Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a5bc199-e426-3872-8806-e587db992102.roa
File:                     6a5bc199-e426-3872-8806-e587db992102.roa (raw, json)
Hash identifier:          NWKp0D9pOOvvuVq9qYl0cwHMHGOaYVh1wC7ww5onkjU=
Subject key identifier:   D7:FC:34:40:5B:40:24:F4:C8:16:59:49:A1:B1:73:E7:A1:AE:6C:B0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA32C68A6A71F549892900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a5bc199-e426-3872-8806-e587db992102.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.18.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:32:c6:8a:6a:71:f5:49:89:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=85692484-0384-4032-a786-b2b4cc7fca44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:48:ed:66:7a:8d:65:61:94:af:89:2e:19:0b:
                    71:43:2b:e5:b1:e5:cf:8f:ce:a6:e7:78:d1:48:9e:
                    4b:81:ca:2e:30:7d:25:5f:0c:02:cc:ab:35:9e:2f:
                    b4:46:ee:bc:e9:61:15:09:61:5d:00:02:e3:ef:4f:
                    26:00:d7:e8:bb:b4:6f:6c:6a:16:a8:21:1d:07:86:
                    e4:bd:37:5a:f9:57:6c:30:42:c2:3c:8f:2c:fe:c2:
                    49:28:e1:67:2f:f3:87:fb:95:56:b1:dd:b2:34:78:
                    ad:02:f2:99:6b:39:39:a6:6e:52:51:a5:3f:a2:e9:
                    aa:5a:4a:9f:7b:60:ce:b1:8e:ce:57:58:0c:d0:db:
                    31:53:8c:e1:2f:18:1c:25:d3:29:e6:b6:83:45:45:
                    a2:24:97:72:31:b1:61:bb:71:9a:ea:a1:cb:02:a1:
                    c0:8b:75:f1:ce:35:4f:83:3b:dd:af:da:fe:03:d4:
                    49:78:dd:2e:83:aa:4f:db:4d:3a:ce:71:80:59:a9:
                    05:61:5b:1b:34:f9:09:71:5c:e1:e0:07:d2:d2:01:
                    75:6f:db:26:6e:d8:3f:0d:86:fd:bc:97:b9:d9:c0:
                    ae:02:17:b6:29:53:86:a1:d0:d5:ed:20:0b:2c:e3:
                    c9:68:e2:d9:bd:15:d6:80:66:26:20:54:69:94:81:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FC:34:40:5B:40:24:F4:C8:16:59:49:A1:B1:73:E7:A1:AE:6C:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a5bc199-e426-3872-8806-e587db992102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:56:2e:73:ae:66:40:6b:12:01:c4:92:94:fa:46:19:29:04:
         b6:db:b4:3c:19:23:84:74:e7:fa:67:04:2e:69:31:eb:73:c1:
         70:48:29:ab:c0:fc:ca:1e:36:22:0f:70:7b:83:05:25:77:ef:
         dc:5c:83:2e:76:22:3c:02:48:ae:9c:29:79:de:0d:ad:19:e5:
         90:5a:64:66:02:7b:49:98:cf:18:be:a1:1b:f7:f5:8e:bf:5f:
         10:7a:ae:64:1a:01:fd:fe:5f:c8:7b:55:23:a7:ab:ab:5d:a2:
         52:15:fd:dd:2b:5d:de:23:08:79:a8:90:2c:ea:c5:ef:84:69:
         02:64:80:df:bc:11:96:32:a0:9e:13:c1:76:bc:18:9f:0f:76:
         10:04:bb:da:43:6f:dd:7b:53:fe:06:3c:ca:69:60:60:28:18:
         8f:66:7e:8d:4b:95:d2:c0:24:43:ea:57:bc:17:53:a7:37:19:
         08:f5:28:1a:c8:4d:46:52:6d:30:ac:92:23:4e:e3:4e:dc:66:
         57:d2:73:22:4d:64:3f:96:c7:d2:07:9e:df:03:ab:c9:5c:f8:
         a7:cd:b9:15:3e:ec:06:15:87:71:9a:b4:37:96:b8:3c:10:d3:
         82:24:66:3f:ff:cf:06:5a:9d:4f:c8:2a:39:7f:ee:3c:b2:2b:
         df:6f:37:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujLGimpx9UmJKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ODU2OTI0ODQtMDM4NC00MDMyLWE3ODYtYjJiNGNjN2ZjYTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kjtZnqNZWGUr4kuGQtxQyvlseXPj86m53jR
SJ5LgcouMH0lXwwCzKs1ni+0Ru686WEVCWFdAALj708mANfou7RvbGoWqCEdB4bk
vTda+VdsMELCPI8s/sJJKOFnL/OH+5VWsd2yNHitAvKZazk5pm5SUaU/oumqWkqf
e2DOsY7OV1gM0NsxU4zhLxgcJdMp5raDRUWiJJdyMbFhu3Ga6qHLAqHAi3XxzjVP
gzvdr9r+A9RJeN0ug6pP2006znGAWakFYVsbNPkJcVzh4AfS0gF1b9smbtg/DYb9
vJe52cCuAhe2KVOGodDV7SALLOPJaOLZvRXWgGYmIFRplIHMwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNf8NEBbQCT0yBZZSaGxc+ehrmywMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmE1YmMxOTktZTQyNi0z
ODcyLTg4MDYtZTU4N2RiOTkyMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRKaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZWLnOuZkBrEgHEkpT6RhkpBLbbtDwZI4R05/pnBC5pMetzwXBIKavA
/MoeNiIPcHuDBSV379xcgy52IjwCSK6cKXneDa0Z5ZBaZGYCe0mYzxi+oRv39Y6/
XxB6rmQaAf3+X8h7VSOnq6tdolIV/d0rXd4jCHmokCzqxe+EaQJkgN+8EZYyoJ4T
wXa8GJ8PdhAEu9pDb917U/4GPMppYGAoGI9mfo1LldLAJEPqV7wXU6c3GQj1KBrI
TUZSbTCskiNO407cZlfScyJNZD+Wx9IHnt8Dq8lc+KfNuRU+7AYVh3GatDeWuDwQ
04IkZj//zwZanU/IKjl/7jyyK99vN6U=
-----END CERTIFICATE-----
Generated at Sat May 10 19:26:01 2025 by rpki-client