Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8adf44e6-3feb-38e9-8196-878316b78a26.roa
File:                     8adf44e6-3feb-38e9-8196-878316b78a26.roa (raw, json)
Hash identifier:          IQc6kydIGlL73XmjrULfvmIDEnucEOb+kL06bQOgnoY=
Subject key identifier:   7D:1D:D5:D0:E5:C5:85:E9:EF:4C:D6:53:18:D9:CC:97:B8:98:E7:D8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA41AEF36F4786B6131A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8adf44e6-3feb-38e9-8196-878316b78a26.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        150.195.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:41:ae:f3:6f:47:86:b6:13:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=de2f637b-c944-4090-8831-332d729a451e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:03:6e:4a:57:16:0e:5c:4c:c9:c3:b8:e8:
                    54:dc:04:26:13:ca:28:90:f6:71:41:56:ad:21:e8:
                    5d:2a:5c:7f:2e:74:ff:64:66:59:f5:47:ab:b9:18:
                    3f:3c:20:81:9b:80:16:d7:db:57:a1:fa:8c:85:b2:
                    d8:7a:58:32:4d:6c:6a:be:6b:3c:7c:ea:22:2e:44:
                    23:32:41:2f:ca:8b:65:a4:08:9c:26:47:be:47:30:
                    92:fe:b7:ef:71:62:9e:ff:cc:75:b8:a5:5b:02:ef:
                    3a:35:b6:9c:cb:ae:92:0f:34:c6:ad:16:e2:ec:ea:
                    63:b9:86:94:1b:d7:db:e8:68:1f:6f:be:31:32:f4:
                    a3:c1:65:10:2c:c5:56:7f:c2:0c:27:88:31:02:7f:
                    c3:7b:03:65:5b:97:e5:11:6c:45:dd:cf:3c:b6:44:
                    e7:54:33:6a:b3:0b:1c:5f:14:1e:92:02:a8:da:15:
                    d2:a8:e0:26:33:ee:58:19:cb:e7:02:f6:f1:ac:fb:
                    ac:03:62:3b:f7:65:00:fa:71:24:60:5c:5a:69:e7:
                    cb:e1:7e:80:93:5f:dc:ab:f1:87:b6:a6:b5:6f:82:
                    dc:35:dc:c5:b9:3d:4c:f6:cc:f6:1d:d3:19:54:97:
                    ab:bd:bb:22:c8:a0:ad:03:ea:02:8f:5b:35:fb:bc:
                    3f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1D:D5:D0:E5:C5:85:E9:EF:4C:D6:53:18:D9:CC:97:B8:98:E7:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8adf44e6-3feb-38e9-8196-878316b78a26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0a:5d:80:24:20:87:4c:eb:ed:92:a3:77:57:25:8f:3a:cc:
         56:1a:24:5f:02:30:f6:45:31:81:0d:3d:67:8c:2e:ee:06:60:
         f7:74:59:bc:8f:09:e7:77:0f:28:ac:77:1e:21:5b:89:1b:c7:
         af:2f:f0:e2:06:21:a6:4c:67:54:db:cf:87:c9:50:09:5b:ff:
         4f:2e:8a:06:33:53:7b:2c:60:7c:6f:16:71:76:86:59:43:8f:
         49:9d:99:0c:51:eb:3f:88:81:10:24:cb:99:16:12:ea:68:b2:
         8c:ab:3a:68:42:31:1f:ae:4e:12:a7:12:f5:d1:69:cc:dc:f6:
         f8:ff:b4:ba:8a:19:3f:c9:20:88:48:f3:cb:0e:3f:0a:92:3d:
         91:ef:2f:90:9b:27:af:c1:9a:bc:04:ba:a2:b3:19:d8:f2:a5:
         a5:91:6f:84:61:42:c4:f9:3d:10:60:d3:ee:ec:0c:b5:e2:94:
         10:73:a0:a4:62:95:c1:fd:79:cf:d8:e3:15:57:a6:13:0f:a1:
         2f:c5:49:4b:c2:43:fd:95:3c:c1:ff:a4:95:29:2b:4d:1f:0e:
         1d:37:6d:01:40:1a:1c:20:eb:24:41:fa:50:69:45:95:29:c3:
         fd:7a:cd:24:11:7e:38:55:97:0a:96:a6:4b:ff:8e:d3:24:83:
         22:2f:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:43:47 2025 by rpki-client