Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fec475c8-b7e4-3597-a983-df397380ca07.roa
File:                     fec475c8-b7e4-3597-a983-df397380ca07.roa (raw, json)
Hash identifier:          JoKEGQA+hTDJQh6C8fOCKiXHB1mXKEo10L2bUaz1gTI=
Subject key identifier:   DE:D1:CB:19:D5:92:E7:36:B8:66:8A:19:1D:1C:20:E8:10:30:94:BF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584996C49607D9224058433D6A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fec475c8-b7e4-3597-a983-df397380ca07.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.24.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:96:07:d9:22:40:58:43:3d:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=861e5983-9679-487b-ac53-fa82b53af366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5e:0f:68:b9:86:20:1c:a8:6b:8b:d4:20:02:
                    76:bb:0f:91:2d:75:f0:5e:e1:a3:28:b1:ac:fe:76:
                    3e:22:9b:bb:72:27:40:81:70:98:cc:49:b0:10:b8:
                    a5:e4:e5:bf:9a:fc:57:c1:c0:e4:f6:9f:c4:25:dc:
                    7c:33:8a:7c:09:fe:3b:0d:4a:b5:e5:66:96:41:3f:
                    5b:e2:4d:0d:3f:b3:74:b1:12:bc:ab:a0:f6:f6:41:
                    24:88:fb:b1:11:b7:b5:14:92:42:5c:76:bf:c7:c0:
                    2a:a8:ca:33:78:99:1c:d0:d1:da:2f:33:f9:6b:58:
                    84:a5:a1:eb:2f:4b:1a:23:61:26:2d:74:f3:b3:5a:
                    7c:f1:a6:a2:39:d2:a1:da:91:db:c6:95:69:cb:5a:
                    73:1d:17:61:41:0e:9d:ed:7b:e5:8e:11:6b:ec:52:
                    2a:39:49:a9:38:27:dc:1f:46:df:ee:4f:c7:45:bf:
                    26:b3:80:3d:cf:17:a8:19:55:4b:ed:34:04:f0:d5:
                    d3:1f:aa:22:ef:12:cc:b5:74:df:c3:bc:89:c4:72:
                    46:1a:98:54:df:f6:d2:68:cd:d9:5b:25:06:3c:68:
                    5f:cc:dd:4e:06:78:f5:00:90:2e:23:dd:01:2f:20:
                    66:5c:e9:3d:7a:c0:7c:9e:5b:43:b6:f2:6e:30:7c:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D1:CB:19:D5:92:E7:36:B8:66:8A:19:1D:1C:20:E8:10:30:94:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fec475c8-b7e4-3597-a983-df397380ca07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:0e:52:34:85:87:8c:e6:05:d6:38:cf:11:f2:e5:91:02:3f:
         2c:a2:b9:57:09:91:d2:a6:c5:39:08:cd:3b:31:1a:9e:22:fe:
         27:1f:05:fe:bd:36:99:11:68:da:e0:be:db:03:d7:f4:a4:e4:
         db:3c:5e:53:cb:69:bf:68:db:b0:50:67:e9:19:ac:b7:40:81:
         e7:00:af:da:9c:7b:46:21:6d:d2:7c:7f:87:2a:7b:f5:7f:5a:
         12:88:86:8b:78:bd:de:59:bf:70:f8:c8:12:4a:5b:e4:fd:4a:
         1e:59:9d:9a:39:73:f4:73:91:60:62:1a:af:f4:9f:be:0d:ac:
         34:12:58:c7:1e:c7:3b:ac:17:ac:c5:4f:c8:e5:e1:03:f7:db:
         45:aa:14:f7:a6:27:d0:33:fc:82:9a:75:51:b8:16:6b:02:7e:
         d0:e2:b9:19:be:77:7d:f5:84:99:4e:c9:69:73:dd:4b:9a:6f:
         0a:44:ef:1b:db:44:72:98:4e:d2:ac:95:50:ab:ab:e9:13:e0:
         80:a8:8c:f1:8f:90:9d:58:00:42:f4:99:08:26:d8:d6:d9:2e:
         6e:95:15:0e:ef:6d:0a:e4:5b:5a:73:8e:29:d8:ea:95:37:1d:
         50:16:94:3d:7b:28:98:87:0f:56:a0:7d:8d:86:fe:b5:09:26:
         e1:b9:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:15:45 2025 by rpki-client