Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42a1c371-76f3-3cab-8604-eda1b70b5556.roa
File:                     42a1c371-76f3-3cab-8604-eda1b70b5556.roa (raw, json)
Hash identifier:          Fq1oOvGlWpzY3PwsgP5PL2w5JJqnaJrExNTIOM5hXZ4=
Subject key identifier:   39:16:0A:80:95:62:5B:D3:04:C6:6B:E6:74:1C:E6:C0:DB:61:83:8B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C26452099274D3577CD168C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42a1c371-76f3-3cab-8604-eda1b70b5556.roa
Signing time:             Mon 03 Feb 2025 11:15:50 +0000
ROA not before:           Mon 03 Feb 2025 11:15:50 +0000
ROA not after:            Sun 04 May 2025 10:15:50 +0000
asID:                     30036
IP address blocks:        173.31.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:64:52:09:92:74:d3:57:7c:d1:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:15:50 2025 GMT
            Not After : May  4 10:15:50 2025 GMT
        Subject: CN=4e745133-f195-41c5-a00d-d211d25d82a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:d5:46:07:f8:11:e2:e2:ba:6d:90:0e:a8:
                    ba:10:c3:cf:d8:eb:e7:c4:a4:ea:d9:40:7b:a7:eb:
                    96:1d:06:e6:46:12:d3:21:65:a4:3d:39:4d:b5:18:
                    82:6e:72:54:e3:e6:1a:a8:6f:05:a4:a1:d3:ae:0e:
                    a5:8e:5c:ad:2b:9b:4e:7d:ef:da:d3:82:a0:0b:90:
                    d2:47:2a:97:84:8b:21:a6:28:2d:2a:11:14:43:f5:
                    0f:58:b8:9b:fb:e3:eb:94:87:b6:e2:c0:2b:c8:46:
                    13:60:88:92:d1:23:76:e7:cd:8d:c5:6f:f7:aa:6a:
                    1c:6d:06:75:32:e2:e6:47:e6:33:f1:66:04:bc:b2:
                    bf:bb:32:14:42:83:d5:34:27:13:46:3d:d1:63:58:
                    5f:88:94:df:05:9d:2e:ff:74:da:fb:5d:97:89:72:
                    9a:31:95:eb:e2:aa:a6:a5:bc:f5:07:f1:ec:4a:a1:
                    5e:43:af:35:ae:4f:6f:17:87:20:65:27:e0:92:6d:
                    7e:00:8b:74:cb:ba:f3:07:ce:de:dc:38:67:3d:f5:
                    aa:b8:f8:36:52:fc:f2:59:92:b2:27:75:c4:cb:e5:
                    d3:69:f6:73:55:ac:d6:f2:75:12:89:cb:e6:62:51:
                    62:13:2c:47:07:0b:7e:78:95:a3:03:73:db:96:05:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:16:0A:80:95:62:5B:D3:04:C6:6B:E6:74:1C:E6:C0:DB:61:83:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42a1c371-76f3-3cab-8604-eda1b70b5556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:13:10:43:98:af:2e:5c:35:04:f3:3f:42:fc:9b:1d:47:3a:
         ab:ec:fb:b2:e0:73:50:a5:27:0e:08:33:4f:67:f6:e8:bc:12:
         33:11:d3:24:96:d1:a7:11:de:0c:15:02:5c:7d:50:c0:2f:e1:
         d5:0a:ab:64:66:e5:3f:0e:9e:b2:6b:ef:8a:94:b6:4f:ec:0e:
         47:4b:72:71:ef:23:5e:77:c5:ba:54:15:cd:bf:87:b6:dc:5b:
         10:69:8c:20:24:70:3a:9d:52:96:b5:e9:3b:82:cd:bd:f9:77:
         73:0b:79:d9:1b:03:38:80:43:6f:5a:7b:dd:e3:df:f4:fc:a3:
         d0:ed:a4:be:74:45:7a:05:70:64:b9:8d:1e:25:db:c3:88:cd:
         ca:c0:3d:0b:13:6d:f9:a3:49:5f:e5:5e:e9:96:7f:ab:d5:7a:
         7e:b3:71:27:c8:db:da:dc:f4:2c:29:6b:f6:17:a2:37:2e:33:
         52:af:70:5a:c5:86:65:3e:80:17:42:4f:b1:42:73:a7:67:38:
         21:1a:e3:b6:b1:d1:b4:8a:08:3d:15:77:0d:ce:b3:7d:b2:1e:
         a9:7f:65:ce:08:55:4b:2a:74:54:03:fd:72:0e:38:49:de:07:
         06:3d:eb:df:fe:a2:9e:4c:39:79:79:c8:27:58:4d:79:cd:74:
         2f:04:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:32 2025 by rpki-client