Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7fb02c2d-cdab-3150-9ef6-36a07f12e31f.roa
File:                     7fb02c2d-cdab-3150-9ef6-36a07f12e31f.roa (raw, json)
Hash identifier:          u7i5ymqfO7MSWVCO4ZFb5Bpt5H61CLvRW1QqD4RsN30=
Subject key identifier:   75:8C:4E:6C:17:F9:F4:E6:9D:8A:9E:5B:BF:6D:AA:F6:82:1B:93:B3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF55CE0DCEF1CBC1661380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7fb02c2d-cdab-3150-9ef6-36a07f12e31f.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.16.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:55:ce:0d:ce:f1:cb:c1:66:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=b4eb5e7e-7a91-4331-9bc3-6490ee5eeedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:8c:a6:d3:3b:f6:69:e7:e0:89:e8:36:94:
                    92:7b:63:15:85:2c:98:6a:96:98:7d:06:37:a2:a3:
                    45:4e:89:14:f2:23:a4:77:ff:3a:58:52:67:fe:42:
                    5b:9e:52:f0:60:a5:92:1e:46:8f:bf:8e:24:9d:2a:
                    97:06:ab:9c:df:d1:22:63:56:82:36:44:e9:e1:0a:
                    9a:3d:4b:c3:5b:a7:82:0e:10:2d:a8:b3:09:98:08:
                    39:ad:5f:e8:aa:b0:d1:c1:d7:fc:d5:55:18:0f:62:
                    c0:77:d9:d2:8c:05:fa:99:88:19:dd:82:ba:1d:61:
                    7e:3f:28:a3:2f:00:97:bd:c8:5e:1d:9b:2c:ab:61:
                    0c:f4:9e:7f:1e:31:fb:61:83:f2:f3:dd:f0:48:f9:
                    d8:f9:8d:b9:48:b9:d5:eb:85:17:21:d0:2b:b4:ec:
                    39:81:e3:71:12:5e:cf:3c:99:17:75:80:e8:21:2d:
                    b0:55:fc:d4:9c:bb:f7:78:e6:73:c8:c0:a4:2a:fb:
                    84:b3:dc:50:9a:be:09:0e:91:10:aa:f0:dc:6b:96:
                    ed:86:f9:db:ef:6c:c9:3d:c3:ea:4f:8f:dd:1c:85:
                    ca:f1:2a:39:3f:f4:c5:6b:91:91:13:be:3e:f7:71:
                    5e:f7:56:d7:02:30:ad:59:95:86:41:b5:ab:e4:dc:
                    3f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8C:4E:6C:17:F9:F4:E6:9D:8A:9E:5B:BF:6D:AA:F6:82:1B:93:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7fb02c2d-cdab-3150-9ef6-36a07f12e31f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:79:36:b4:da:21:a2:ab:aa:dd:ff:3d:bf:26:8b:62:81:e1:
         93:60:18:c7:d1:36:a0:f3:d1:bc:cb:32:71:61:ef:52:05:d3:
         02:a9:b2:cc:2f:aa:f7:cd:32:29:c1:ab:e7:20:e0:aa:c7:5c:
         8c:44:be:01:a0:0b:8c:7a:33:4b:87:30:10:1e:ac:39:ae:b5:
         ed:80:2e:b6:fb:ac:10:05:ae:b5:4f:c7:c6:80:cf:04:0b:6a:
         9c:ca:cc:c9:a0:11:e3:0d:03:11:4c:46:c7:5a:c1:0d:ae:ef:
         bc:5b:d8:7d:f6:e2:bb:51:e5:8c:45:bc:25:50:48:7d:20:0a:
         d8:18:4f:28:18:d3:5c:2b:bd:29:36:18:71:37:bd:4b:0f:76:
         2b:4d:8c:ca:71:62:71:91:29:73:fb:47:c6:b1:73:cf:b7:6f:
         7c:a4:10:d0:3b:49:7d:36:1c:a1:ef:b7:86:f5:b4:bf:4e:b7:
         83:0e:72:83:e0:2f:c3:15:48:66:96:4b:52:6f:35:be:f0:cd:
         4e:55:0c:8f:f0:62:9b:cb:8e:9d:d0:a0:8a:81:61:ef:66:a6:
         e2:df:50:58:f4:38:55:fd:d7:b1:d5:67:c4:37:d8:33:d9:52:
         ea:ce:db:58:5f:4c:95:fa:37:44:98:8d:85:f5:cf:01:26:98:
         fe:9d:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:44:17 2025 by rpki-client