Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c1584e8-0ac9-362a-bb15-bff5a3dd15fb.roa
File:                     9c1584e8-0ac9-362a-bb15-bff5a3dd15fb.roa (raw, json)
Hash identifier:          5HCAhhdMlAd7YjN53NydWfz5r+Skedum0V4FTvhRxbk=
Subject key identifier:   FE:D1:64:86:13:B8:01:C8:75:06:9F:3F:5F:2D:B2:B7:DA:B8:CE:12
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784B92D6C072BF1ED80C280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c1584e8-0ac9-362a-bb15-bff5a3dd15fb.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.23.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:b9:2d:6c:07:2b:f1:ed:80:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=c86bde31-3ce9-49d1-bcd5-8b169a099034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:a6:83:57:13:e0:1c:c2:1a:4e:38:62:1c:
                    5a:15:14:fb:03:fc:22:73:ac:2d:79:04:99:41:d3:
                    cd:29:68:4e:b6:05:fc:5a:59:20:32:e3:7a:44:6d:
                    e3:49:bd:f6:28:e7:7c:65:e3:f1:51:63:c2:df:69:
                    43:e8:42:67:40:d6:67:32:34:2d:db:8f:c4:63:b9:
                    77:7e:85:38:07:70:95:fc:0f:ac:67:04:18:de:e3:
                    41:ec:16:86:08:6b:ad:98:31:5c:13:3a:01:e4:06:
                    97:8f:48:a4:e8:24:b4:23:12:ea:f2:1d:73:4e:7c:
                    c5:29:91:f7:e3:3f:56:ab:7e:77:b9:f4:d7:77:fb:
                    b3:09:8a:f5:4e:8a:2d:fd:b8:c0:32:a0:6e:0d:1e:
                    9e:67:bf:d5:8c:6d:84:1b:b6:e3:34:79:77:86:4d:
                    63:0f:2d:4b:72:f6:5d:8c:8c:e1:a8:0d:5b:86:49:
                    1e:da:de:49:cd:98:e9:7c:3f:79:71:4d:ff:d6:42:
                    1c:8a:c4:af:3d:f0:f5:79:9f:7c:ce:29:7a:cb:4f:
                    a5:c6:f3:bb:d4:8d:3f:9b:cb:2f:43:2d:fb:c4:d3:
                    85:ce:14:b3:a3:31:4d:56:79:8e:67:a7:61:79:8d:
                    33:0c:1f:77:e2:6d:5d:5d:5e:f1:02:98:36:be:45:
                    8c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:64:86:13:B8:01:C8:75:06:9F:3F:5F:2D:B2:B7:DA:B8:CE:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c1584e8-0ac9-362a-bb15-bff5a3dd15fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:47:1c:ff:4c:48:df:02:4e:5e:1b:af:11:6f:3e:25:18:66:
         17:4b:d0:b4:97:0f:8a:e5:03:de:2e:74:d0:1f:f5:07:27:76:
         2d:60:6b:99:c9:f5:9f:c4:01:18:ea:da:ac:64:36:d0:fa:1b:
         24:56:2a:f4:df:e8:0f:64:eb:51:bf:da:cf:d6:57:9b:2f:e6:
         6f:54:5d:e1:a9:ed:01:a0:4b:cb:cf:68:d0:01:20:ad:0e:dc:
         cc:86:56:ae:e2:d1:df:08:81:b8:77:d0:c1:97:86:42:05:17:
         71:82:19:fe:22:7d:3c:0d:9f:19:86:27:ac:9b:f4:da:ef:d6:
         cb:c2:96:00:d7:04:2c:37:a2:21:40:e2:b3:a1:e4:98:cb:fd:
         8b:d9:87:99:13:6c:76:17:49:b3:63:df:4a:ea:9b:d3:c3:20:
         69:2e:f9:01:bf:04:87:54:9a:8a:e8:41:77:d3:66:33:6b:02:
         25:93:1f:3e:19:82:a7:47:9b:40:f3:d8:db:9e:e5:50:55:de:
         6f:49:89:b8:a8:6b:32:42:c6:4a:54:13:c0:a3:d7:25:33:b2:
         fe:08:4a:34:d0:58:ba:24:d2:cf:2c:c3:27:b5:9e:ac:ac:ef:
         7a:11:ff:1f:83:b3:07:e7:54:67:f9:dd:14:ca:e8:f5:54:3d:
         81:ce:f5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:04:19 2025 by rpki-client