Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f55ae035-0414-3dc0-9550-7e8225d87917.roa
File:                     f55ae035-0414-3dc0-9550-7e8225d87917.roa (raw, json)
Hash identifier:          g10Z7W+45UFcUj8Xv6HO5sGolPd0Cy1AttYwFYSWHZQ=
Subject key identifier:   96:18:2B:F6:DD:98:D3:EB:E6:B2:7A:9D:3C:6B:FB:60:A9:84:D7:0C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF4A146C8889412AE21A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f55ae035-0414-3dc0-9550-7e8225d87917.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        150.195.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:4a:14:6c:88:89:41:2a:e2:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=d5019951-f0ed-422b-bf4a-2aa199f22c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5a:d7:80:f0:90:bf:3d:3b:88:70:78:23:18:
                    7f:ad:d7:df:c0:14:cb:a9:59:54:87:c2:f4:e5:a5:
                    55:db:a5:5d:22:b6:fb:c1:13:81:4a:45:e2:05:c0:
                    e0:16:dd:92:72:f6:8c:36:dc:c6:49:dc:46:a3:bc:
                    d2:26:db:15:8b:bf:ea:58:86:8d:97:64:80:cd:fd:
                    26:a7:d7:e6:89:a7:1f:dd:92:a7:52:b7:c2:d1:fa:
                    e5:9e:64:00:17:db:33:59:10:a4:61:5d:bb:88:1d:
                    62:f4:03:b7:cf:10:2b:bb:00:15:8f:94:b8:99:40:
                    c9:41:d5:0f:64:0c:85:dd:f5:60:72:8f:b5:7f:c3:
                    2a:7e:28:a9:5b:00:f0:2d:e9:fe:35:84:9b:5b:f8:
                    e3:16:3e:94:10:9c:44:b4:65:a6:66:b6:9e:d1:3f:
                    26:67:9c:3f:fe:ad:a7:68:90:01:2a:90:fb:aa:fc:
                    2e:10:70:56:81:ab:67:a0:fc:01:c6:42:be:48:47:
                    6c:9b:42:4e:80:5a:dc:8e:ed:9a:a7:8d:7c:66:6e:
                    53:7d:21:74:9c:cb:bf:36:c9:82:29:9b:aa:ed:47:
                    71:18:0a:17:e6:5a:21:73:8f:25:ed:3f:d8:b8:3d:
                    0c:42:ac:dd:b3:44:ba:f7:24:10:39:b0:d8:9b:ad:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:18:2B:F6:DD:98:D3:EB:E6:B2:7A:9D:3C:6B:FB:60:A9:84:D7:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f55ae035-0414-3dc0-9550-7e8225d87917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:85:39:ac:41:7a:6c:ff:7c:20:ad:b8:e0:b2:9f:de:0e:bd:
         7e:c6:8f:16:63:97:68:b6:0f:41:5b:bb:17:c6:96:71:f1:24:
         54:e7:bd:f4:b7:95:d9:c6:6e:fe:85:39:88:0c:0d:c8:e4:f9:
         15:f1:91:24:a2:e8:cb:b7:f6:e5:90:73:ab:02:20:45:e6:6c:
         1a:71:d4:14:51:4f:b3:96:21:09:3a:97:51:50:b8:55:3c:90:
         5d:97:87:15:4e:98:cf:f0:d2:90:2b:ca:fb:6c:4a:3b:a7:39:
         75:55:77:62:8e:ff:3a:19:a9:e1:2f:c6:ba:a4:f7:22:07:d6:
         76:54:05:25:75:0b:b0:67:c0:37:f4:28:93:64:ea:16:41:3b:
         46:f7:7b:de:c7:dc:21:00:cd:7e:ef:03:69:1f:00:10:06:5f:
         d3:07:08:77:cb:c5:ff:3b:44:ae:a7:7c:b9:7e:c9:25:ff:65:
         a3:e7:58:19:9f:ca:16:70:42:1e:15:6b:40:99:e2:e1:77:2b:
         27:a4:3d:69:f2:70:e8:d6:4c:bf:98:b4:b1:cf:ff:49:fd:e5:
         33:07:4a:5b:10:79:4f:00:75:69:41:42:ce:98:76:b5:dd:c6:
         ec:c4:37:6f:ee:77:d1:82:d4:b0:4a:c2:a2:34:87:48:78:2a:
         f9:d0:82:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:38:36 2025 by rpki-client