Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10f7fd7d-0b6e-338f-8df8-a9e486e529f7.roa
File:                     10f7fd7d-0b6e-338f-8df8-a9e486e529f7.roa (raw, json)
Hash identifier:          Js/bRd8c+epgXYHNtU9+oP4cEm4qGMH6NY6wPv8A/yY=
Subject key identifier:   47:9C:B0:CD:29:D7:36:3F:DA:F3:08:72:E2:02:B4:26:97:1C:37:92
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C57F75EB25EA9EBFCBD9B700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10f7fd7d-0b6e-338f-8df8-a9e486e529f7.roa
Signing time:             Tue 04 Feb 2025 13:57:57 +0000
ROA not before:           Tue 04 Feb 2025 13:57:57 +0000
ROA not after:            Mon 05 May 2025 12:57:57 +0000
asID:                     30036
IP address blocks:        173.26.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:7f:75:eb:25:ea:9e:bf:cb:d9:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:57:57 2025 GMT
            Not After : May  5 12:57:57 2025 GMT
        Subject: CN=88c58115-30fd-461e-82a9-91627902f699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:06:9a:a1:cc:1a:4e:ac:94:c0:4e:cd:8c:
                    44:f3:a1:c5:13:72:36:eb:02:02:84:27:47:d5:46:
                    33:ca:ee:da:19:72:bd:9b:28:06:53:62:db:97:53:
                    cb:1a:93:cf:4a:14:24:30:fa:10:1f:c8:86:3a:5b:
                    5d:57:ef:03:4f:f0:09:3d:35:b1:58:ba:f2:58:6b:
                    a9:43:2d:1b:53:c1:b4:9f:9c:fc:d1:bc:0c:12:3e:
                    26:35:02:fb:b4:35:c1:2e:ce:73:68:97:8b:3b:5b:
                    e5:c9:bb:df:a9:07:18:7d:99:5b:a1:1c:71:20:e5:
                    73:83:dc:17:f9:9c:9a:c7:48:cc:76:ab:27:3b:21:
                    63:df:69:82:58:98:6e:bd:93:32:c5:c1:5b:71:69:
                    84:16:70:7b:e7:10:81:e2:a6:bc:62:30:09:96:0b:
                    89:cd:d6:d0:00:53:03:b8:18:04:ab:43:f3:46:6f:
                    68:d9:84:a7:b4:2b:b6:33:75:a6:f5:46:50:0c:a0:
                    de:63:04:c8:82:d2:af:73:f3:91:e2:ae:34:23:57:
                    9a:08:f9:cf:d5:8c:b1:2f:be:cd:80:0b:af:77:fc:
                    61:1c:8b:e9:47:ab:8a:e0:2e:32:1e:a5:e7:6e:36:
                    d0:ec:38:4b:b9:22:0d:eb:e5:10:59:98:e0:7a:5c:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9C:B0:CD:29:D7:36:3F:DA:F3:08:72:E2:02:B4:26:97:1C:37:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10f7fd7d-0b6e-338f-8df8-a9e486e529f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:86:e9:37:7c:15:39:82:0b:39:49:36:a5:8a:f4:91:ee:
         27:0c:8c:94:1e:4c:3b:cf:60:d8:e0:cd:a4:ae:67:f0:c6:95:
         fe:47:b2:36:95:fc:18:9b:fc:48:b1:f0:f9:d6:49:be:28:5e:
         5f:ad:fa:e3:c1:eb:04:a0:91:0e:0b:90:ff:11:3d:15:82:3c:
         6a:30:b8:53:59:6e:40:17:a9:02:23:a7:e1:e0:1f:2b:72:a9:
         24:09:d3:a5:64:45:b0:fb:35:4d:2d:62:75:6e:7d:bf:fd:0e:
         01:d1:cd:4a:17:10:01:a7:b0:44:ac:63:6d:ec:41:1f:f7:29:
         25:30:13:2d:85:e2:f6:ae:3d:91:2d:ae:fc:24:ea:97:70:ee:
         57:f6:5f:ae:9b:9d:3e:1f:aa:9d:5a:8e:f1:40:cd:c4:31:1b:
         a1:17:5f:a1:cc:d9:64:86:f0:49:79:1f:35:a5:0a:3a:f5:3f:
         28:ab:ba:32:6a:c7:bf:ca:21:51:4f:fa:79:ff:40:27:98:6a:
         f7:90:45:43:7b:bf:de:d3:73:8f:36:8c:d3:ac:49:85:2b:5f:
         0f:62:af:60:1a:f5:c8:1c:6b:f5:64:8f:f8:ee:b3:0b:3a:9d:
         52:8a:bf:ef:9d:4d:5d:1a:d7:df:79:24:79:24:3c:05:ac:57:
         88:d9:9a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:29 2025 by rpki-client