Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d923b5f1-5eeb-3469-b0f9-c48f33e2b93b.roa
File:                     d923b5f1-5eeb-3469-b0f9-c48f33e2b93b.roa (raw, json)
Hash identifier:          Uvhrzs9urba2o0NIicKcAnvYClophv31n04NYJdxsZM=
Subject key identifier:   E3:6F:E6:F6:AE:DB:A5:73:09:6C:4E:E5:F4:37:F2:A5:46:25:5B:19
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584996C497317FBFC0FD22E24180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d923b5f1-5eeb-3469-b0f9-c48f33e2b93b.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.28.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:97:31:7f:bf:c0:fd:22:e2:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=4f7db21a-9561-4b13-b229-8e0dba5ff16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:57:11:61:f4:5b:59:02:3b:d1:a2:7d:8e:
                    55:46:ec:71:0f:43:30:67:d2:a8:2f:ca:2c:c9:6f:
                    4f:cb:31:54:89:37:2f:98:96:3b:11:e4:15:ae:48:
                    f4:18:92:d9:47:5c:bb:b4:20:56:a9:e5:12:45:41:
                    61:51:de:d9:f4:4e:0c:e9:e9:3e:af:ca:23:96:1b:
                    e9:3b:64:b5:35:b1:c0:46:0f:4f:65:ce:9f:dd:77:
                    ab:84:be:87:c9:28:5c:b0:6f:d8:40:c9:d8:58:5e:
                    5d:38:67:77:14:c4:de:20:37:fa:35:4e:4d:74:72:
                    82:d8:2d:11:34:f7:6b:15:ee:b3:58:7c:86:a2:1c:
                    aa:2d:1c:c1:2b:2c:07:c7:b1:90:ff:b8:fe:e7:a8:
                    01:fb:82:15:25:a2:a0:8b:8e:46:95:89:c6:72:19:
                    d3:38:80:9c:b6:f8:2f:eb:ac:be:8b:16:2e:69:db:
                    17:65:82:8a:33:f9:02:17:df:18:14:d7:a6:fc:6b:
                    99:54:c6:ac:ce:c4:f3:e3:3a:9b:45:d6:55:b0:b4:
                    87:4a:d5:11:a8:a4:2c:83:68:11:16:2e:ac:17:0d:
                    99:bd:8c:c0:11:61:a1:77:33:af:db:96:16:07:10:
                    56:a8:82:30:ac:9d:7a:77:55:f8:6d:f5:89:96:11:
                    d3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6F:E6:F6:AE:DB:A5:73:09:6C:4E:E5:F4:37:F2:A5:46:25:5B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d923b5f1-5eeb-3469-b0f9-c48f33e2b93b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:36:5b:20:b6:b1:8a:99:0e:c3:af:93:c5:9e:5a:46:16:e9:
         e0:92:fe:e8:2a:5f:27:92:ff:9e:dc:4d:c2:08:96:d3:51:55:
         32:22:24:aa:e9:f9:0b:5c:bc:da:49:1a:95:7e:ef:a7:69:be:
         a9:5c:3f:19:df:8d:76:16:49:45:11:6b:e1:f0:88:82:3e:b9:
         7f:4f:85:7e:c2:0c:69:7c:27:b9:66:55:91:f5:74:6f:de:ec:
         e7:22:61:9b:09:bf:6d:06:0e:5f:00:8d:1a:9f:0d:40:a0:64:
         72:1d:2c:bc:6a:87:e2:c2:4e:78:66:57:cd:9e:2d:17:36:99:
         8d:1d:72:61:6d:55:69:a4:c7:4b:b1:1c:35:e8:51:79:8a:81:
         bf:ec:ac:a2:6a:03:89:f9:00:c2:94:ad:61:e3:85:70:52:ad:
         d0:21:18:bf:a5:f2:60:d7:d7:0f:7e:c7:42:6d:7d:98:14:0f:
         0e:c9:4d:64:65:e0:ef:99:2a:fc:5a:46:64:21:4e:7f:3f:c7:
         b6:03:c0:38:45:7f:3f:e0:1f:d4:7b:61:00:46:4e:03:fe:3a:
         c9:e4:50:36:47:3d:10:05:42:61:15:fc:64:3d:cc:b4:96:a9:
         10:fe:e7:d5:c4:2c:d8:99:7f:1a:3e:04:86:f6:06:c6:e1:80:
         62:cb:3a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:04:09 2025 by rpki-client