Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d317d83a-c59e-38b6-a4b0-d288101538b3.roa
File:                     d317d83a-c59e-38b6-a4b0-d288101538b3.roa (raw, json)
Hash identifier:          SOeiuiQdbjg7n8fRMxIZKeSF5QBKpXLMeYH7oQM6pUM=
Subject key identifier:   52:3C:52:62:4C:A9:FB:FC:EF:F5:4D:5A:64:C0:D6:C4:98:7F:89:5F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA348652509273DF8F6980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d317d83a-c59e-38b6-a4b0-d288101538b3.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.25.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:34:86:52:50:92:73:df:8f:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=00c25013-8ac1-449e-83a6-10ec27627ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:81:14:9d:a8:03:d6:6b:43:0d:5a:f4:db:03:
                    12:b5:76:68:ae:f5:f8:9b:af:43:71:5f:88:56:4d:
                    45:c2:0c:e0:9b:e3:ca:ad:53:e3:f1:d9:ea:55:30:
                    95:e4:07:ee:bf:89:e0:4a:d7:fb:5b:fc:e3:f5:1d:
                    bf:14:eb:6f:01:3e:a4:65:2f:1b:5e:ba:60:fd:8d:
                    ee:ea:9d:65:12:85:47:32:44:0c:19:ee:0a:5d:d0:
                    9a:00:10:b2:be:70:a7:a4:5f:16:05:66:41:8e:e7:
                    f7:35:a1:95:a9:46:74:9b:38:59:9a:d0:34:1a:6e:
                    ad:8c:4c:cd:71:77:07:b2:47:df:24:a2:ec:11:fb:
                    81:eb:81:b3:89:5e:4b:fe:aa:19:73:d3:4d:36:32:
                    7e:aa:cc:dd:02:6f:36:48:4a:b6:a4:e5:7a:04:b4:
                    a5:c6:0f:03:4d:8a:dd:fe:c6:f6:a8:4b:94:ea:5f:
                    63:f0:50:e6:f6:85:54:ed:ad:c1:12:bd:65:10:dd:
                    d4:cd:99:69:d2:6b:a9:9a:46:67:68:3e:ec:21:91:
                    ae:08:d9:42:e2:ae:50:52:95:70:d6:43:54:91:45:
                    1e:01:6f:9f:9f:ea:3a:fe:5b:8a:f9:2f:ce:cd:fe:
                    8a:ad:e9:55:9b:3b:2f:07:eb:8b:0c:46:65:21:44:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3C:52:62:4C:A9:FB:FC:EF:F5:4D:5A:64:C0:D6:C4:98:7F:89:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d317d83a-c59e-38b6-a4b0-d288101538b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:1e:fb:dd:18:8d:40:b3:fb:23:64:d0:c0:01:1e:d6:71:db:
         51:b2:91:f5:2d:ef:ab:d8:44:af:38:fe:97:8f:70:47:93:8c:
         82:ea:83:6f:ad:b9:62:b9:7e:7c:18:4f:ab:ad:53:ca:03:ec:
         94:19:8a:28:27:83:fe:ec:08:81:3b:ed:ce:ba:18:f2:ac:58:
         b0:d4:8d:0e:5d:4c:ce:78:9a:b0:ea:06:4f:52:84:93:4b:d0:
         a4:a9:17:2c:06:80:69:fc:6d:da:7a:d6:0a:47:a7:88:90:02:
         29:ea:c8:3d:8f:d0:91:64:8c:5c:44:21:3f:7f:18:b3:38:1a:
         e1:6d:97:cb:f6:df:c7:38:d7:ac:21:07:2d:d3:4a:3a:11:64:
         9e:b4:34:69:f6:79:9d:b3:d9:f7:7d:98:88:d5:b8:4e:8f:72:
         4d:cc:e1:1d:8e:3d:8f:2a:b2:d0:58:3a:a8:78:5b:ac:96:08:
         ed:e9:4c:4a:80:d1:69:27:8f:5e:23:9f:30:82:4d:7c:43:e5:
         4e:e3:91:65:33:a2:b4:36:10:d7:5e:e7:af:23:ba:df:f1:bb:
         9c:11:3e:ec:77:77:2a:49:38:7a:7b:92:96:bb:26:2b:76:b8:
         a0:36:24:56:ad:d9:03:f6:a6:44:ea:b5:bd:3f:1d:32:c0:66:
         8d:c0:60:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:33:41 2025 by rpki-client