Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/668c8c31-484a-32b7-8fa9-88be949cef58.roa
File:                     668c8c31-484a-32b7-8fa9-88be949cef58.roa (raw, json)
Hash identifier:          X7S74xo5+UneshVXFRDq+499BrpgL1nIzbsiQQqYTZw=
Subject key identifier:   FE:70:43:D6:38:43:EB:2B:97:7F:1C:DF:B8:9F:9B:79:A6:C2:B2:38
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584996C497E1A1D71B914F14AD78
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/668c8c31-484a-32b7-8fa9-88be949cef58.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.30.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:97:e1:a1:d7:1b:91:4f:14:ad:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=d15b1203-3163-4774-a6fe-b42d6ac38947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:67:d4:fd:48:cb:bf:ea:00:36:70:03:65:
                    61:7e:1f:c9:bc:21:ae:b4:49:79:96:9e:05:06:71:
                    bb:6a:0d:0c:12:99:20:95:d2:68:5a:ed:f6:14:e7:
                    c0:c2:5f:c6:cf:c3:b5:72:35:5b:c4:7a:43:e6:6d:
                    aa:8e:85:d7:c8:ea:01:79:7f:9c:4c:b6:14:71:83:
                    f6:5c:10:15:0c:56:8b:f3:34:48:5c:d4:65:9d:c5:
                    f5:66:28:23:af:c8:4b:2c:7e:8e:75:4e:7c:13:61:
                    54:bd:13:ab:18:b3:16:d6:4b:31:dd:9e:0b:d9:e5:
                    f2:73:3c:2f:6e:72:2e:fb:2a:da:54:80:e2:96:e6:
                    6a:e8:14:57:48:a2:37:d6:71:c5:44:52:e9:71:38:
                    8d:00:ec:d2:ab:5e:f6:bb:c6:2c:d1:51:25:69:e7:
                    60:80:d8:b0:43:f7:8a:c6:42:ba:c8:49:56:59:18:
                    47:16:30:8d:fa:58:e1:30:71:84:0b:94:04:40:9d:
                    93:f8:f9:e6:e2:34:0e:a7:69:37:3c:1c:b8:d8:df:
                    a6:56:ac:68:b3:0c:f5:30:92:4f:6a:0a:af:e8:33:
                    56:bf:af:3b:a7:ec:68:7f:12:2b:26:42:9f:3f:4e:
                    ff:61:41:d2:97:11:47:4d:65:c4:ba:c0:8d:9b:35:
                    68:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:70:43:D6:38:43:EB:2B:97:7F:1C:DF:B8:9F:9B:79:A6:C2:B2:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/668c8c31-484a-32b7-8fa9-88be949cef58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3a:9d:48:86:dc:13:dc:92:f9:36:61:8f:1b:bd:d8:f6:8a:
         31:a5:b8:31:d9:49:a7:62:03:94:89:c0:49:fc:60:7b:f3:bd:
         66:86:de:56:1e:fc:7f:5c:a8:42:15:25:62:43:21:86:48:4f:
         a3:29:25:f2:7f:03:31:e7:25:38:b6:f4:86:e8:71:2e:4b:55:
         24:d7:19:33:75:ab:be:b1:64:cc:42:c4:13:45:2c:74:bf:a4:
         b0:ba:10:ff:3b:db:e8:ba:ba:75:4e:29:35:3e:84:fe:ac:4f:
         15:0c:c6:b7:9d:96:39:70:e5:95:9d:11:6e:90:29:de:9b:20:
         0a:46:28:b2:40:4b:0d:25:49:27:7b:90:8a:8a:25:db:a6:d7:
         ef:97:23:cf:06:82:8f:4f:0d:d8:3f:73:dd:1b:01:2e:91:53:
         2b:9e:55:77:b5:54:51:9e:0a:d2:35:4e:77:18:f0:e5:ad:b1:
         84:ec:40:2a:d4:e6:66:5b:62:41:a0:e5:05:0c:7e:78:96:e4:
         ca:b2:41:7b:f2:f6:be:f6:a7:00:a7:e3:24:ad:61:7a:23:3b:
         59:74:f7:40:8c:bc:a0:14:fb:43:c0:0e:65:1c:66:ae:5e:7a:
         70:04:f4:63:1d:bd:9e:7a:34:4e:74:7b:de:ae:f9:37:8a:83:
         13:9e:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:11 2025 by rpki-client