Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca5be26d-029d-370f-8278-ad50768053d6.roa
File:                     ca5be26d-029d-370f-8278-ad50768053d6.roa (raw, json)
Hash identifier:          UeVwlqxUBPG+DGSwj5yNFk1yyYN7ELGcfwqxKnCrLs4=
Subject key identifier:   6A:6C:A5:E3:BA:EA:81:42:5C:5C:CC:61:7D:B5:CC:32:BE:7B:36:81
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784BE1C855016B231CFF200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca5be26d-029d-370f-8278-ad50768053d6.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.31.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:be:1c:85:50:16:b2:31:cf:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=b48df5f8-e4ea-4507-af2d-4cac6a026383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:00:5f:29:bf:b2:ac:aa:90:5e:5b:64:f3:
                    42:9e:d1:d7:3e:5c:af:7d:0d:96:fe:5e:0b:f8:4e:
                    18:03:88:0a:15:66:1e:28:fa:49:ef:29:6c:5b:02:
                    40:38:09:be:d8:92:67:43:cd:1c:4d:cf:6e:f6:79:
                    66:c9:ce:07:56:a3:27:4e:93:35:64:94:b6:87:41:
                    bd:92:44:f9:ca:37:1a:71:ec:c4:68:89:4a:33:40:
                    68:7d:35:5b:0a:93:68:0d:2a:14:26:62:2e:45:e3:
                    f8:42:13:b7:46:f3:31:7d:b4:e9:8b:ca:70:07:bc:
                    d8:ba:9c:a1:20:91:f1:fa:3c:83:eb:3e:64:ac:50:
                    1c:12:84:4b:c9:c5:3d:6a:5d:8a:c1:44:0a:f3:12:
                    68:00:ec:c0:fb:4a:6a:1f:44:2a:2e:78:d6:2a:2a:
                    35:eb:4e:85:6d:89:19:06:17:e5:37:7f:ad:30:82:
                    09:9f:cc:22:ce:a3:bb:c8:3d:e7:99:ce:ea:b9:17:
                    d8:c3:96:b5:db:b8:10:01:48:e0:26:5f:a0:53:ef:
                    ba:a9:f3:65:e8:18:d1:17:43:dd:64:2c:0c:34:8d:
                    c6:4f:b2:be:01:fb:11:68:0c:90:6b:8e:0e:28:9f:
                    ea:f8:a4:55:cf:3b:a1:89:5c:5a:52:6d:dd:06:b8:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6C:A5:E3:BA:EA:81:42:5C:5C:CC:61:7D:B5:CC:32:BE:7B:36:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca5be26d-029d-370f-8278-ad50768053d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8d:64:73:20:13:a3:ed:4f:d5:04:9a:b6:18:df:a9:ef:5c:
         fc:84:8a:aa:e5:e2:22:4e:89:85:8a:ae:cd:0e:51:19:25:16:
         a6:f9:33:bb:7d:2e:3a:7b:a0:a2:55:4f:39:4b:2e:6e:83:e7:
         51:c7:63:41:01:a8:35:cc:40:e0:d3:40:de:40:31:8c:4f:1e:
         6c:b7:1e:6e:91:dc:7e:82:d5:bd:8a:d9:76:71:d0:65:16:3c:
         af:fa:cf:e5:88:71:cb:49:fd:4c:1c:13:8e:8b:b0:d6:4c:0b:
         38:88:4a:dc:9f:af:64:47:3b:ce:c9:6e:06:4b:53:84:98:d0:
         d5:63:18:c8:36:bf:c1:30:e7:81:5c:51:20:0f:67:da:cf:0c:
         13:7c:69:3a:67:4f:c8:ba:69:79:72:3f:9d:48:45:c9:fd:26:
         46:c1:36:60:c9:86:f4:5b:02:82:89:07:ca:bb:3c:fc:a8:a0:
         4d:25:2e:ff:fb:1c:cc:38:4b:e3:d8:27:4b:30:20:de:5e:8f:
         0a:d1:dc:cf:7e:4e:dd:cf:9c:ce:62:58:e7:fb:77:38:71:17:
         d7:49:a1:5f:0d:a1:15:bb:75:77:16:fa:de:6f:d1:10:3b:21:
         f1:7e:f7:a7:e2:96:68:e2:e3:96:27:04:8c:4f:ff:02:7e:d7:
         e3:67:ba:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:54:21 2025 by rpki-client