Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e76f5c9-10d5-3d7d-a65a-4470a11705a4.roa
File:                     5e76f5c9-10d5-3d7d-a65a-4470a11705a4.roa (raw, json)
Hash identifier:          bV+AVBD2Zs82dkoi2z5dYix7TZhTprrouWfq6yAVKOw=
Subject key identifier:   EA:C2:F2:01:08:DD:7B:E9:B0:D6:2E:20:8E:46:CC:22:E7:4B:DF:A4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B75A86664A554CFCD0D40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e76f5c9-10d5-3d7d-a65a-4470a11705a4.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.29.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:75:a8:66:64:a5:54:cf:cd:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=f0e4b308-5ed8-476e-8b0d-e1b17726c97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:34:26:71:e5:5a:e4:5a:5f:b3:46:1e:84:
                    2a:62:66:9b:11:dc:3b:23:25:65:03:ca:9a:83:64:
                    11:ce:c9:10:3c:f1:bd:53:47:a6:30:25:f6:54:27:
                    be:f8:3b:e2:e3:53:bf:d0:9f:d3:64:af:7c:eb:57:
                    ff:9e:49:7e:f4:39:68:e2:e9:a2:5b:30:07:0b:4b:
                    9c:97:f5:92:58:3b:b6:94:85:07:a0:a6:56:0e:d1:
                    0c:8c:22:31:56:7f:af:32:e3:14:84:e4:94:10:3c:
                    96:f1:d6:43:03:76:16:c5:d7:e2:13:1e:b5:69:a8:
                    da:fc:d2:84:ac:86:61:97:db:2b:de:0a:4b:40:03:
                    97:cc:bb:93:e9:00:b1:d9:be:42:2f:31:9b:1d:a4:
                    21:51:b1:01:cb:34:58:7f:83:3c:aa:2b:f3:4b:de:
                    ff:98:e1:b2:4e:c5:cd:3e:1a:29:59:cd:18:65:ac:
                    9a:9a:34:c4:81:dc:43:d1:ac:be:3e:d0:93:76:9d:
                    86:6a:1c:60:a2:a9:57:9a:51:f0:8b:61:0d:db:e8:
                    6d:1c:95:54:68:ff:c6:17:ce:42:e0:08:72:24:f4:
                    78:83:96:69:e1:97:e6:55:25:f9:15:3b:83:5c:2c:
                    b5:02:d6:64:44:be:38:ed:58:b0:0c:3d:33:24:11:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C2:F2:01:08:DD:7B:E9:B0:D6:2E:20:8E:46:CC:22:E7:4B:DF:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e76f5c9-10d5-3d7d-a65a-4470a11705a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:44:fe:77:73:74:c5:6c:5c:cd:7d:83:ca:47:c4:c8:85:66:
         66:26:dd:4d:06:b3:79:18:cf:75:83:aa:d6:77:6b:c7:ac:ea:
         03:09:1d:3e:cb:0f:d5:58:7f:6f:d1:68:34:e2:45:2a:12:f3:
         8e:a0:f4:d2:41:4d:27:7d:8c:a4:ed:7a:59:0d:7a:3f:41:77:
         ea:66:02:8b:8c:6d:d7:12:93:29:0b:bc:4e:d2:d2:31:a2:70:
         f2:8a:58:65:18:b1:f9:27:93:3b:5e:94:14:52:26:09:23:cc:
         28:59:ea:5f:c1:78:e2:0f:00:51:b0:8a:68:b4:5d:75:55:e1:
         55:c0:96:e5:6c:72:e5:cf:58:ea:39:30:c0:7b:6d:2e:ff:f8:
         19:6d:bd:42:3c:ae:31:81:ad:26:fe:9f:6d:f6:e3:29:f4:e3:
         18:de:45:90:20:b9:e9:f6:e3:a9:d5:03:59:51:47:c9:45:e0:
         da:06:64:f5:e3:c8:d3:fd:c3:89:74:f5:43:a5:63:07:74:ee:
         7b:43:5a:62:b0:80:4a:b5:15:0a:96:06:f5:f0:a6:5f:a3:3f:
         56:78:15:b9:eb:1c:23:c3:b2:86:c5:1d:30:63:bb:5f:94:3a:
         ce:31:d8:aa:cf:01:fd:f0:2e:19:c0:a6:ec:d3:10:23:49:71:
         ca:bc:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:21:45 2025 by rpki-client