Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ed5ae38-6026-3863-acc1-7b0d45a1e7c2.roa
File:                     8ed5ae38-6026-3863-acc1-7b0d45a1e7c2.roa (raw, json)
Hash identifier:          eMdSd4dvlRLVbjUA892S0EbpCbtLesuvnV0pNUZOoWQ=
Subject key identifier:   80:CF:4B:6B:BF:C4:3C:97:F3:53:C7:89:88:C1:77:3E:5C:B2:DB:6F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5772D6368C209E4112E4108
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ed5ae38-6026-3863-acc1-7b0d45a1e7c2.roa
Signing time:             Tue 04 Feb 2025 13:41:16 +0000
ROA not before:           Tue 04 Feb 2025 13:41:16 +0000
ROA not after:            Mon 05 May 2025 12:41:16 +0000
asID:                     30036
IP address blocks:        173.26.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:77:2d:63:68:c2:09:e4:11:2e:41:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:41:16 2025 GMT
            Not After : May  5 12:41:16 2025 GMT
        Subject: CN=0cd7f5ee-f17d-43cf-97f9-b40131305a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:a9:92:00:14:fd:46:99:52:34:d5:4e:6f:
                    39:17:c7:24:62:70:52:15:db:e7:9e:08:9a:d8:12:
                    fd:a6:a3:67:66:c5:59:59:12:dd:f9:12:96:e7:08:
                    29:50:fc:bc:68:14:9b:b6:df:06:0e:b1:20:31:2f:
                    10:35:5a:99:90:91:3a:ed:13:dd:5b:9a:68:7b:62:
                    3c:7d:c7:ef:86:0e:0c:db:f4:c5:fd:98:c8:c9:5c:
                    cd:2f:50:60:43:b4:04:e1:9d:94:7a:95:04:de:8c:
                    b3:d6:94:b7:1b:2f:90:96:f9:bd:23:de:4b:27:01:
                    bd:54:a3:d2:0a:14:00:8f:fc:ea:df:77:a9:3e:c5:
                    44:06:c2:02:37:27:95:c0:f8:3f:39:c3:54:af:53:
                    24:3b:93:81:02:44:2f:12:14:21:c7:f6:68:18:3a:
                    28:00:e8:89:32:37:48:80:8c:12:a3:ea:7b:85:da:
                    a7:22:bf:cb:22:45:3e:11:65:96:92:63:b6:4c:78:
                    bd:34:e5:d4:a9:67:1c:23:ce:32:bd:01:c6:e3:25:
                    14:26:39:74:a4:90:54:b9:40:1f:94:87:46:fe:b1:
                    28:f6:ed:32:29:b5:6d:62:a2:95:6e:64:e1:82:7d:
                    8a:c6:4d:85:33:07:b2:1e:06:79:5a:b1:c1:9b:a2:
                    78:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CF:4B:6B:BF:C4:3C:97:F3:53:C7:89:88:C1:77:3E:5C:B2:DB:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ed5ae38-6026-3863-acc1-7b0d45a1e7c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f3:2e:9f:2f:ac:a8:24:63:de:22:32:14:03:f2:50:7a:16:
         ef:fe:1c:ba:fc:76:93:e1:06:44:d0:64:89:48:6a:59:51:e7:
         7e:ee:21:27:53:4b:c1:a7:71:ba:dc:e6:49:9b:cd:e6:4e:eb:
         1b:0e:3f:16:31:49:46:45:df:e5:81:ed:33:1a:72:e4:37:da:
         0a:5a:6a:6c:57:86:cc:8b:cb:0c:7e:41:a4:d3:f6:05:77:35:
         35:a1:4f:0f:b1:49:62:8f:04:7f:e3:4a:24:c9:96:66:17:9d:
         78:c4:da:e8:d2:f9:f3:81:8b:f2:fd:22:1a:ca:1c:67:56:52:
         f6:54:50:ad:4b:d9:8e:7c:1a:b4:ef:51:20:f6:ef:eb:81:e6:
         e1:28:22:e1:db:2b:e4:bd:a0:29:22:48:19:63:70:53:81:71:
         38:c8:50:4b:f8:1b:4e:68:96:7e:84:8d:43:69:ac:8e:8e:8e:
         31:ea:8e:3a:64:c3:2e:be:37:b2:32:30:7c:67:85:27:00:64:
         5e:fe:ef:86:b2:9a:f3:9c:d2:d0:ff:14:61:c8:03:71:57:55:
         78:35:c1:42:21:fc:2d:5c:51:97:ca:90:f2:41:4a:2e:60:61:
         6d:ef:69:3f:4a:41:de:dc:ec:28:f0:d0:c7:ed:0b:cd:f0:7a:
         6f:65:50:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:37 2025 by rpki-client