Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0007240a-f637-322f-9aea-35b99d46ffde.roa
File:                     0007240a-f637-322f-9aea-35b99d46ffde.roa (raw, json)
Hash identifier:          7gxAUxcTboFOfoC1e5V3SGdaaSmh59GhU+I1iS+DnMY=
Subject key identifier:   E3:E9:77:75:66:6B:2E:94:38:62:D3:7C:BC:4B:AD:A1:E0:EC:0E:83
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410D7EFACFBB91430038780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0007240a-f637-322f-9aea-35b99d46ffde.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.23.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:d7:ef:ac:fb:b9:14:30:03:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e58dbae6-6716-48d0-9532-feaf1fbb7e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:eb:11:bb:48:53:be:1f:47:cc:55:f6:0d:b5:
                    47:7e:21:89:b7:ef:a0:6c:63:60:81:33:7c:4e:3b:
                    57:ec:b2:b6:fc:a9:92:a9:93:de:03:41:ef:48:bb:
                    f4:f1:11:32:99:69:1a:a6:c2:cb:c0:f3:8c:db:15:
                    5e:52:6b:58:cb:ee:52:44:99:f8:28:1c:97:f9:ef:
                    a4:5b:57:97:87:4c:3d:a3:a8:07:a2:7e:37:1b:fd:
                    5a:52:f9:2a:f3:47:9c:8e:7d:18:16:36:4a:b7:57:
                    a3:b5:ac:e7:4f:55:d1:24:e0:2e:00:13:e4:51:10:
                    6a:82:52:fd:8b:da:ed:c0:93:3a:8a:b7:a9:29:70:
                    bb:fd:bc:75:2f:5c:3c:89:37:4f:48:49:d3:9c:3c:
                    43:39:2b:a8:0e:c8:d1:3b:77:08:75:06:e3:f4:23:
                    a5:b2:b5:d8:d0:61:0f:d1:1c:52:2f:65:25:c2:06:
                    ae:97:af:35:5a:ec:7a:b6:24:eb:34:9b:2e:df:f1:
                    da:a6:d9:d2:03:85:f8:e2:fc:ec:12:b6:22:2a:fb:
                    4b:f6:08:2d:e5:1d:9d:18:38:bb:f0:4c:f0:c3:a4:
                    3b:6d:6f:5f:2a:c5:dc:4f:b5:1b:14:ea:5c:15:77:
                    d4:27:d3:03:a6:b5:c6:a7:4e:9b:05:50:36:49:ac:
                    8e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E9:77:75:66:6B:2E:94:38:62:D3:7C:BC:4B:AD:A1:E0:EC:0E:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0007240a-f637-322f-9aea-35b99d46ffde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ae:3c:61:65:76:1c:bf:e6:f0:85:7b:19:ae:46:df:52:d5:
         5f:fb:e5:3e:b9:95:6d:ea:c0:83:5c:01:38:20:93:92:98:4e:
         66:68:ce:e1:1b:e1:4e:ec:aa:11:0a:d0:b3:1b:22:57:63:7f:
         3a:90:d7:d6:bf:63:ad:d0:45:83:83:91:94:bc:66:36:9e:17:
         de:e5:7a:35:4c:d6:c1:db:db:56:19:5a:ca:a6:44:13:d7:4f:
         7d:ce:b0:67:ce:86:bb:48:af:35:e5:ec:27:67:c7:a0:43:db:
         84:b8:12:08:b1:47:b4:0c:9a:49:bd:a5:89:a3:55:b0:bc:4a:
         d8:14:42:e8:f4:6e:a9:f5:db:72:27:1c:c5:0e:c2:10:ac:0b:
         94:16:31:1f:d0:e9:19:ea:1b:1b:07:a0:d3:b6:cf:4c:91:48:
         7a:33:73:21:47:1d:25:0d:8d:83:c5:1a:e2:c7:22:16:a8:41:
         3a:29:9f:d1:8b:cc:d7:c6:76:9e:00:3a:83:7f:10:a4:02:b1:
         0b:fe:05:a0:7d:8a:fa:19:32:aa:ab:7d:a4:c0:e9:58:8b:29:
         49:9a:e4:e8:90:28:fe:9c:90:72:2f:b5:00:ff:3a:07:cf:f1:
         aa:08:2f:95:56:74:58:77:b6:8d:d5:0d:4f:73:43:7f:1a:58:
         c2:e3:10:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:14 2025 by rpki-client