Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fa08d3e-72f6-3560-bd21-8889c7567621.roa
File:                     1fa08d3e-72f6-3560-bd21-8889c7567621.roa (raw, json)
Hash identifier:          pqJfZdUFaokfBtk/0ZB27cvKE4TUAtjQcz4fawLaoG8=
Subject key identifier:   CB:18:90:53:0F:35:B1:5F:2D:08:D7:F9:67:56:6A:E2:1C:BD:3F:DF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784AFC4D3D50C58AD59D688
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fa08d3e-72f6-3560-bd21-8889c7567621.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.26.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:af:c4:d3:d5:0c:58:ad:59:d6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=193a3c20-b6fa-4171-91b4-b50a734b7b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:82:54:1c:f5:44:7b:68:4a:e5:01:cf:9c:f1:
                    cd:93:a6:d8:ee:79:d4:c3:f7:dd:75:3f:e5:26:01:
                    68:b6:a0:f5:9e:34:86:49:78:08:d3:22:57:21:25:
                    6d:4a:e5:f2:f3:af:74:af:79:c1:ae:11:da:f2:c0:
                    f9:c0:31:fe:9c:1f:4d:ac:5f:78:db:3b:71:cd:79:
                    58:2a:12:22:79:9d:e4:b4:c3:6c:23:54:0d:cc:0d:
                    2a:77:f7:94:7f:94:72:1d:62:c9:00:bf:dc:b6:58:
                    02:6b:a7:95:7f:32:51:a9:77:09:41:0b:7f:f4:0e:
                    f5:38:ca:cb:89:94:10:14:ec:5c:19:9f:81:04:63:
                    f1:ba:90:d0:5b:fa:91:44:96:97:14:f4:51:ed:a9:
                    70:a9:b6:84:5f:83:ed:99:2d:a6:80:ae:46:34:3c:
                    4d:11:3c:9b:a3:55:68:f7:b6:9b:63:1e:47:ed:3c:
                    75:8d:ad:98:d3:e9:86:fd:3d:5e:ef:d4:2c:58:73:
                    2d:5f:ab:73:d7:f7:44:10:36:14:28:e5:0b:eb:5b:
                    a7:b0:68:58:30:ee:c1:e5:02:b8:fa:d5:1f:d9:58:
                    4c:bc:f8:79:e2:d2:5f:3d:08:f0:5d:df:cf:ef:04:
                    20:c8:98:9d:10:6a:5c:0f:54:04:dd:e1:8b:e0:3f:
                    96:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:18:90:53:0F:35:B1:5F:2D:08:D7:F9:67:56:6A:E2:1C:BD:3F:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fa08d3e-72f6-3560-bd21-8889c7567621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:6e:6b:6b:d1:91:2a:6a:cd:d0:2b:88:a4:39:80:a1:00:f3:
         85:b1:3f:e0:1d:51:37:00:cd:15:2a:c9:a9:c9:fc:51:09:ed:
         ee:98:41:4d:41:ce:25:d5:e7:fe:43:14:c1:8b:c8:7d:8e:e4:
         60:35:aa:8c:da:20:31:40:1c:ce:5e:d4:5e:41:1e:a7:16:0e:
         ce:31:00:62:19:bd:25:46:55:8b:b9:72:84:ea:a1:61:7f:68:
         9b:07:e1:78:40:bc:05:59:92:d8:f3:4d:86:b1:cf:63:f2:6c:
         3d:c2:a6:c9:fc:37:70:72:c2:d4:95:3b:aa:0f:c0:9c:64:4f:
         7d:67:72:81:c9:9d:4f:91:a1:43:5f:af:c1:1b:a9:aa:67:d1:
         96:99:d6:53:ed:81:3b:94:43:72:6b:12:c1:e6:16:76:c5:d9:
         1e:ab:43:e1:96:18:f4:3b:22:33:eb:1a:9e:c6:b0:c4:72:af:
         2d:22:4d:6f:58:03:81:23:a0:ee:fb:0d:bd:96:40:cd:98:45:
         f7:7c:d6:35:5f:92:05:0a:6f:48:b0:36:f6:43:15:aa:49:69:
         6f:34:43:22:29:ea:e7:00:43:db:cc:24:9b:45:ec:30:cb:64:
         73:11:c3:9c:8b:61:85:0a:59:88:51:f8:04:94:9e:af:3b:1b:
         bf:83:60:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhK/E09UMWK1Z1ogwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
MTkzYTNjMjAtYjZmYS00MTcxLTkxYjQtYjUwYTczNGI3YjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoJUHPVEe2hK5QHPnPHNk6bY7nnUw/fddT/l
JgFotqD1njSGSXgI0yJXISVtSuXy8690r3nBrhHa8sD5wDH+nB9NrF942ztxzXlY
KhIieZ3ktMNsI1QNzA0qd/eUf5RyHWLJAL/ctlgCa6eVfzJRqXcJQQt/9A71OMrL
iZQQFOxcGZ+BBGPxupDQW/qRRJaXFPRR7alwqbaEX4PtmS2mgK5GNDxNETybo1Vo
97abYx5H7Tx1ja2Y0+mG/T1e79QsWHMtX6tz1/dEEDYUKOUL61unsGhYMO7B5QK4
+tUf2VhMvPh54tJfPQjwXd/P7wQgyJidEGpcD1QE3eGL4D+WvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsYkFMPNbFfLQjX+WdWauIcvT/fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWZhMDhkM2UtNzJmNi0z
NTYwLWJkMjEtODg4OWM3NTY3NjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRqoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVua2vRkSpqzdAriKQ5gKEA84WxP+AdUTcAzRUqyanJ/FEJ7e6YQU1B
ziXV5/5DFMGLyH2O5GA1qozaIDFAHM5e1F5BHqcWDs4xAGIZvSVGVYu5coTqoWF/
aJsH4XhAvAVZktjzTYaxz2PybD3Cpsn8N3BywtSVO6oPwJxkT31ncoHJnU+RoUNf
r8Ebqapn0ZaZ1lPtgTuUQ3JrEsHmFnbF2R6rQ+GWGPQ7IjPrGp7GsMRyry0iTW9Y
A4EjoO77Db2WQM2YRfd81jVfkgUKb0iwNvZDFapJaW80QyIp6ucAQ9vMJJtF7DDL
ZHMRw5yLYYUKWYhR+ASUnq87G7+DYLY=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:50:01 2025 by rpki-client