Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a79b1255-0836-3442-a1e5-c3abb6489338.roa
File:                     a79b1255-0836-3442-a1e5-c3abb6489338.roa (raw, json)
Hash identifier:          G9gpJbwyLN14qqHTwmQ7qIEMp+/VUMYKfDFIKsPwd18=
Subject key identifier:   21:7A:58:44:CD:73:A7:55:51:FD:E5:78:66:44:5B:BF:41:DB:59:D7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF4AC7D49169A4EF5375C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a79b1255-0836-3442-a1e5-c3abb6489338.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.19.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:4a:c7:d4:91:69:a4:ef:53:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=a7485f97-dc23-405e-83b8-6c94662a4248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:89:d9:3e:07:18:ed:be:d9:a6:76:59:54:
                    62:1b:8c:25:d6:d2:fe:4d:2c:f9:51:31:4c:77:41:
                    eb:c4:03:c9:45:d5:4b:00:f4:65:98:41:c9:d8:a6:
                    1d:0f:67:49:95:93:25:40:09:b2:6d:7c:b6:cf:68:
                    1b:ca:d4:56:27:41:ef:30:f8:fc:aa:c4:e8:3a:97:
                    e1:81:59:42:25:48:20:49:14:79:5c:5d:d5:80:fc:
                    68:c4:2c:ba:5f:eb:97:b3:1b:fb:74:53:ff:20:06:
                    11:72:26:51:a5:46:ea:78:9c:93:3f:d0:9e:7c:7a:
                    ea:05:cc:f0:b3:5c:3a:2a:7e:99:c3:63:26:5a:93:
                    a9:27:dd:30:f3:30:5c:c5:c0:7f:fa:5c:5d:b5:10:
                    73:fb:8c:a7:1f:af:6e:7c:26:34:a6:77:e1:39:92:
                    1d:ec:c7:f6:fb:9c:4f:05:aa:b1:18:4a:b3:46:02:
                    ac:78:fb:b5:4e:6c:97:c8:8a:04:d0:be:db:9f:78:
                    55:f2:91:1d:70:cd:8b:83:33:27:71:61:ba:9f:31:
                    15:72:24:d1:c2:ce:54:fb:f6:dd:6b:77:b1:f1:2f:
                    03:27:44:22:8a:57:98:55:c9:35:ad:52:a8:be:80:
                    32:7a:c4:ad:f9:fe:ed:b9:b6:8e:31:49:30:74:c9:
                    af:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7A:58:44:CD:73:A7:55:51:FD:E5:78:66:44:5B:BF:41:DB:59:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a79b1255-0836-3442-a1e5-c3abb6489338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:ca:b5:da:db:e5:0d:78:1a:dd:24:6e:ac:af:c3:87:c5:
         18:7c:37:0d:73:39:47:e4:23:dd:b2:6d:fc:d9:25:47:53:e9:
         31:d9:75:04:07:72:9c:bc:3e:b5:c1:77:63:69:82:8b:6a:d6:
         a7:d4:4c:8a:56:b6:6d:02:79:8b:29:92:54:fb:36:3d:55:70:
         43:7b:52:64:73:25:72:0d:06:08:1f:75:21:4e:42:df:fa:da:
         76:0c:40:d5:c3:a3:0c:47:9a:c6:4e:50:58:f6:f9:79:44:c0:
         b3:4c:2e:cf:d1:7c:f3:0f:bb:49:c0:03:c4:91:8b:b2:21:42:
         2e:82:ec:51:08:30:a2:99:f8:f5:04:89:9a:16:7a:8f:cf:e4:
         5b:84:1f:9b:ae:6e:68:d8:cd:a4:dd:21:e7:a1:e6:3e:9e:4f:
         85:31:83:d6:4f:3c:c4:b4:49:cb:55:b5:13:cc:fd:8e:2a:ff:
         f0:40:73:16:dd:fb:9f:2e:70:02:9e:eb:3d:a6:c9:d0:73:a8:
         89:81:f3:c5:b7:a6:be:9e:d7:a1:7b:d5:2e:9f:ae:4f:6a:5d:
         c5:68:d8:25:41:b0:f0:00:01:c6:de:8c:52:cf:a3:67:bc:bb:
         a1:b0:31:48:8e:32:f8:23:d2:5d:43:09:59:9f:b5:cb:18:8c:
         22:90:cd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:20:46 2025 by rpki-client