Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b38df75-7db6-312d-9005-74344cd4c5d7.roa
File:                     6b38df75-7db6-312d-9005-74344cd4c5d7.roa (raw, json)
Hash identifier:          y48s0+LydXOqQE/+ppqm7gbcMQSfTMZyqTu8B7TV+Uw=
Subject key identifier:   AA:E5:D8:29:C5:39:64:F2:23:8B:32:EC:96:5A:AE:49:2F:ED:B2:4E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848B7370DF95AF51C455FA05F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b38df75-7db6-312d-9005-74344cd4c5d7.roa
Signing time:             Thu 30 Jan 2025 11:10:45 +0000
ROA not before:           Thu 30 Jan 2025 11:10:45 +0000
ROA not after:            Wed 30 Apr 2025 10:10:45 +0000
asID:                     30036
IP address blocks:        173.27.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:37:0d:f9:5a:f5:1c:45:5f:a0:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 30 11:10:45 2025 GMT
            Not After : Apr 30 10:10:45 2025 GMT
        Subject: CN=e3e466e3-8d06-48a7-80fb-323daa69f4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e5:d5:01:fe:a2:ec:7f:d6:d9:fe:54:6c:03:
                    38:9c:84:ed:89:ac:8b:58:e1:3c:80:d5:93:ae:0f:
                    13:a6:86:8e:9a:5d:1e:ae:96:a1:81:a6:25:b4:61:
                    d8:b1:91:78:eb:85:13:c2:4c:4d:4e:78:db:24:8e:
                    13:e6:19:1a:e8:48:21:69:1a:08:5f:18:20:06:19:
                    4d:85:65:ad:e7:24:bb:9b:b2:ea:1f:fc:04:f8:ef:
                    f3:b6:8c:58:43:7b:ac:51:0c:f6:92:d2:19:99:03:
                    fb:4a:f1:a2:80:fc:b8:a7:1f:af:66:3b:c7:c4:e9:
                    b7:38:4e:8f:2c:41:59:1c:d1:c5:ce:fd:46:22:af:
                    8a:df:94:7f:35:f6:db:bc:3f:dd:17:ed:35:e7:60:
                    8b:fe:bc:29:e6:98:8c:12:6a:77:99:1a:a5:0d:05:
                    cb:34:06:75:2d:86:5a:d4:77:7e:0e:bf:23:24:f9:
                    1f:09:12:5c:c5:20:35:5a:ec:21:61:5b:59:7e:0c:
                    a2:e0:02:09:c5:cb:b2:dd:95:1e:a2:84:af:a3:8f:
                    df:ca:04:44:99:7a:81:cb:16:06:4b:d5:e9:30:6c:
                    1e:9b:f9:9c:d1:e0:f1:94:e4:56:5e:b9:85:a7:54:
                    d1:44:50:2f:30:31:ce:1f:fd:64:67:7d:90:53:5f:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E5:D8:29:C5:39:64:F2:23:8B:32:EC:96:5A:AE:49:2F:ED:B2:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b38df75-7db6-312d-9005-74344cd4c5d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:a8:33:7f:ff:4b:38:e3:93:2e:45:97:60:21:86:f6:37:cd:
         09:37:34:56:aa:db:81:f8:84:ed:7d:d6:ac:d2:89:1e:17:ab:
         c6:8e:ef:05:f5:11:6e:11:57:6d:f4:ff:cc:b5:0e:9c:e0:ff:
         83:84:8c:88:0b:62:33:88:55:6e:59:0f:47:28:21:31:13:f2:
         2f:f9:6c:24:76:3d:27:9f:2d:b0:51:a2:44:47:d0:eb:83:a3:
         dd:1b:ed:bf:66:e5:e8:62:a9:6e:a0:b1:7c:0a:0a:53:1a:ff:
         dd:d5:72:a8:ca:75:5c:87:84:96:5a:75:b1:fb:1e:a1:9c:ef:
         cb:3d:9e:f9:5f:3d:c6:b2:db:fa:81:45:c1:c9:3e:b6:1f:72:
         a7:5d:e4:84:31:c8:5b:f1:e0:47:93:8a:23:66:5b:b4:90:bf:
         99:05:58:97:7c:10:0d:cb:8b:b1:c0:35:52:78:9e:cc:88:07:
         42:da:b6:b0:b1:42:71:c2:85:35:db:79:0b:f2:97:b2:6e:c9:
         ce:e5:96:50:8a:f5:43:d4:ea:4f:0d:56:78:17:ea:68:ea:0e:
         06:58:df:db:46:4e:59:51:45:1f:fa:e0:c6:9c:53:ec:59:7b:
         90:70:8d:5c:ff:7c:63:20:90:b1:47:6b:89:55:f1:f3:ca:40:
         d4:af:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:55 2025 by rpki-client