Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/929822f3-42bd-33df-b757-5dc8d7836d89.roa
File:                     929822f3-42bd-33df-b757-5dc8d7836d89.roa (raw, json)
Hash identifier:          5iTcX4gtRAjpUkjJ9E1GY2UleP9Wj71cuN2kc6K6vug=
Subject key identifier:   50:B1:F1:64:83:F7:79:86:7B:9D:C6:0A:FC:0B:83:34:37:6E:F7:39
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF59E78A98AD0DBD150C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/929822f3-42bd-33df-b757-5dc8d7836d89.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.23.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:59:e7:8a:98:ad:0d:bd:15:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=80e653f2-df12-4c44-a9be-761afaa2a478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:3c:cb:9c:43:18:dd:82:30:74:a7:5e:5f:
                    5d:9c:58:cf:38:32:81:df:0d:29:73:15:61:3d:90:
                    5a:56:21:62:12:13:ca:b1:b4:f7:93:10:53:39:75:
                    21:78:07:91:98:46:51:90:56:04:4e:a2:a1:32:4a:
                    12:a3:a5:22:e1:f5:58:63:83:63:22:79:84:9f:27:
                    24:c3:6c:71:4d:de:48:5b:ab:da:10:b7:37:57:e7:
                    2d:51:2a:7c:5c:1c:2f:44:58:19:9e:c1:5b:06:7b:
                    d4:4e:de:f9:b7:0f:8a:50:a2:a3:d0:94:65:74:fa:
                    c3:12:81:84:32:44:e7:49:a5:ef:07:76:4a:21:e8:
                    13:39:f2:76:6a:86:43:9c:ca:82:41:99:21:7f:cc:
                    33:36:c9:af:7b:34:d7:5b:46:65:d8:4a:78:fb:66:
                    fd:93:b6:f5:79:cf:f6:0e:d4:75:9c:06:c7:96:53:
                    9e:24:9b:cb:a2:2a:06:56:5f:79:61:95:58:c5:c0:
                    7f:94:63:dc:03:68:38:8e:f8:ff:75:95:34:53:10:
                    5f:8f:7e:37:8b:3b:29:18:9e:41:8e:67:8e:c0:32:
                    71:e4:20:39:62:ba:65:51:3b:fe:74:a5:5f:a9:16:
                    5f:0b:ca:3a:fe:e7:c2:e8:76:f6:d3:dd:15:61:26:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B1:F1:64:83:F7:79:86:7B:9D:C6:0A:FC:0B:83:34:37:6E:F7:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/929822f3-42bd-33df-b757-5dc8d7836d89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:bd:01:87:9e:37:8f:9e:44:6e:74:9c:c8:55:a4:63:5e:14:
         f9:47:e1:7c:10:9e:c3:3d:92:2b:a2:a8:df:23:74:84:bb:3c:
         cb:13:7a:42:c0:32:0f:78:86:63:db:17:85:ed:3f:8c:ef:48:
         da:5e:58:1a:5e:91:f8:ef:cc:8d:8b:54:14:78:32:e1:ed:8f:
         d0:3d:be:77:d0:77:d3:ac:74:e2:cd:fb:31:81:56:bf:44:9e:
         87:88:2f:41:4d:aa:22:e5:d6:a4:6b:5a:48:6d:72:c7:c4:4a:
         da:87:71:61:a4:51:54:00:43:2a:cc:22:7f:de:39:dc:72:07:
         f3:3b:50:e0:81:32:ee:26:c1:39:4e:16:58:72:5a:49:a7:7a:
         ee:1e:a5:3a:a7:68:03:28:5a:8a:b2:6c:a7:a3:3b:c6:81:ce:
         04:ad:7f:64:03:28:d9:f6:78:71:cb:65:74:65:eb:be:cd:39:
         af:ec:00:6d:d6:c7:11:0f:6f:5a:a2:e9:7e:f1:14:ab:5a:04:
         60:c1:3b:73:8f:87:f5:e3:cb:69:f5:ab:ad:2d:f8:d7:13:24:
         fb:58:d5:b6:ec:e6:3e:b4:15:5f:98:d2:64:42:48:63:61:47:
         ff:7e:c3:8c:3e:a0:2b:56:43:71:9b:b4:49:1f:5c:60:b3:ee:
         43:39:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:02:48 2025 by rpki-client