Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d7952d29-caa4-3015-9677-c0e15c556386.roa
File:                     d7952d29-caa4-3015-9677-c0e15c556386.roa (raw, json)
Hash identifier:          g8dwN7TtrZSNb/TBqT0qPL+mLuGjOXlmMECvG5hccCs=
Subject key identifier:   C3:8E:2B:D2:80:58:E1:CC:84:65:7D:81:AC:28:42:5D:67:FB:5C:AF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF5EE2018A43E0F41D8980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d7952d29-caa4-3015-9677-c0e15c556386.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.31.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:5e:e2:01:8a:43:e0:f4:1d:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=08708d6e-bcdb-48c4-9a67-1c99928749c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:f3:58:93:d5:24:1c:32:ee:34:13:ad:56:
                    46:4e:b1:48:c1:0b:83:79:61:6e:45:51:16:81:73:
                    cc:14:f6:98:f2:75:5e:d1:eb:68:0d:c1:a2:94:4e:
                    74:35:62:97:a0:38:0e:95:04:22:fc:6d:1d:23:9e:
                    9f:2c:4d:3a:eb:24:15:57:31:25:71:ac:93:36:da:
                    56:bc:86:48:00:05:98:67:a5:47:aa:60:ed:26:39:
                    2d:0a:ce:fd:59:e9:34:33:35:e6:c0:87:3e:46:85:
                    3a:c0:ce:24:c4:e8:d6:a1:d7:29:c4:ae:0d:88:7c:
                    6e:b2:0a:a6:8d:41:19:e5:2d:b2:82:4d:8b:08:41:
                    73:bd:2e:45:78:a1:2b:96:84:d2:d3:4e:b9:70:14:
                    00:93:40:54:9f:58:b5:34:af:75:b2:24:26:48:df:
                    8e:16:89:3c:53:10:35:cb:0e:ea:fc:20:d2:1f:aa:
                    db:f8:f2:01:87:18:78:79:b1:fc:2a:95:6a:bd:4a:
                    c6:b2:bf:51:cb:eb:9f:8c:5d:7b:a6:65:fe:49:6c:
                    77:98:1c:df:15:b1:85:af:73:c3:7c:c9:c5:3c:af:
                    ea:f6:42:62:23:b2:32:ce:35:0a:dd:be:e1:a4:c1:
                    b3:d6:72:8a:c5:fd:67:ca:95:80:2e:d9:46:bb:47:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8E:2B:D2:80:58:E1:CC:84:65:7D:81:AC:28:42:5D:67:FB:5C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d7952d29-caa4-3015-9677-c0e15c556386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:0f:9a:0f:f3:ee:17:9d:e2:b8:06:0f:d7:9c:9e:c6:c1:49:
         b0:05:0c:b0:be:8a:81:6d:5c:1f:73:eb:38:b7:14:71:3b:61:
         83:4d:fb:a4:1a:de:89:f8:ed:0e:e0:6c:ed:34:2f:d5:fd:24:
         75:22:24:a8:fa:03:ee:c5:8a:7b:f4:77:f3:e7:6f:d6:23:d4:
         23:5b:8b:e0:42:87:91:1d:50:b5:7f:79:29:c8:27:e6:0e:01:
         15:64:d7:eb:c5:76:7e:b2:24:45:6d:75:36:d3:c6:83:e7:c7:
         00:8b:6a:08:ae:e6:d4:c8:65:94:f2:07:66:cb:70:db:5d:96:
         4e:8f:00:21:c8:68:cb:ab:ee:43:c8:4b:f1:09:72:38:b7:14:
         73:17:e8:36:5c:eb:c3:b5:40:bf:05:46:e8:f0:4d:0f:79:a6:
         9d:3f:c5:f0:3d:df:95:f5:67:96:d7:4f:70:56:10:7d:68:24:
         9c:ab:22:24:a5:c9:4a:6b:82:35:97:04:98:cd:f5:31:b5:fc:
         5f:a5:90:71:55:70:92:1d:f6:7b:c2:2f:df:d4:5d:c3:54:8e:
         51:de:26:b0:35:65:b1:76:e1:19:9a:46:35:63:cf:56:60:23:
         b5:46:32:9a:d4:f3:34:05:e1:64:a7:70:a4:84:c2:c8:75:f4:
         d0:8d:95:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:57:04 2025 by rpki-client