Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b58d325b-6e95-3f7f-a855-bed64c88fef2.roa
File:                     b58d325b-6e95-3f7f-a855-bed64c88fef2.roa (raw, json)
Hash identifier:          8VaIPPdAWjzKfsDC9yHtK9pZXOD2v3Ngh3D97hq/4M0=
Subject key identifier:   60:65:FB:AB:65:66:51:E3:AA:CD:A4:C8:FC:B8:08:FB:F5:78:64:7E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A61F3355C22F0025DBE5C250
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b58d325b-6e95-3f7f-a855-bed64c88fef2.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     30036
IP address blocks:        173.29.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:33:55:c2:2f:00:25:db:e5:c2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=3419b8a4-5aa5-4393-a6a5-03cc8627818d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:58:a0:31:2d:da:26:73:a3:49:2c:91:d1:03:
                    8e:38:7c:da:32:d9:5f:50:d3:9b:c1:c1:74:f0:c7:
                    9f:76:e6:cc:64:a0:42:4b:d0:d3:e6:d2:9b:93:43:
                    e7:59:27:5a:07:7b:52:ff:ba:8b:36:8a:ff:d2:b6:
                    34:da:ba:f3:fb:d3:49:76:43:4a:3d:fa:f4:8c:d8:
                    1a:47:bb:2e:ff:11:52:fa:a9:d9:53:5f:32:e0:e1:
                    4b:46:22:14:af:ae:90:f6:98:c1:fa:52:6a:fb:98:
                    7c:7d:34:bf:06:54:cd:d0:a9:27:ff:a6:cb:b6:53:
                    e0:d6:34:86:a6:7c:7f:23:10:bb:96:78:a8:ea:93:
                    15:45:8d:d4:02:e7:0e:67:e3:8b:86:b7:3e:05:1b:
                    13:77:67:0e:1f:53:87:54:e1:bd:0d:8c:46:84:30:
                    6d:73:27:72:9a:a7:26:8c:27:df:64:34:14:ec:08:
                    0d:d2:45:2e:58:fc:76:bb:88:b7:68:e1:90:74:01:
                    33:94:d7:6f:92:a3:e9:f7:20:36:01:81:2b:cd:43:
                    9d:db:c5:10:da:15:f6:93:c2:d5:03:03:45:2e:6e:
                    5c:48:4a:2d:51:a1:73:79:fe:d1:2d:2f:da:3b:28:
                    e3:a7:f6:57:25:e1:5f:7a:cc:bb:8a:9d:b7:c1:85:
                    f1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:65:FB:AB:65:66:51:E3:AA:CD:A4:C8:FC:B8:08:FB:F5:78:64:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b58d325b-6e95-3f7f-a855-bed64c88fef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:10:f6:af:30:81:3a:40:46:38:2f:25:d2:1a:a7:77:5e:36:
         58:de:8d:c3:ea:cc:2e:ab:56:63:da:7c:91:42:91:03:7e:00:
         6e:62:40:a5:1d:b5:2b:6d:89:74:a1:5c:16:7d:d5:b6:21:ec:
         75:e7:6a:2b:10:1e:2c:2d:af:83:04:86:24:12:81:f3:a3:6e:
         a9:28:21:eb:50:07:4b:8e:d0:c7:1b:8c:a0:38:9f:e0:9a:32:
         43:e8:33:e2:eb:57:00:d3:5e:f9:b8:1e:28:2b:22:d1:53:ef:
         53:9e:a6:ab:a8:ed:11:38:ea:dd:5f:ae:d8:60:07:89:78:52:
         08:be:52:a0:a7:02:af:3a:62:84:fe:2a:65:f3:86:c7:c9:7c:
         33:c0:62:d2:ad:8a:3d:53:bb:69:7e:27:c2:c7:52:6c:e2:9a:
         6e:b6:b8:39:91:ad:47:8a:2c:01:26:ee:4f:a9:67:57:7e:fb:
         0d:93:18:bd:a6:37:d9:88:0e:01:b0:77:c6:58:53:d9:51:59:
         1a:86:c7:9b:31:fb:4a:72:b4:31:f0:11:43:1f:d6:c7:2c:ce:
         61:80:72:1b:8c:e9:6c:d4:6a:d1:b2:6f:f8:44:67:0c:bd:0e:
         71:05:13:ca:9b:31:84:ff:f7:a3:43:f4:33:09:f9:f7:fc:0a:
         b0:81:05:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:46:26 2025 by rpki-client