Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c70626e0-362f-319a-b7b2-138520c79448.roa
File:                     c70626e0-362f-319a-b7b2-138520c79448.roa (raw, json)
Hash identifier:          kpaLEKVwTroeW956891nHSmx7+BfqzeB7KHUBYHwC+k=
Subject key identifier:   0D:A6:E9:3C:26:6E:67:28:D2:0E:F3:39:25:10:7C:38:B8:35:0E:78
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A7A4B60B832E9F4B5913D4400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c70626e0-362f-319a-b7b2-138520c79448.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     30036
IP address blocks:        173.30.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:60:b8:32:e9:f4:b5:91:3d:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=6309a278-6f92-43da-b92d-5cf56df8c395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:24:85:62:37:7c:65:47:93:62:dc:9e:70:6f:
                    ba:db:a8:86:0c:45:63:0e:b0:66:0d:29:1d:d9:d3:
                    06:25:66:2f:ec:c1:c3:7f:c2:ce:6a:84:fb:6e:4d:
                    91:14:a8:2e:c1:7f:c2:db:c8:83:b7:02:10:f9:5a:
                    23:37:2c:43:c9:49:cb:d3:63:1e:62:65:db:fc:f9:
                    5b:b4:a7:d6:f4:84:04:ab:93:ce:7d:1a:1f:cd:b1:
                    c4:29:0c:76:5b:bb:21:45:cb:d8:bc:50:db:8f:cf:
                    d2:82:b6:13:c6:2a:a7:bd:8c:20:63:5b:5a:3f:8a:
                    f7:18:f9:84:ab:4f:bc:88:e8:31:62:96:a9:13:d7:
                    74:27:85:86:3e:a6:79:02:29:74:ed:27:b4:07:86:
                    2b:3d:7c:00:32:6f:71:ef:47:7b:01:11:d4:bb:51:
                    0d:03:8b:50:6e:36:a0:fa:15:5c:08:d3:36:c3:a7:
                    b5:b0:b8:86:8d:2a:a9:55:a0:93:ce:e1:9d:58:16:
                    df:b4:9e:12:fa:36:f9:54:c2:26:5b:35:fb:0f:c9:
                    7b:47:a3:ef:67:c5:b0:07:a7:87:94:85:b9:12:6d:
                    05:11:bb:ef:86:75:71:78:fe:f1:3c:ee:97:4a:19:
                    bd:c5:4a:db:8c:52:1a:29:62:75:84:35:63:1c:07:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A6:E9:3C:26:6E:67:28:D2:0E:F3:39:25:10:7C:38:B8:35:0E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c70626e0-362f-319a-b7b2-138520c79448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e0:50:0f:58:14:ba:fc:6b:ed:74:33:e4:53:7b:07:87:40:
         f7:08:7d:5c:34:a9:fb:af:84:21:e0:42:79:93:37:3b:d2:74:
         f6:75:be:fc:a1:81:ba:c0:fe:bd:5a:de:14:38:2c:69:f4:4d:
         52:c5:68:19:1e:3e:4f:6b:ef:6e:f5:53:38:ee:e2:71:5c:48:
         fc:bc:d2:e3:19:83:7b:e5:18:0d:4b:54:85:88:68:68:65:6f:
         fd:5b:e0:7e:4f:be:ff:27:13:ae:fa:6f:6e:de:c1:a5:8f:b5:
         10:53:4b:cc:12:4d:17:16:68:55:6a:ea:62:02:b7:c7:9c:2d:
         16:10:21:76:88:23:91:6c:c6:e8:60:47:7f:f0:c6:8f:35:12:
         de:d7:9b:d3:d1:39:c9:91:78:cc:94:1e:5e:e8:e8:6d:56:c6:
         09:70:30:d3:62:68:5c:91:6b:ee:f3:c5:1e:b9:54:d1:ea:47:
         6f:34:a9:3a:8f:7f:b8:30:89:c9:b7:fa:d3:cc:58:76:3f:89:
         cd:22:35:f4:13:ae:a5:cd:29:4d:c8:07:3a:c0:e2:7c:2f:f1:
         c6:3a:9f:76:6f:d5:64:54:ba:4f:d3:bb:0d:dd:bc:4c:30:15:
         a0:d4:72:7c:4f:4c:bf:7d:2a:2c:c3:e7:e9:40:df:72:e4:ad:
         4d:8c:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:59:15 2025 by rpki-client