Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d3267ca-6e43-3335-8054-b8605f4ab679.roa
File:                     5d3267ca-6e43-3335-8054-b8605f4ab679.roa (raw, json)
Hash identifier:          VQGPtEA1Dn0uUN7LzVU8kE7CkXjL+53HAJPsaV3r5Sk=
Subject key identifier:   9B:F8:95:04:12:38:D3:1F:CC:31:9B:B7:C3:A7:09:E8:0C:83:18:23
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA020BB68E094881DF0C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d3267ca-6e43-3335-8054-b8605f4ab679.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.29.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:02:0b:b6:8e:09:48:81:df:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b6f91409-eab0-4eae-b653-92ef30a8f13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:6a:7b:d2:71:1a:cc:1a:9a:11:1e:e7:23:
                    a2:b3:3d:ec:2d:a6:7c:62:f0:67:28:a7:c9:ef:df:
                    14:e6:c3:74:1e:1c:f2:35:1c:1c:e2:f0:c8:e2:2c:
                    16:ae:52:78:ba:6e:94:bd:b3:ea:44:ac:7b:0f:89:
                    a3:6e:21:10:05:f9:88:67:84:1d:ff:b9:e5:18:0a:
                    40:a4:cd:bf:43:45:8f:7d:1f:2b:74:78:da:90:d5:
                    1b:b6:52:12:8a:bd:6d:ef:98:b2:66:c5:9a:66:dc:
                    e3:b1:6d:f1:b3:1e:94:96:a7:cf:1b:41:ac:5f:70:
                    a2:69:7c:72:92:3c:5d:4a:6e:43:b1:2b:9e:6a:be:
                    ae:ea:b4:34:bd:0d:e3:d9:12:c9:16:ac:0e:24:80:
                    50:28:c5:0c:d7:e6:20:5e:62:e8:0b:af:06:d0:7d:
                    a0:0b:ff:f7:b0:cd:3a:d7:f4:14:9c:63:04:80:2b:
                    a2:6e:cb:8b:58:bd:57:d3:1b:1b:e6:3a:e1:d3:ab:
                    5f:98:4e:37:5e:c3:6f:70:09:5b:a3:c9:02:e7:57:
                    ae:12:fe:92:0d:dc:67:1a:df:df:e2:e8:33:b8:eb:
                    86:38:7b:66:ff:58:f9:83:1c:d0:50:cd:9e:43:08:
                    76:99:a6:3a:fd:29:57:7c:41:7f:9c:c5:22:44:4e:
                    df:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F8:95:04:12:38:D3:1F:CC:31:9B:B7:C3:A7:09:E8:0C:83:18:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d3267ca-6e43-3335-8054-b8605f4ab679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:75:53:ee:b5:10:cb:ba:33:8d:c4:57:df:79:43:af:e6:e3:
         2f:66:87:39:9d:bd:2c:cd:9f:be:15:21:90:7c:bd:18:df:d3:
         ea:39:da:96:8b:a5:07:3a:49:d2:db:62:8c:29:f0:d2:94:83:
         bb:af:f4:22:e2:9a:ca:1c:1a:fa:02:0c:ee:a8:70:87:56:26:
         6a:23:05:90:6f:df:62:74:63:de:97:1f:1d:a9:60:d8:e6:14:
         73:42:ac:b0:30:9f:c7:2b:b8:6f:d4:21:70:30:2f:ba:b4:f0:
         6f:3e:8e:57:04:85:c1:5b:11:c5:fb:9a:d9:31:9c:6e:c2:bd:
         16:e9:6c:8d:d9:2a:3b:99:45:a2:2a:08:5b:0b:5c:69:40:9a:
         85:13:18:75:07:9a:2a:f1:3e:6a:99:17:3b:cc:90:b2:03:44:
         3d:e3:90:63:85:78:67:34:22:cc:04:8e:92:d9:db:16:90:c4:
         8d:ea:65:7e:6b:50:c2:1d:c0:4e:87:b2:e7:c9:0a:4b:97:fc:
         1c:53:12:d2:43:dc:f4:c4:92:6d:92:a3:46:09:f4:90:29:ed:
         4d:54:b5:00:6e:9a:3d:a7:04:fd:02:d4:37:19:1a:44:e4:3e:
         73:dc:80:da:0c:e2:eb:82:6d:2c:76:21:dc:a5:33:3b:2e:32:
         16:aa:86:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugILto4JSIHfDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
YjZmOTE0MDktZWFiMC00ZWFlLWI2NTMtOTJlZjMwYThmMTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Adqe9JxGswamhEe5yOisz3sLaZ8YvBnKKfJ
798U5sN0HhzyNRwc4vDI4iwWrlJ4um6UvbPqRKx7D4mjbiEQBfmIZ4Qd/7nlGApA
pM2/Q0WPfR8rdHjakNUbtlISir1t75iyZsWaZtzjsW3xsx6UlqfPG0GsX3CiaXxy
kjxdSm5DsSuear6u6rQ0vQ3j2RLJFqwOJIBQKMUM1+YgXmLoC68G0H2gC//3sM06
1/QUnGMEgCuibsuLWL1X0xsb5jrh06tfmE43XsNvcAlbo8kC51euEv6SDdxnGt/f
4ugzuOuGOHtm/1j5gxzQUM2eQwh2maY6/SlXfEF/nMUiRE7fjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJv4lQQSONMfzDGbt8OnCegMgxgjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWQzMjY3Y2EtNmU0My0z
MzM1LTgwNTQtYjg2MDVmNGFiNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGp1U+61EMu6M43EV995Q6/m4y9mhzmdvSzNn74VIZB8vRjf0+o52paL
pQc6SdLbYowp8NKUg7uv9CLimsocGvoCDO6ocIdWJmojBZBv32J0Y96XHx2pYNjm
FHNCrLAwn8cruG/UIXAwL7q08G8+jlcEhcFbEcX7mtkxnG7CvRbpbI3ZKjuZRaIq
CFsLXGlAmoUTGHUHmirxPmqZFzvMkLIDRD3jkGOFeGc0IswEjpLZ2xaQxI3qZX5r
UMIdwE6HsufJCkuX/BxTEtJD3PTEkm2So0YJ9JAp7U1UtQBumj2nBP0C1DcZGkTk
PnPcgNoM4uuCbSx2IdylMzsuMhaqhsk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:23:09 2025 by rpki-client