Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/69769365-3e57-3eba-a37f-a8189ec767cc.roa
File:                     69769365-3e57-3eba-a37f-a8189ec767cc.roa (raw, json)
Hash identifier:          6IRpsmJqvxunih58/Gw4pArxCvvLUbUGPVLQjCzDgmE=
Subject key identifier:   26:25:81:CA:89:1C:09:49:38:F3:D8:9E:10:10:0E:22:9D:D5:22:CF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA058430901D65C4A97F90
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/69769365-3e57-3eba-a37f-a8189ec767cc.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.16.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:05:84:30:90:1d:65:c4:a9:7f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=717fbb5c-7329-4b73-8de6-4a4df15282d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:be:72:8a:16:42:ac:b6:15:9c:6b:d9:50:48:
                    06:47:90:db:55:fb:4d:7e:ef:0f:41:db:1a:ea:1c:
                    4e:a6:d1:b0:be:36:10:b1:fe:9c:67:db:d4:44:d5:
                    12:ce:24:65:63:f0:e0:48:95:bc:62:2f:bd:ad:24:
                    04:97:c6:8f:fc:e0:d8:54:f8:c2:4f:61:c0:89:08:
                    71:fe:b3:6f:f0:b7:bc:5f:58:19:dc:02:48:6a:d7:
                    98:37:ce:a9:9b:66:7b:25:58:ae:86:c0:6b:91:95:
                    ed:a0:09:b3:14:6e:c2:8c:be:3a:3c:2c:1a:64:3f:
                    15:fe:54:ba:1e:db:43:6c:35:ab:db:0c:a9:5c:b8:
                    76:2b:c1:b1:e0:62:6e:ad:03:5c:a8:33:a5:a4:c5:
                    07:4f:91:c5:02:0f:37:1a:f3:47:37:3d:2e:60:04:
                    64:82:ca:f8:67:e3:20:5f:88:5c:43:d3:89:9d:c0:
                    2c:72:46:96:bf:2c:dc:17:2e:dc:b8:9d:86:99:ba:
                    d4:88:b1:e2:99:86:d5:4e:ab:aa:36:25:69:a1:2a:
                    7d:c4:e6:18:80:e4:f0:f7:5c:a1:39:fa:18:29:5e:
                    c7:1a:e2:37:f9:5e:0d:24:fa:ca:43:a1:45:c4:b9:
                    45:a9:ec:aa:46:28:00:84:c3:1d:e7:a3:61:ca:70:
                    c2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:25:81:CA:89:1C:09:49:38:F3:D8:9E:10:10:0E:22:9D:D5:22:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/69769365-3e57-3eba-a37f-a8189ec767cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:08:68:d8:52:da:5f:7e:36:bf:c0:23:68:fe:93:ba:d1:22:
         16:08:63:b5:5f:2f:be:24:22:bf:fd:9a:ba:47:7c:6b:0d:91:
         c4:27:38:ee:fe:f7:32:5b:89:71:12:f2:6b:e3:bd:e6:eb:df:
         1e:c3:ab:16:d8:01:2f:fe:da:85:86:d2:b3:97:44:c3:bd:e5:
         11:bf:02:7e:1f:98:e1:08:ca:d4:f0:92:5c:48:ed:42:99:1c:
         ce:9f:75:e8:34:e9:a2:b0:7e:75:72:c0:53:f8:d4:9a:98:ad:
         58:bb:5e:a3:47:18:2d:36:7f:9f:9a:b1:85:88:f1:e2:a6:4e:
         30:ba:f1:ca:6e:d2:52:61:0b:93:8e:e2:ce:6d:c0:c0:9b:2d:
         43:eb:d1:53:09:00:99:e9:7d:19:d0:65:4b:3a:8c:c7:8b:be:
         47:25:d8:c9:ed:ad:ec:f4:78:e8:11:c3:dc:2b:e8:44:26:7f:
         e4:f8:3b:31:80:26:d1:d7:cd:5f:2c:83:57:75:fe:10:46:e9:
         4a:f8:a6:ef:3c:fe:f4:ab:ce:c5:cc:38:22:99:e6:4b:4d:ac:
         c2:17:19:76:c9:c5:1a:d8:fc:8f:0f:34:4c:29:5b:e6:6a:e8:
         18:ea:0d:2f:1c:be:51:27:0c:29:38:2d:4b:6a:a3:7f:9b:5f:
         93:66:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:12 2025 by rpki-client