Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa
File:                     a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa (raw, json)
Hash identifier:          iLCuKv6MR5Leq0n7lm79J/fm39n0+ir6syB8oEE3Rxg=
Subject key identifier:   86:19:EB:29:91:DB:01:BB:AD:93:28:09:26:D7:52:94:12:AF:A3:8D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA025119B025E98A2B2600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.29.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:02:51:19:b0:25:e9:8a:2b:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=8bbca71f-25a5-4b95-999b-4022b2515d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:da:12:16:07:09:28:ce:e7:5a:02:f1:41:
                    a0:36:cd:db:60:53:9f:fe:33:7a:f0:95:f7:1f:60:
                    d5:b4:48:8b:a6:11:3a:b9:5a:05:24:ee:e3:12:03:
                    fc:69:ba:43:e8:36:93:52:ec:c3:99:e6:fd:8c:2d:
                    57:a5:a8:ab:94:9a:63:64:9a:7e:18:83:dd:e6:d0:
                    9d:60:f9:08:b3:72:a2:5f:8b:b3:6f:95:82:c0:a0:
                    0c:83:6a:29:ad:24:c7:ef:c6:76:3e:aa:a8:00:26:
                    9b:c5:64:c1:28:39:78:8f:7b:22:6b:9f:42:ac:8c:
                    2d:65:40:1f:1a:5a:25:a1:df:ad:ca:df:ad:de:23:
                    2d:75:97:ae:09:fc:4e:6c:e4:3c:1a:70:96:a5:1c:
                    a6:df:92:85:51:ca:35:da:87:bc:7d:33:9d:b9:83:
                    b2:4e:08:1e:54:19:05:11:01:41:4e:5f:f5:f6:e5:
                    64:82:19:b5:47:d9:26:51:b4:36:6b:d5:b0:f8:20:
                    2e:8a:46:08:ea:4c:77:96:a6:00:b4:fa:e1:2e:8a:
                    0d:2c:46:71:96:2a:b8:54:2c:4f:fd:2e:bc:3c:c0:
                    6e:84:28:0c:99:0d:fd:80:88:b8:8e:16:b2:cf:d8:
                    53:2f:c6:e8:40:75:07:1e:36:4f:c1:f4:f5:b2:57:
                    f0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:19:EB:29:91:DB:01:BB:AD:93:28:09:26:D7:52:94:12:AF:A3:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ed:02:c7:e8:f3:92:3d:72:9f:24:98:5b:a4:e8:e9:73:cb:
         e5:03:48:bc:b2:06:ee:31:80:ff:89:e9:e9:96:fa:51:e2:0d:
         9a:d9:4c:97:b7:72:40:08:6d:62:45:03:49:22:2d:83:42:ec:
         7a:e5:c9:27:6f:20:0b:60:6b:41:db:92:0e:23:b7:cc:7a:4f:
         09:5a:e8:8d:93:13:6f:91:ad:82:29:79:45:62:ba:68:4d:6c:
         7b:fe:e0:ee:61:75:f9:10:1f:6a:5d:39:80:68:35:4e:1e:cc:
         2f:58:d0:6a:8b:5d:ee:22:ba:2a:4e:61:85:10:48:84:0c:fd:
         d4:95:d1:f6:45:6e:d2:ea:31:a2:01:a3:29:4b:e5:08:14:01:
         b7:04:ca:69:f2:e2:dd:09:8e:7d:fd:1c:1c:6f:22:0f:81:94:
         c4:f5:85:41:a9:a5:c9:d6:72:a2:05:fe:df:67:7d:0d:d7:11:
         3a:ce:ca:32:f9:2e:45:e8:34:ce:0e:70:d6:97:13:e7:82:e1:
         7e:2f:ee:0b:8b:ec:10:a1:96:d7:5f:98:fc:b4:c0:86:e0:e6:
         a3:f4:88:33:f3:87:93:e4:9b:05:b0:a8:c6:d0:53:81:f7:f4:
         c4:25:d8:02:49:ca:8e:db:e7:a5:22:ae:35:6e:63:88:53:e9:
         a3:80:60:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugJRGbAl6YorJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
OGJiY2E3MWYtMjVhNS00Yjk1LTk5OWItNDAyMmIyNTE1ZDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jjaEhYHCSjO51oC8UGgNs3bYFOf/jN68JX3
H2DVtEiLphE6uVoFJO7jEgP8abpD6DaTUuzDmeb9jC1XpairlJpjZJp+GIPd5tCd
YPkIs3KiX4uzb5WCwKAMg2oprSTH78Z2PqqoACabxWTBKDl4j3sia59CrIwtZUAf
Glolod+tyt+t3iMtdZeuCfxObOQ8GnCWpRym35KFUco12oe8fTOduYOyTggeVBkF
EQFBTl/19uVkghm1R9kmUbQ2a9Ww+CAuikYI6kx3lqYAtPrhLooNLEZxliq4VCxP
/S68PMBuhCgMmQ39gIi4jhayz9hTL8boQHUHHjZPwfT1slfwZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIYZ6ymR2wG7rZMoCSbXUpQSr6ONMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTNhYzBhNjktMTk4Ny0z
MDMyLWJiZTUtNGY3YmE4MDc4M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR1cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTtAsfo85I9cp8kmFuk6Olzy+UDSLyyBu4xgP+J6emW+lHiDZrZTJe3
ckAIbWJFA0kiLYNC7HrlySdvIAtga0Hbkg4jt8x6Twla6I2TE2+RrYIpeUViumhN
bHv+4O5hdfkQH2pdOYBoNU4ezC9Y0GqLXe4iuipOYYUQSIQM/dSV0fZFbtLqMaIB
oylL5QgUAbcEymny4t0Jjn39HBxvIg+BlMT1hUGppcnWcqIF/t9nfQ3XETrOyjL5
LkXoNM4OcNaXE+eC4X4v7guL7BChltdfmPy0wIbg5qP0iDPzh5PkmwWwqMbQU4H3
9MQl2AJJyo7b56UirjVuY4hT6aOAYPk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:58:29 2025 by rpki-client