Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74da9819-3ad8-383a-b91b-bdea68221b81.roa
File:                     74da9819-3ad8-383a-b91b-bdea68221b81.roa (raw, json)
Hash identifier:          SydQf25mWX4UVRLZYBnmrbyjbkuD+mTQmtE+PK+MuhE=
Subject key identifier:   72:E6:CD:A4:2A:C5:FF:C4:A1:E8:CD:E9:A6:B8:51:93:3D:68:88:FE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5779926F3C72CD4D5F5FC80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74da9819-3ad8-383a-b91b-bdea68221b81.roa
Signing time:             Tue 04 Feb 2025 13:42:06 +0000
ROA not before:           Tue 04 Feb 2025 13:42:06 +0000
ROA not after:            Mon 05 May 2025 12:42:06 +0000
asID:                     30036
IP address blocks:        173.31.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:77:99:26:f3:c7:2c:d4:d5:f5:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:42:06 2025 GMT
            Not After : May  5 12:42:06 2025 GMT
        Subject: CN=a0f00149-9738-457e-97e4-d994cce8e867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:9b:13:15:33:57:30:fe:d7:2a:83:1b:20:
                    11:1e:e7:fd:fd:c1:de:44:8d:fa:a0:17:19:1e:2f:
                    17:f0:e9:29:2c:04:72:57:ac:9f:dd:11:b8:37:74:
                    51:67:67:ff:30:9a:aa:d8:67:d7:b4:8a:b5:bd:ae:
                    c8:af:63:72:01:52:5d:e0:12:b6:8e:74:13:25:52:
                    36:94:2d:ba:6e:58:45:1a:e1:24:e9:a6:2a:43:bb:
                    71:72:21:0e:48:01:55:b1:70:52:50:b4:e9:c1:6e:
                    62:6a:0a:f7:12:38:17:4a:ff:08:cf:62:ce:85:a6:
                    32:99:75:cd:a0:46:f0:36:6f:76:59:68:57:18:a1:
                    90:06:1e:3b:b9:dd:af:2e:d8:18:91:66:16:41:86:
                    e0:76:a1:bb:e4:78:05:52:07:7c:60:50:c3:f8:6b:
                    6c:b2:64:30:a9:aa:a1:55:7a:33:d3:d0:fe:1f:03:
                    f9:ec:3f:6d:41:4d:65:7d:a5:ab:c2:2c:3f:f4:1c:
                    49:c3:f3:56:40:6c:e1:de:18:6a:fb:78:8b:d4:99:
                    33:8f:29:36:4a:f9:71:60:01:96:f1:6a:98:96:18:
                    ca:e1:db:8f:44:c2:91:0c:4e:7f:11:e3:6c:53:32:
                    c8:e0:c0:9a:8e:a2:5d:40:c1:88:5a:6a:62:d0:b9:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E6:CD:A4:2A:C5:FF:C4:A1:E8:CD:E9:A6:B8:51:93:3D:68:88:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74da9819-3ad8-383a-b91b-bdea68221b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b4:b4:81:42:34:be:5c:fa:19:5a:ef:4d:b1:e2:72:ac:b1:
         98:41:ff:99:11:e9:29:79:06:d7:c1:2d:1e:d0:84:7f:e5:c8:
         2e:5e:24:b1:82:54:2f:3b:06:62:19:07:6a:43:c1:65:42:13:
         b6:6f:e3:ff:f1:5c:70:80:0b:e8:95:48:e5:04:a7:15:0e:75:
         89:c3:fc:37:ad:5d:99:fa:9e:82:1c:4c:ae:64:1b:77:94:0a:
         ea:78:9e:1b:80:4a:1b:47:be:24:5b:be:3d:86:5f:39:b2:cd:
         9c:be:db:67:a3:34:f7:72:89:65:f2:0a:69:09:4a:c0:59:7b:
         78:bb:06:c6:ad:ee:41:ab:8b:12:54:9b:99:dc:eb:c8:a5:a4:
         00:5b:e6:07:91:6f:05:50:a6:be:41:44:9d:33:94:8c:15:67:
         a2:b0:10:3b:1b:96:d1:36:26:f6:e3:c3:25:88:9d:c8:9b:d0:
         b8:1d:b2:a0:b4:3a:11:2e:8d:21:b2:4f:3a:f8:39:66:e3:24:
         8e:d3:f0:d3:aa:d5:47:b1:98:8a:70:50:38:82:25:aa:e4:85:
         5c:d1:54:ba:ab:76:71:c2:b5:99:6e:fb:c6:00:28:cb:60:c1:
         8a:e6:2f:bf:b5:60:21:3b:bf:3d:08:13:1c:be:a6:cc:a5:13:
         2d:14:cd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:42 2025 by rpki-client