Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b45d096e-a02f-3f9c-ae5d-c100ae7d3db2.roa
File:                     b45d096e-a02f-3f9c-ae5d-c100ae7d3db2.roa (raw, json)
Hash identifier:          uITOPHKLx2TuriAUrflmav9pxaUBZrEGZGEKihUtKPM=
Subject key identifier:   EB:42:F5:BE:B7:63:82:99:FC:78:92:C7:D9:2E:1D:30:55:1B:6B:77
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584996C4918278922F1A20045880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b45d096e-a02f-3f9c-ae5d-c100ae7d3db2.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.25.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:91:82:78:92:2f:1a:20:04:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=7f2fafc0-5992-4893-b97a-7bd2e6ee6c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bb:f0:2d:ac:d2:36:5a:1f:69:52:f6:25:93:
                    7b:24:ea:31:5b:ac:2c:47:65:7a:87:99:02:d0:80:
                    99:bd:10:17:ae:6f:68:53:2c:d1:a7:56:03:19:cd:
                    4c:d5:66:5f:d5:80:78:82:9a:dc:50:65:f8:ad:0d:
                    24:41:35:3d:09:bc:21:47:80:42:ad:34:c0:b8:f8:
                    06:73:0c:5c:4f:2e:d4:c8:a1:b0:b0:4c:89:c9:55:
                    40:22:bb:0c:e9:05:a9:67:f6:b1:03:f1:ea:89:a1:
                    6b:83:c4:3f:93:81:33:26:72:d0:86:b4:06:eb:ec:
                    6d:f9:4f:02:9e:03:75:07:7a:c7:1c:38:d2:b4:8d:
                    4d:69:7d:13:db:9c:e9:a0:e6:99:5f:f6:5f:16:3d:
                    dc:b2:40:13:02:df:5d:5d:e6:f1:00:d3:c4:7a:bd:
                    6b:20:a7:b7:57:fd:89:f7:08:fc:d7:81:58:1b:c4:
                    cd:50:64:0b:64:77:9a:22:37:58:ec:cd:ea:78:b3:
                    05:70:26:a8:4c:ba:ff:fa:41:64:0c:cc:eb:29:5b:
                    58:bc:4e:01:9b:69:58:ab:06:35:55:cc:e1:4a:1a:
                    6b:0b:79:c2:d5:11:e2:b7:21:c6:c1:6e:ff:19:f9:
                    82:2f:70:62:6c:19:e4:bb:69:36:3d:18:41:00:76:
                    3d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:42:F5:BE:B7:63:82:99:FC:78:92:C7:D9:2E:1D:30:55:1B:6B:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b45d096e-a02f-3f9c-ae5d-c100ae7d3db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ad:70:f4:97:4a:6c:8d:61:f3:0d:30:86:72:26:75:5e:aa:
         57:da:56:1c:60:51:84:8b:df:45:25:71:4a:a6:13:d4:98:42:
         0f:0c:38:e1:46:7d:83:ec:d1:4e:63:c2:fb:36:6f:9c:4a:b3:
         9d:df:ab:b9:fb:5a:fb:7c:3a:55:6f:9a:b2:e8:89:26:82:0d:
         3f:c9:3e:29:da:65:44:8f:c8:09:c9:9b:80:8a:00:e3:ff:40:
         a8:7e:4b:80:c8:65:85:0e:d1:89:a8:95:a9:6a:81:fe:58:09:
         d5:79:68:29:0f:7f:ac:16:5f:07:cc:b6:a5:3e:ab:3c:0c:c8:
         fd:71:6b:fd:19:6d:ae:82:00:44:ae:60:0d:b6:f7:bf:3b:99:
         65:9c:86:71:a6:db:24:30:ee:ee:a6:2e:38:48:30:66:ce:99:
         fd:3b:77:00:c6:61:88:d3:04:c2:1f:ff:3a:9b:8d:8a:52:af:
         57:61:82:f7:be:5e:91:b2:94:f1:9e:44:67:a8:8e:36:9e:ad:
         d3:00:fd:13:93:4d:1f:fb:39:43:32:38:41:d4:4f:4c:f8:cf:
         b4:b4:2c:d7:dd:c0:d5:3b:6c:be:57:c1:da:9e:f6:9c:d7:e4:
         ba:23:0b:37:80:11:72:5f:21:06:c7:d0:88:a2:9b:30:30:9c:
         9a:ef:e4:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJGCeJIvGiAEWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
N2YyZmFmYzAtNTk5Mi00ODkzLWI5N2EtN2JkMmU2ZWU2YzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17vwLazSNlofaVL2JZN7JOoxW6wsR2V6h5kC
0ICZvRAXrm9oUyzRp1YDGc1M1WZf1YB4gprcUGX4rQ0kQTU9CbwhR4BCrTTAuPgG
cwxcTy7UyKGwsEyJyVVAIrsM6QWpZ/axA/HqiaFrg8Q/k4EzJnLQhrQG6+xt+U8C
ngN1B3rHHDjStI1NaX0T25zpoOaZX/ZfFj3cskATAt9dXebxANPEer1rIKe3V/2J
9wj814FYG8TNUGQLZHeaIjdY7M3qeLMFcCaoTLr/+kFkDMzrKVtYvE4Bm2lYqwY1
VczhShprC3nC1RHityHGwW7/GfmCL3BibBnku2k2PRhBAHY9xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtC9b63Y4KZ/HiSx9kuHTBVG2t3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjQ1ZDA5NmUtYTAyZi0z
ZjljLWFlNWQtYzEwMGFlN2QzZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRkmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOtcPSXSmyNYfMNMIZyJnVeqlfaVhxgUYSL30UlcUqmE9SYQg8MOOFG
fYPs0U5jwvs2b5xKs53fq7n7Wvt8OlVvmrLoiSaCDT/JPinaZUSPyAnJm4CKAOP/
QKh+S4DIZYUO0Ymolalqgf5YCdV5aCkPf6wWXwfMtqU+qzwMyP1xa/0Zba6CAESu
YA229787mWWchnGm2yQw7u6mLjhIMGbOmf07dwDGYYjTBMIf/zqbjYpSr1dhgve+
XpGylPGeRGeojjaerdMA/ROTTR/7OUMyOEHUT0z4z7S0LNfdwNU7bL5Xwdqe9pzX
5LojCzeAEXJfIQbH0IiimzAwnJrv5Lc=
-----END CERTIFICATE-----
Generated at Thu May 8 22:30:30 2025 by rpki-client