Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30eda228-7236-3666-806e-f710ee82789f.roa
File:                     30eda228-7236-3666-806e-f710ee82789f.roa (raw, json)
Hash identifier:          UDnIlvyxLAWLKdKmN6hizDuSBX83MohZ60h1/MP/7ZI=
Subject key identifier:   3D:CF:C7:E4:2F:D3:08:72:D4:C1:47:EF:88:04:11:6A:53:9D:BB:BB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA2DC3F13A49D847F36F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30eda228-7236-3666-806e-f710ee82789f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.29.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:2d:c3:f1:3a:49:d8:47:f3:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=9bd8940d-3ca0-4998-95f8-85b5b6537c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:ce:b5:c8:e4:13:9b:8c:9a:d9:18:78:55:
                    3c:e4:f4:db:69:7e:7b:4d:17:e6:a3:2a:4c:74:f2:
                    ca:e5:b3:f5:4b:c3:51:48:f9:d7:7e:62:1c:20:51:
                    45:7d:29:ab:a8:7f:e3:e2:0b:43:01:12:13:90:f4:
                    02:cb:30:b8:9f:96:41:05:db:46:e2:dd:ac:0e:bb:
                    2f:4d:9e:ee:e9:45:ef:90:7c:bb:0b:08:89:20:ad:
                    22:f7:cf:a7:70:1e:41:30:d6:0b:c7:23:36:2c:41:
                    c7:2c:4e:42:fa:91:a3:7f:73:a6:70:23:c4:6e:de:
                    07:0c:c5:26:30:ca:82:1c:fa:b9:07:e5:1a:8d:2e:
                    dd:ab:28:46:2d:13:c4:7c:b2:fc:4d:29:93:a0:47:
                    77:10:34:47:49:e8:15:49:a1:03:02:4e:fb:4b:16:
                    ad:22:5a:cb:5a:29:36:85:8c:ce:af:55:a4:95:0e:
                    02:da:c9:d5:b3:08:7d:03:d3:8a:72:be:83:93:c7:
                    0a:62:9e:5b:83:f8:ca:3b:8c:d2:3d:b7:09:c4:f8:
                    7c:c9:39:28:23:b9:e0:24:3d:55:7c:9c:20:00:ba:
                    d8:71:66:e4:9c:a1:98:63:b4:87:90:c7:ae:9e:2a:
                    85:71:8a:eb:a3:93:d1:8d:c0:ed:57:3b:1a:fd:e2:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CF:C7:E4:2F:D3:08:72:D4:C1:47:EF:88:04:11:6A:53:9D:BB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30eda228-7236-3666-806e-f710ee82789f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f9:7c:ee:00:a9:6f:2c:cb:a5:a2:ae:49:51:a6:4c:da:55:
         12:64:32:94:1c:c9:a3:47:87:30:df:d3:57:10:a2:d1:7f:1e:
         ac:cb:cf:f8:0f:13:4e:21:81:56:60:fd:0b:ed:99:c4:2f:dc:
         c1:d3:c2:1a:f2:78:f6:72:2d:7e:a5:c6:70:9e:b7:40:6f:7d:
         75:c8:1a:0b:6d:e8:3e:76:fc:7d:18:d8:72:c9:2d:0d:2b:a5:
         50:7a:37:e2:b7:c6:c0:3b:db:fa:3d:1f:9d:b9:c4:1f:d1:5f:
         5a:61:84:78:c1:b0:9a:f9:4e:20:24:63:a0:48:41:a9:ef:e7:
         de:53:81:53:46:37:66:2b:27:88:7b:77:98:9b:37:dc:d7:f0:
         07:e1:9c:ed:9a:43:ef:dd:d0:af:fe:f5:f8:11:6d:03:6f:a0:
         75:9b:ac:3d:6b:4b:23:bb:a4:0b:0d:87:50:67:62:14:40:68:
         f8:56:6a:d0:e8:05:74:05:80:46:4f:dc:5f:da:59:0c:a6:0d:
         d9:45:95:af:1d:ff:b1:70:a0:03:0d:bb:a8:95:ff:23:65:e6:
         3c:4d:12:0b:9a:3c:32:0c:d4:a2:66:9f:ae:96:93:a3:5b:ac:
         d8:22:8f:be:3d:a6:ec:ad:f2:a8:7a:41:a0:82:e8:6b:5e:f9:
         5a:ef:3d:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkui3D8TpJ2EfzbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
OWJkODk0MGQtM2NhMC00OTk4LTk1ZjgtODViNWI2NTM3YzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKjOtcjkE5uMmtkYeFU85PTbaX57TRfmoypM
dPLK5bP1S8NRSPnXfmIcIFFFfSmrqH/j4gtDARITkPQCyzC4n5ZBBdtG4t2sDrsv
TZ7u6UXvkHy7CwiJIK0i98+ncB5BMNYLxyM2LEHHLE5C+pGjf3OmcCPEbt4HDMUm
MMqCHPq5B+UajS7dqyhGLRPEfLL8TSmToEd3EDRHSegVSaEDAk77SxatIlrLWik2
hYzOr1WklQ4C2snVswh9A9OKcr6Dk8cKYp5bg/jKO4zSPbcJxPh8yTkoI7ngJD1V
fJwgALrYcWbknKGYY7SHkMeuniqFcYrro5PRjcDtVzsa/eLLawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3Px+Qv0why1MFH74gEEWpTnbu7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzBlZGEyMjgtNzIzNi0z
NjY2LTgwNmUtZjcxMGVlODI3ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR2sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFv5fO4AqW8sy6WirklRpkzaVRJkMpQcyaNHhzDf01cQotF/HqzLz/gP
E04hgVZg/QvtmcQv3MHTwhryePZyLX6lxnCet0BvfXXIGgtt6D52/H0Y2HLJLQ0r
pVB6N+K3xsA72/o9H525xB/RX1phhHjBsJr5TiAkY6BIQanv595TgVNGN2YrJ4h7
d5ibN9zX8AfhnO2aQ+/d0K/+9fgRbQNvoHWbrD1rSyO7pAsNh1BnYhRAaPhWatDo
BXQFgEZP3F/aWQymDdlFla8d/7FwoAMNu6iV/yNl5jxNEguaPDIM1KJmn66Wk6Nb
rNgij749puyt8qh6QaCC6Gte+VrvPWk=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:42:10 2025 by rpki-client