Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36b1e01b-64bc-3f78-b142-c73b7ca9503f.roa
File:                     36b1e01b-64bc-3f78-b142-c73b7ca9503f.roa (raw, json)
Hash identifier:          gLD8ojAQI9a/fychvMUooYb3vIoLEpvwqh0cfdtf5MI=
Subject key identifier:   BC:F8:74:0B:C3:27:EA:B3:FA:4A:C1:17:F6:EB:50:F9:0E:B2:36:F0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C260BF7A9C282ACDC3D55FC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36b1e01b-64bc-3f78-b142-c73b7ca9503f.roa
Signing time:             Mon 03 Feb 2025 11:08:39 +0000
ROA not before:           Mon 03 Feb 2025 11:08:39 +0000
ROA not after:            Sun 04 May 2025 10:08:39 +0000
asID:                     30036
IP address blocks:        173.26.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:60:bf:7a:9c:28:2a:cd:c3:d5:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:08:39 2025 GMT
            Not After : May  4 10:08:39 2025 GMT
        Subject: CN=978fa987-6983-44f0-902e-a03016cd0ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ca:1d:a6:c1:5d:20:f6:17:8a:47:85:58:55:
                    cd:6e:b2:0a:27:01:53:67:15:b8:e9:55:5a:d3:6f:
                    36:a0:43:6b:5e:9d:0e:97:86:53:46:ff:fc:c9:ce:
                    46:79:8f:3e:ab:bf:88:2d:72:7e:18:48:cb:b4:4c:
                    f3:95:5e:5b:8d:8b:99:a2:5a:ac:07:dc:0a:74:c5:
                    fd:c5:18:99:c3:95:b0:75:63:8d:82:e1:9f:96:1e:
                    89:73:b0:a5:2a:69:09:cc:ab:ee:68:08:61:3f:2c:
                    92:ff:63:18:43:7b:db:a8:8b:49:d5:12:eb:e3:09:
                    e2:e7:d0:3b:50:73:22:d3:4c:09:5c:a6:ab:62:64:
                    75:48:a2:9f:91:22:4a:ef:e4:a1:cb:e5:88:71:1c:
                    a8:f7:dc:2a:91:c2:23:94:5b:58:e4:7a:e1:8e:bd:
                    06:8b:74:79:7a:1e:c4:79:cb:c2:8c:0e:c3:8d:6f:
                    2d:d0:a9:da:a8:78:5a:ce:6d:fa:76:70:0f:3d:87:
                    9c:92:ad:d1:b0:ae:08:31:d3:fc:7c:1a:f5:6f:56:
                    57:18:21:4a:7e:e9:df:ee:c3:75:d3:42:05:08:b5:
                    bc:48:3c:fd:2a:49:ac:52:5d:92:c4:25:87:bd:0d:
                    ca:20:7e:7b:ca:cb:7a:05:df:a2:d1:11:bd:4e:54:
                    9a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F8:74:0B:C3:27:EA:B3:FA:4A:C1:17:F6:EB:50:F9:0E:B2:36:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36b1e01b-64bc-3f78-b142-c73b7ca9503f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:30:69:35:28:8c:cb:53:a3:88:5c:b6:90:38:7d:cb:01:bb:
         97:52:e2:d6:c8:8b:48:c9:a6:85:7a:13:fa:49:ea:57:0f:a4:
         b9:26:d8:48:07:4f:89:8c:25:5a:21:c1:20:77:92:36:57:21:
         77:e6:14:e3:57:d4:a0:a0:f0:e4:14:c6:21:f8:e8:16:99:91:
         3c:ff:a8:c7:ce:d9:02:20:12:b9:9e:8e:2e:76:4f:c7:57:46:
         45:d0:af:d7:1b:6c:95:78:93:5a:12:02:e8:7d:0b:73:bb:2f:
         b0:97:97:71:a8:7a:eb:2c:bb:f0:57:02:99:71:0c:5b:3c:92:
         a0:3b:90:37:0b:d0:fa:2d:89:4d:1d:de:a1:32:be:b0:08:d8:
         74:a2:63:85:b8:7d:ac:ec:df:18:1c:ce:28:fe:fe:2c:a2:9e:
         62:a0:1a:5b:ae:ce:e9:4f:9a:b1:07:65:cc:52:d4:62:9c:d1:
         1f:28:8a:3d:c9:ff:30:81:99:2f:66:7b:bf:83:b0:e1:2e:5d:
         fe:05:a5:23:a0:7c:87:2e:1e:c0:26:b0:1b:91:fb:59:fe:e8:
         19:d1:ac:89:44:5e:c7:f8:5e:e4:47:fd:2c:25:ca:7e:14:6a:
         d6:6f:01:5b:7a:3b:ee:bb:d5:d6:5c:fe:37:85:67:2d:37:11:
         a1:bc:f3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:32 2025 by rpki-client