23:
                    1d:89:f8:e0:a5:48:7a:e3:b6:cd:54:46:22:f8:0b:
                    f6:52:f2:61:07:ab:66:46:c0:50:8f:75:3f:64:43:
                    76:ed:51:1c:8c:97:df:79:0b:24:42:18:ad:12:80:
                    18:84:cc:42:a2:bf:a7:35:b0:70:06:db:67:6f:61:
                    12:18:11:38:db:3b:fd:c4:08:3d:e3:a3:05:78:cd:
                    46:f0:7c:53:f4:6d:3d:52:a7:e0:8a:8f:f2:de:ff:
                    a8:58:a3:3c:2f:0a:6c:10:7b:ae:c4:56:18:26:98:
                    de:18:2d:91:21:cf:a6:50:4f:af:ad:b2:d8:1f:20:
                    53:84:c0:b7:45:ad:60:86:1a:b9:53:6e:3d:33:d0:
                    16:e1:4c:a0:4b:9e:fe:db:7b:e5:15:dd:09:a8:e6:
                    6f:11:62:62:39:ac:7c:0e:b3:fb:24:6f:d6:25:75:
                    e5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:69:F0:21:16:6E:95:42:A8:41:6D:05:2A:42:5A:E9:2C:32:F7:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/471337fc-3363-3b07-a3cc-78a60d942a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c0:fd:63:1e:03:90:21:18:dd:ba:bb:85:ef:c0:9a:88:e6:
         50:14:8c:90:43:9b:33:cf:61:f3:e6:01:de:ee:fc:d7:0a:e9:
         68:24:33:c1:56:eb:3e:32:9f:46:c2:db:d1:54:fa:86:4e:12:
         f3:9f:5f:b2:c6:6c:97:db:10:d9:ba:7a:c5:fb:03:8d:46:2e:
         d2:5e:8f:d1:0d:2c:7d:b1:74:f2:63:a9:c6:7d:27:2e:ea:70:
         e7:b7:2d:b2:bc:0a:38:61:79:09:c4:4b:24:f6:70:18:7e:f3:
         36:bc:55:4d:ae:08:eb:d0:da:ae:21:83:c1:ba:ea:34:a9:0a:
         36:18:6b:b1:34:c4:1c:1a:2b:f1:f4:8c:49:59:36:c7:43:7d:
         cb:e8:a9:01:0c:9d:98:16:0f:e5:59:c8:91:58:b7:9a:73:c0:
         58:0a:68:70:a0:c2:c5:6a:01:cb:96:ea:de:a6:9b:71:4e:e2:
         f0:f0:35:3f:e4:fb:c8:8b:a2:41:f8:ba:e0:cd:02:88:93:d5:
         22:05:7d:9b:9a:99:7a:08:d8:fc:24:2f:c9:1a:85:dc:3e:09:
         48:90:2a:46:17:95:b7:e7:6c:b8:93:fe:33:35:5e:fb:a5:90:
         ea:e7:1c:51:3e:d2:4d:44:f2:1b:c7:8b:2b:1a:43:85:30:02:
         83:7f:5b:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxIyjpEQycaB9nYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
N2VjNGQ4YmMtNjkwMi00MTMyLWIwNDItZTYyNTk1MzQzM2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQy70Tkf+YHq7PTz2I/ekYUdRFejkGNEUfe0
/gOccT1AAMNMfWdkV6oAK07A9T9dzprS3g07rHiKqWmisioylG1za2Lv2qMxO9DJ
8t4g5Pafd9kOXju96yMdifjgpUh647bNVEYi+Av2UvJhB6tmRsBQj3U/ZEN27VEc
jJffeQskQhitEoAYhMxCor+nNbBwBttnb2ESGBE42zv9xAg946MFeM1G8HxT9G09
Uqfgio/y3v+oWKM8LwpsEHuuxFYYJpjeGC2RIc+mUE+vrbLYHyBThMC3Ra1ghhq5
U249M9AW4UygS57+23vlFd0JqOZvEWJiOax8DrP7JG/WJXXl3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBp8CEWbpVCqEFtBSpCWuksMvdPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDcxMzM3ZmMtMzM2My0z
YjA3LWEzY2MtNzhhNjBkOTQyYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRFUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADA/WMeA5AhGN26u4XvwJqI5lAUjJBDmzPPYfPmAd7u/NcK6WgkM8FW
6z4yn0bC29FU+oZOEvOfX7LGbJfbENm6esX7A41GLtJej9ENLH2xdPJjqcZ9Jy7q
cOe3LbK8CjhheQnESyT2cBh+8za8VU2uCOvQ2q4hg8G66jSpCjYYa7E0xBwaK/H0
jElZNsdDfcvoqQEMnZgWD+VZyJFYt5pzwFgKaHCgwsVqAcuW6t6mm3FO4vDwNT/k
+8iLokH4uuDNAoiT1SIFfZuamXoI2PwkL8kahdw+CUiQKkYXlbfnbLiT/jM1Xvul
kOrnHFE+0k1E8hvHiysaQ4UwAoN/W6c=
-----END CERTIFICATE-----
Generated at Fri May 9 08:39:34 2025 by rpki-client