Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d38fb48a-3b06-39f0-9ff7-807d6d48ac78.roa
File:                     d38fb48a-3b06-39f0-9ff7-807d6d48ac78.roa (raw, json)
Hash identifier:          nnkFYuEXudsnSB89zs54XbvdUQfezYP2UPqzmuc0nlY=
Subject key identifier:   EC:0A:73:B5:9B:FE:A6:94:22:82:F9:34:B6:54:77:C6:5D:2B:32:79
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF44E4447ADAC639406240
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d38fb48a-3b06-39f0-9ff7-807d6d48ac78.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.30.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:44:e4:44:7a:da:c6:39:40:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=d7b1896b-6da4-4325-ad75-e8b4b7784a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:19:2f:40:f2:c5:c6:13:ef:57:8e:56:33:
                    53:f7:d0:00:55:b9:72:7c:f3:29:ce:da:35:3b:18:
                    0c:66:dc:09:7c:61:b7:4f:cd:75:3e:d0:f4:97:89:
                    81:b2:1e:00:d8:db:7f:35:32:3a:83:c9:b1:e1:bb:
                    e3:7c:e3:d9:e6:06:c8:60:e3:03:74:fa:c5:44:2b:
                    c7:6d:7f:2c:24:bf:28:45:ad:ea:4a:9e:86:44:c7:
                    0a:1b:22:2e:05:6b:76:60:e0:6e:7f:b7:13:9e:3c:
                    49:b3:39:69:30:23:d2:eb:53:76:e5:ee:3e:44:c3:
                    ac:2e:64:98:7f:54:38:88:b8:6a:c1:2d:01:1b:a3:
                    bc:d7:12:9e:56:83:f5:3e:0f:92:db:ef:9b:0c:fa:
                    e7:f7:db:2b:c0:cd:d4:0e:f1:cf:b2:9f:4c:cb:ae:
                    5d:a7:0d:92:89:2b:eb:b7:ed:fe:a5:c1:fa:c6:7c:
                    24:75:51:d2:df:9c:77:9f:d8:13:a8:a6:de:ab:f3:
                    49:22:47:1b:9d:c3:80:9f:0c:f9:57:49:3d:34:b2:
                    4c:af:cf:d6:99:35:f3:a4:58:b0:69:42:c1:fd:12:
                    39:78:d2:8e:56:00:26:ec:19:9b:60:df:9c:83:fc:
                    e1:3f:ce:56:f0:7f:32:cb:93:2c:2d:28:85:53:84:
                    fa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0A:73:B5:9B:FE:A6:94:22:82:F9:34:B6:54:77:C6:5D:2B:32:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d38fb48a-3b06-39f0-9ff7-807d6d48ac78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:7b:50:ac:f4:4e:cc:5f:d1:4c:f1:84:67:5e:15:18:ea:a6:
         a3:58:2a:0b:84:2d:c3:1c:be:54:0b:c6:a5:ca:b1:01:43:d3:
         37:8e:60:4f:bc:41:77:21:c5:7f:be:42:65:04:02:e7:85:68:
         fe:af:17:33:96:d6:ac:6b:ab:27:c0:e3:ed:a0:3f:e4:f1:f6:
         8b:ec:dd:05:6d:da:0d:09:e2:68:6d:c2:31:9f:4b:51:21:c3:
         8a:d5:1d:17:50:f8:bc:be:b5:bd:ac:af:93:8e:7d:ca:ba:e3:
         6d:2a:49:05:ba:46:67:43:c2:a6:29:06:c2:5b:6f:6c:09:cc:
         31:7b:c2:34:80:fd:96:a2:9f:40:6b:c2:05:6a:24:60:43:69:
         6e:9a:c9:5d:c6:58:a3:4f:d0:8c:f6:3d:37:7a:04:84:69:3f:
         35:d0:24:b9:18:a7:23:a9:31:c9:34:04:d4:4d:a5:8e:e0:55:
         e7:7d:14:46:4a:ff:16:9a:39:69:0f:34:84:b2:1e:d9:4f:8d:
         af:13:f3:45:d4:3a:21:a8:8e:5c:0d:c0:71:93:3b:1a:be:de:
         c4:11:99:40:34:a6:38:80:ed:9c:2f:67:8c:3b:ca:47:08:81:
         a2:9f:9d:1d:a7:5d:5b:40:7e:fa:88:ea:3c:4b:0e:f7:e9:fc:
         e1:46:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:47:32 2025 by rpki-client