Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/624ffb49-4773-39d5-8ae7-9d13a1f0323e.roa
File:                     624ffb49-4773-39d5-8ae7-9d13a1f0323e.roa (raw, json)
Hash identifier:          DdV93q7PN0cbHs5EKukCel/fesffURmXbD8k7xowAho=
Subject key identifier:   76:94:BC:AE:A4:AA:C5:2E:0B:AE:AE:31:D4:6D:79:31:63:E2:10:24
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584996C48D4874C6294698A1D100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/624ffb49-4773-39d5-8ae7-9d13a1f0323e.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.20.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:8d:48:74:c6:29:46:98:a1:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=2670c64f-e648-49b5-bf8e-06baab1156b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:be:ae:e3:f6:bf:85:26:b8:27:e7:aa:33:
                    ae:96:93:1b:11:21:b4:a7:fc:52:c3:fc:f8:fa:4c:
                    5a:22:8e:cc:3c:84:6c:4e:0e:d9:47:ca:a5:16:e5:
                    22:61:62:78:bb:55:c9:e4:4d:3e:eb:44:88:77:13:
                    d6:99:b9:88:93:2e:5c:67:61:3e:d7:6d:d7:b3:f4:
                    64:a1:40:85:ce:9f:89:93:db:80:cf:4f:03:0c:46:
                    68:a8:a6:e5:42:4f:af:9c:b9:42:8c:6f:c0:09:2c:
                    1a:c6:9b:a9:fd:e6:dc:76:59:09:1c:a2:00:7e:98:
                    b9:43:b7:9a:8c:41:3f:3c:63:55:0f:86:4e:e4:a3:
                    17:81:75:8c:c2:9d:56:e4:4a:0e:35:00:da:4e:36:
                    94:bf:ae:12:4a:f6:e8:57:4a:58:46:87:6d:23:45:
                    05:5a:98:a3:12:ea:66:91:ed:df:9f:c9:8d:05:ca:
                    08:b3:13:1d:5f:3d:f0:d4:fc:8a:ef:3b:3c:9d:d9:
                    c4:4e:bc:af:22:9e:1f:02:b9:bf:af:62:1e:33:96:
                    fd:a1:21:bc:57:c2:01:84:d1:8a:93:45:c9:b7:9f:
                    cc:32:2c:3a:ec:c8:36:9b:2a:0c:93:53:ca:fe:f0:
                    fd:3d:5d:cd:6a:05:0b:32:08:6a:3c:22:29:a0:6b:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:94:BC:AE:A4:AA:C5:2E:0B:AE:AE:31:D4:6D:79:31:63:E2:10:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/624ffb49-4773-39d5-8ae7-9d13a1f0323e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:1d:3d:ac:5c:a3:64:c9:68:24:4c:0f:0a:92:b8:52:d0:a5:
         fe:58:a7:db:5c:40:09:91:51:39:0d:d4:4f:7d:69:3f:65:e0:
         25:13:90:b7:a3:d0:44:26:b5:9b:d0:5e:c9:30:04:b3:ca:c3:
         24:04:26:59:b1:63:20:2b:92:79:4b:fc:62:55:6b:24:a1:e9:
         bd:2d:d6:c3:eb:0e:e2:08:3f:4b:3d:36:84:58:43:88:26:2c:
         32:3b:99:8c:ee:4e:6a:5b:2d:f0:e3:47:12:4a:25:ac:a9:1e:
         86:ab:9d:da:97:4f:60:04:ef:9b:e5:13:aa:b0:49:ab:c7:81:
         4e:8b:9a:a6:32:7c:0f:60:5c:ff:84:5a:fa:37:86:85:84:4b:
         55:2f:f5:01:75:df:ce:00:d3:b5:96:7a:92:1c:1f:5b:8c:15:
         9e:f8:3c:dc:74:c5:30:18:75:47:60:7f:4e:18:93:ae:b2:cf:
         c8:75:5d:21:53:c8:e7:3c:3e:5e:25:28:bd:8b:65:c1:2d:50:
         3d:82:fb:ec:6d:9c:f3:24:9d:c6:02:cf:2e:b8:fa:af:29:14:
         6b:44:50:21:02:f5:a0:27:35:70:0b:42:4f:48:25:84:da:3b:
         0a:e3:c6:e8:51:97:66:c6:18:16:ff:9f:b3:ce:3f:35:ef:ee:
         05:ec:81:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:40:25 2025 by rpki-client