Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84f1fd92-6b43-316d-93e0-55602719f73d.roa
File:                     84f1fd92-6b43-316d-93e0-55602719f73d.roa (raw, json)
Hash identifier:          M7YrP7RY71xbultv7DtaUbqf+W3zdqbQBlN8JZVsk2Q=
Subject key identifier:   FD:AB:14:CC:EE:CD:2A:9A:82:5D:88:00:02:05:FB:33:D4:F8:FC:BD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C57E285F28C04A78C7BB4500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84f1fd92-6b43-316d-93e0-55602719f73d.roa
Signing time:             Tue 04 Feb 2025 13:55:19 +0000
ROA not before:           Tue 04 Feb 2025 13:55:19 +0000
ROA not after:            Mon 05 May 2025 12:55:19 +0000
asID:                     30036
IP address blocks:        173.26.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:7e:28:5f:28:c0:4a:78:c7:bb:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:55:19 2025 GMT
            Not After : May  5 12:55:19 2025 GMT
        Subject: CN=318267a4-f9e5-45e9-8d92-849a99285363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:cc:1b:e2:7a:f2:3a:d7:de:e0:ac:1a:6f:
                    af:df:09:c5:37:18:27:49:1f:d1:0f:b6:f9:25:69:
                    08:0f:0d:bc:e0:52:b8:12:c7:18:1a:b9:c2:19:f4:
                    6e:3f:ce:1b:15:76:5b:ec:c3:c7:78:99:d4:0f:d7:
                    bc:55:cf:f0:2f:6a:c5:13:3b:72:c9:02:47:d2:e6:
                    46:cd:a4:d7:4a:90:a3:6f:89:16:c0:8f:d1:fc:03:
                    ab:ec:e2:7d:45:92:49:fe:c0:e9:e9:49:0e:51:d0:
                    10:6f:2b:a9:20:53:47:5b:74:db:6a:62:54:0d:15:
                    0a:29:5c:21:30:4b:e9:19:0e:6a:59:5e:5a:28:1f:
                    a4:e1:5f:28:69:18:4b:5b:e2:fa:22:84:b2:4e:ca:
                    95:01:41:ee:73:45:9f:22:07:0e:cc:3e:4a:c6:05:
                    67:a6:5d:be:bc:5f:03:18:78:16:a9:fd:3e:1b:f9:
                    6e:96:7e:4d:dd:ea:85:fc:bb:88:64:d9:3a:f0:f7:
                    3f:be:70:75:ec:f2:f3:e1:83:a8:e6:d0:57:fc:86:
                    3f:2b:3f:25:76:fb:aa:c7:42:fb:2e:95:1a:45:2f:
                    33:b8:4a:e6:68:1c:8c:1a:13:91:b1:ef:45:a5:d8:
                    d9:65:55:78:0a:a4:4d:90:5a:7a:da:dd:8d:bf:2a:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AB:14:CC:EE:CD:2A:9A:82:5D:88:00:02:05:FB:33:D4:F8:FC:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84f1fd92-6b43-316d-93e0-55602719f73d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:1b:01:d9:20:58:45:56:e1:32:a1:d1:d4:a3:9c:cb:db:ce:
         9e:da:2b:40:bf:48:bf:91:65:5d:90:23:c6:a2:5d:71:a6:eb:
         7f:27:cc:c1:0f:03:cf:23:82:6a:74:74:c5:a9:8d:72:3d:da:
         bd:28:82:92:73:76:a2:f7:0f:2f:03:d9:3a:35:11:95:a6:e7:
         78:6a:bb:93:7d:40:51:a7:77:2d:6f:e0:95:39:81:b6:5b:5d:
         14:28:0f:5e:3d:bb:50:9f:2e:02:e1:ed:f3:c2:bf:9c:50:fa:
         cc:2a:4c:a8:62:08:52:d0:1f:ca:d2:5c:b7:5d:3c:73:7f:20:
         c4:d1:bf:a8:e7:07:9c:6b:bd:6d:14:29:d8:e2:80:e5:96:52:
         ac:1d:6b:6b:c1:34:b0:d2:79:51:0d:72:ff:97:34:13:e2:d2:
         fb:fb:4c:25:c0:c1:eb:3f:60:be:6c:fc:b2:2d:fb:98:f3:83:
         c0:46:81:16:7a:d3:66:e2:a7:22:31:f0:05:35:11:15:13:16:
         7b:b8:04:f3:33:c0:59:33:fc:b8:cb:84:35:31:1c:34:9c:b5:
         45:cd:41:c0:ed:ca:ea:d1:b1:81:cd:ae:61:df:f7:12:f0:e1:
         6c:5b:fd:78:18:65:65:f6:6a:73:94:6f:46:5b:d3:ed:a1:d2:
         f1:0c:16:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:22:11 2025 by rpki-client