Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/44687928-8b9e-347d-a93c-4754ecdfc3f3.roa
File:                     44687928-8b9e-347d-a93c-4754ecdfc3f3.roa (raw, json)
Hash identifier:          73xPjXaqOQUbwm9Z2O7Pm0GrXbmVPaPzN73rDpwDgss=
Subject key identifier:   30:7F:B5:09:8F:68:18:C4:E1:63:29:AC:60:77:4F:B5:85:C4:60:F1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA36B64D157CC2F3320800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/44687928-8b9e-347d-a93c-4754ecdfc3f3.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.30.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:36:b6:4d:15:7c:c2:f3:32:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=95998968-fe40-449a-b84a-91c3885910cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e5:e0:77:13:82:d4:7b:49:64:ef:33:4a:33:
                    81:30:96:a6:75:ce:c8:c0:96:b3:57:d6:d0:70:74:
                    4a:ec:8e:8f:3e:a3:ed:3f:21:9c:f9:c5:ca:db:fa:
                    40:44:06:ba:38:7e:56:f9:bd:c3:ca:01:d3:57:4f:
                    44:74:37:29:72:4a:77:bc:f6:c6:c8:18:b9:e0:8f:
                    71:77:52:65:7d:f0:60:2f:e1:de:6a:84:d2:f1:0f:
                    13:ed:11:0b:77:7b:1c:99:69:b7:f7:c6:6a:41:7c:
                    61:b5:15:5e:d6:5f:cf:e1:92:4a:c5:0e:de:5b:c9:
                    05:f4:c3:4e:4d:f5:8e:17:b9:16:73:80:ae:a3:c5:
                    b9:df:5c:74:bb:ac:0b:eb:bf:4c:53:3f:5d:e6:79:
                    17:5e:39:29:ca:78:4f:54:da:95:88:b6:82:34:76:
                    09:65:59:9c:ec:6a:6c:78:dd:9c:06:f6:e8:c1:92:
                    1d:e4:fa:cb:ea:cf:e2:59:19:dc:29:a8:02:d0:3f:
                    7e:e6:72:79:57:98:d1:3a:d0:97:c4:8f:49:d3:84:
                    44:e4:1b:ee:17:65:a0:ef:ae:78:60:3a:8a:52:ad:
                    25:a5:55:e5:a0:a8:36:1a:f1:21:1e:1e:e0:52:b3:
                    72:3d:e2:38:5d:89:aa:d6:da:6d:42:c6:dd:75:a1:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7F:B5:09:8F:68:18:C4:E1:63:29:AC:60:77:4F:B5:85:C4:60:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/44687928-8b9e-347d-a93c-4754ecdfc3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:11:9e:41:15:98:c0:3c:22:72:9a:7b:45:e6:fb:c8:72:0a:
         59:6e:40:4b:92:55:44:6e:d1:5e:f0:59:ff:53:e0:74:8a:53:
         cc:b7:94:6f:3b:92:51:70:29:c3:10:0d:3a:49:d4:0a:27:6c:
         bc:e9:42:da:ac:64:0f:4f:c9:b2:fb:7e:59:af:b1:ee:73:c5:
         e1:69:e9:6c:27:2f:7b:43:bd:34:db:12:ab:8d:2e:46:f6:db:
         60:2c:71:e2:8f:06:fe:80:01:62:b5:aa:4f:f9:32:9a:7c:9f:
         79:c1:84:38:68:9a:4d:1b:7c:68:e9:14:49:57:1e:bd:d5:61:
         48:ca:f0:f9:4f:21:ab:6d:4e:58:06:44:4f:0e:f1:1a:17:4a:
         da:ee:e4:f5:29:f4:a0:27:6d:50:83:05:a8:55:41:85:28:7a:
         71:ec:71:ce:cf:18:02:ad:3f:e6:87:cf:1c:20:f7:e3:43:8d:
         bd:6c:b1:c6:a2:95:7f:6e:3e:23:1f:e3:16:49:75:dc:72:63:
         68:c9:df:33:d2:c2:af:67:57:76:4b:c9:a6:8c:d8:e4:76:1a:
         f4:de:10:bd:39:76:33:f3:96:a3:37:a9:c8:c0:a9:9e:dc:58:
         0c:91:75:3b:fa:38:d0:b2:67:99:14:07:e6:1b:fc:bb:05:24:
         97:e8:ca:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:57:21 2025 by rpki-client