Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b803053-daca-3c64-99da-ac98477b11bb.roa
File:                     6b803053-daca-3c64-99da-ac98477b11bb.roa (raw, json)
Hash identifier:          0d6rZN1SbrBppXh8v5r46o8CnGpiBMDuRtVUj17VSoU=
Subject key identifier:   58:77:4F:16:F7:E3:A4:6E:88:04:40:13:6F:EA:23:D0:33:A1:9C:C0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849AF86DB3724DF6F86AE93AC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b803053-daca-3c64-99da-ac98477b11bb.roa
Signing time:             Tue 29 Apr 2025 09:52:00 +0000
ROA not before:           Tue 29 Apr 2025 09:52:00 +0000
ROA not after:            Mon 28 Jul 2025 09:52:00 +0000
asID:                     30036
IP address blocks:        173.16.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:86:db:37:24:df:6f:86:ae:93:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 29 09:52:00 2025 GMT
            Not After : Jul 28 09:52:00 2025 GMT
        Subject: CN=de98fc85-7056-4372-9886-8f75307ae454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:73:1e:d9:49:67:ad:fa:e6:d8:8b:dd:a6:
                    63:2b:ba:56:ee:39:2a:f8:ac:82:00:8f:ae:29:01:
                    f5:ca:57:af:c3:3d:23:c8:94:0d:fe:dd:70:d8:7d:
                    4a:ff:a7:78:84:fc:f1:9f:5f:66:d6:21:2b:f7:80:
                    64:c3:78:9c:f3:6d:21:3f:cf:8e:cb:55:67:87:03:
                    90:08:a0:7a:2f:a5:70:ba:4c:4e:fa:c6:58:94:26:
                    d3:ef:3d:5c:73:82:bc:0c:5a:9a:9b:7d:1e:47:67:
                    f5:4e:a3:2c:ca:88:0a:23:91:a7:ee:c3:27:44:3a:
                    01:f5:b6:93:f7:07:71:c2:89:46:59:d5:9d:c1:af:
                    49:ab:ec:80:65:45:3a:9e:bd:d8:a9:2c:c4:ff:a5:
                    97:ae:cb:eb:dd:b9:0d:92:dc:c8:72:ce:d0:5b:24:
                    18:99:7b:ac:05:d0:81:1e:5d:ba:cc:aa:e1:87:01:
                    66:8d:90:71:7e:04:52:ae:52:f1:2d:47:c5:f6:09:
                    3b:08:96:8a:11:21:b4:2c:fd:36:13:f3:99:86:f4:
                    59:48:e0:62:ce:c7:d0:86:e6:1d:4b:fc:d5:6e:21:
                    1d:55:c0:fd:dc:d0:d4:0a:3e:56:2e:15:1e:1c:13:
                    8f:a4:00:6a:58:10:20:b7:da:84:50:bf:04:52:70:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:77:4F:16:F7:E3:A4:6E:88:04:40:13:6F:EA:23:D0:33:A1:9C:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b803053-daca-3c64-99da-ac98477b11bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:45:4e:b7:46:7d:d8:4e:27:21:de:89:52:9c:88:73:3f:fe:
         0f:86:12:9d:75:b9:91:3b:22:f5:46:16:db:18:4d:da:51:ff:
         fd:92:ad:5c:d8:bb:23:80:b7:12:d2:c3:dc:a7:a9:8d:b6:f4:
         3d:02:62:a2:a2:49:32:97:25:be:f8:0f:e3:af:98:0e:29:61:
         3c:34:8f:39:da:da:e7:76:ab:b7:88:29:cc:be:26:5c:75:01:
         ef:d9:2e:b2:4a:74:95:1f:f0:31:39:f3:fd:cb:1e:e9:1e:2d:
         6f:20:29:2e:2f:d8:e6:95:c1:56:ed:05:80:01:58:2c:09:10:
         c9:27:a5:75:ff:f6:c3:e3:bf:b5:24:a1:4b:6b:00:b1:03:22:
         85:0b:3f:4c:8c:f6:f1:dc:93:57:85:56:c8:a8:d9:41:5a:2f:
         09:ed:19:59:61:ce:57:80:25:b2:1b:cc:7d:72:87:b2:ca:d0:
         36:1c:70:56:46:9d:1d:2a:a6:b5:92:24:79:d1:03:2e:48:3b:
         5e:10:aa:a1:e2:a8:a0:6a:34:c6:ff:6c:fd:d1:5f:c8:eb:b5:
         36:ae:4f:36:58:86:67:53:24:3b:5e:54:15:ba:04:5e:9e:1a:
         ab:be:3c:f4:87:ab:87:68:6e:bc:54:80:69:80:54:49:13:37:
         2e:45:af:a4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmvhts3JN9vhq6TrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyOTA5NTIwMFoXDTI1MDcyODA5NTIwMFowLzEtMCsGA1UEAxMk
ZGU5OGZjODUtNzA1Ni00MzcyLTk4ODYtOGY3NTMwN2FlNDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo1zHtlJZ6365tiL3aZjK7pW7jkq+KyCAI+u
KQH1ylevwz0jyJQN/t1w2H1K/6d4hPzxn19m1iEr94Bkw3ic820hP8+Oy1VnhwOQ
CKB6L6VwukxO+sZYlCbT7z1cc4K8DFqam30eR2f1TqMsyogKI5Gn7sMnRDoB9baT
9wdxwolGWdWdwa9Jq+yAZUU6nr3YqSzE/6WXrsvr3bkNktzIcs7QWyQYmXusBdCB
Hl26zKrhhwFmjZBxfgRSrlLxLUfF9gk7CJaKESG0LP02E/OZhvRZSOBizsfQhuYd
S/zVbiEdVcD93NDUCj5WLhUeHBOPpABqWBAgt9qEUL8EUnA7EQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFh3Txb346RuiARAE2/qI9AzoZzAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmI4MDMwNTMtZGFjYS0z
YzY0LTk5ZGEtYWM5ODQ3N2IxMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMErRAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZEVOt0Z92E4nId6JUpyIcz/+D4YSnXW5kTsi9UYW2xhN2lH//ZKtXNi7
I4C3EtLD3Kepjbb0PQJioqJJMpclvvgP46+YDilhPDSPOdra53art4gpzL4mXHUB
79kuskp0lR/wMTnz/cse6R4tbyApLi/Y5pXBVu0FgAFYLAkQySeldf/2w+O/tSSh
S2sAsQMihQs/TIz28dyTV4VWyKjZQVovCe0ZWWHOV4AlshvMfXKHssrQNhxwVkad
HSqmtZIkedEDLkg7XhCqoeKooGo0xv9s/dFfyOu1Nq5PNliGZ1MkO15UFboEXp4a
q7489Ierh2huvFSAaYBUSRM3LkWvpA==
-----END CERTIFICATE-----
Generated at Sat May 10 13:18:27 2025 by rpki-client