Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f915e32-f772-31e8-ad35-ec38fb3f4b58.roa
File:                     9f915e32-f772-31e8-ad35-ec38fb3f4b58.roa (raw, json)
Hash identifier:          jcsY+pFLeOBP4mqvHcWi+CT6XBLAeFMP8ou2q8rB9sg=
Subject key identifier:   F2:1B:5A:E4:39:14:9F:3F:9C:9C:58:A1:0C:DA:9C:16:DF:FD:40:68
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C533FDEC3A6C4DF751618C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f915e32-f772-31e8-ad35-ec38fb3f4b58.roa
Signing time:             Tue 04 Feb 2025 11:25:53 +0000
ROA not before:           Tue 04 Feb 2025 11:25:53 +0000
ROA not after:            Mon 05 May 2025 10:25:53 +0000
asID:                     30036
IP address blocks:        173.29.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:33:fd:ec:3a:6c:4d:f7:51:61:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 11:25:53 2025 GMT
            Not After : May  5 10:25:53 2025 GMT
        Subject: CN=3cde2d92-4cb2-4c95-bb9d-dcc67f72f7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d5:c3:88:25:a3:dc:1e:8a:d7:35:27:66:29:
                    d1:cc:2e:aa:f6:d6:47:79:f2:9c:f4:2f:42:fb:85:
                    ea:ae:a8:c6:87:c9:c4:9b:9b:c8:57:99:97:28:99:
                    19:c6:10:be:50:25:df:6b:c0:ec:18:47:f1:48:ca:
                    83:91:ed:79:48:12:a0:45:20:1e:ea:43:2b:f7:3d:
                    d8:4e:79:00:eb:5c:a8:3e:d0:a0:e4:04:bd:84:b6:
                    41:e3:b1:a5:bb:61:6f:cc:50:66:e5:47:f0:a6:69:
                    cc:71:de:a2:56:77:92:3a:6e:ba:3b:56:dd:ce:58:
                    a3:ed:54:3c:f4:86:fa:c0:58:d6:dc:c1:d6:5f:54:
                    6e:66:32:14:2d:21:5b:11:70:81:5d:bf:e2:e6:31:
                    b6:32:19:4f:cb:24:2c:1c:4c:15:1b:66:eb:cf:d7:
                    c1:5c:4c:f1:45:29:f7:0d:b7:a5:b7:a5:d5:14:df:
                    31:55:99:65:67:a7:3e:d1:5d:a2:e2:1f:af:d9:5a:
                    c8:70:ef:d6:0c:89:06:14:71:bf:41:43:b5:25:0f:
                    ac:34:67:00:ff:54:f1:3c:8d:bf:49:ff:6e:ba:bb:
                    8e:b5:fe:56:1a:ce:63:b2:0e:43:f6:b3:23:bd:6c:
                    cc:f9:fa:e9:b4:ce:16:b4:02:d0:77:11:9c:1a:32:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1B:5A:E4:39:14:9F:3F:9C:9C:58:A1:0C:DA:9C:16:DF:FD:40:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f915e32-f772-31e8-ad35-ec38fb3f4b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:bf:33:dd:93:58:cf:6e:c6:6d:b6:00:83:a5:f6:0f:bc:7c:
         5d:2a:3e:a1:5b:a6:88:18:09:71:78:05:a0:d1:06:0d:53:58:
         4c:13:b6:c4:ae:e8:ee:7d:74:56:b5:94:2f:5a:32:af:51:a3:
         39:93:50:51:a5:31:da:3e:be:0d:7c:56:ee:3c:4b:ae:75:c0:
         43:0a:4e:50:e0:6e:34:98:61:91:49:cd:52:9c:06:26:7f:4b:
         68:06:a2:93:dd:c2:de:e3:8e:4c:6a:52:24:13:9d:fb:f8:26:
         6f:99:23:b1:9f:b9:fd:2a:24:fc:bf:40:9a:c3:c0:13:ff:a7:
         2f:b6:84:e4:d8:6d:0d:1e:e1:ac:2d:68:d5:9c:93:f9:48:d8:
         1b:ff:de:6e:02:68:91:0a:a6:77:dd:c5:1e:eb:05:c7:82:64:
         f3:0e:15:fc:90:c4:15:b5:58:67:ee:ac:51:6f:7a:0f:c5:76:
         37:63:d6:31:6d:a9:f5:df:7f:14:75:5e:39:7f:d0:05:be:8d:
         92:49:d1:ac:c7:01:51:5e:74:1d:d0:4b:d7:e1:7e:fb:52:58:
         11:60:38:c8:79:da:d1:58:64:c9:1b:6c:26:30:04:22:77:a6:
         4d:0b:0d:ec:76:aa:1e:fb:40:d1:23:5f:ad:ea:19:6e:64:a9:
         cc:c6:a8:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFM/3sOmxN91FhjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDExMjU1M1oXDTI1MDUwNTEwMjU1M1owLzEtMCsGA1UEAxMk
M2NkZTJkOTItNGNiMi00Yzk1LWJiOWQtZGNjNjdmNzJmN2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNXDiCWj3B6K1zUnZinRzC6q9tZHefKc9C9C
+4XqrqjGh8nEm5vIV5mXKJkZxhC+UCXfa8DsGEfxSMqDke15SBKgRSAe6kMr9z3Y
TnkA61yoPtCg5AS9hLZB47Glu2FvzFBm5UfwpmnMcd6iVneSOm66O1bdzlij7VQ8
9Ib6wFjW3MHWX1RuZjIULSFbEXCBXb/i5jG2MhlPyyQsHEwVG2brz9fBXEzxRSn3
Dbelt6XVFN8xVZllZ6c+0V2i4h+v2VrIcO/WDIkGFHG/QUO1JQ+sNGcA/1TxPI2/
Sf9uuruOtf5WGs5jsg5D9rMjvWzM+frptM4WtALQdxGcGjKy3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPIbWuQ5FJ8/nJxYoQzanBbf/UBoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWY5MTVlMzItZjc3Mi0z
MWU4LWFkMzUtZWMzOGZiM2Y0YjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR1eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHO/M92TWM9uxm22AIOl9g+8fF0qPqFbpogYCXF4BaDRBg1TWEwTtsSu
6O59dFa1lC9aMq9RozmTUFGlMdo+vg18Vu48S651wEMKTlDgbjSYYZFJzVKcBiZ/
S2gGopPdwt7jjkxqUiQTnfv4Jm+ZI7Gfuf0qJPy/QJrDwBP/py+2hOTYbQ0e4awt
aNWck/lI2Bv/3m4CaJEKpnfdxR7rBceCZPMOFfyQxBW1WGfurFFveg/Fdjdj1jFt
qfXffxR1Xjl/0AW+jZJJ0azHAVFedB3QS9fhfvtSWBFgOMh52tFYZMkbbCYwBCJ3
pk0LDex2qh77QNEjX63qGW5kqczGqFU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:32 2025 by rpki-client