Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0aa556a-b40b-38ba-9476-baccbd5300b7.roa
File:                     a0aa556a-b40b-38ba-9476-baccbd5300b7.roa (raw, json)
Hash identifier:          JEI0AUnFhgV9PK9hw1xj8xWoQaZ1kL/4fdPSt25lXq8=
Subject key identifier:   E2:9B:05:5C:2F:EF:25:49:CD:1C:B3:E2:02:6A:0E:A9:4A:63:D1:0F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C576C52B5EF1DED4A5834320
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0aa556a-b40b-38ba-9476-baccbd5300b7.roa
Signing time:             Tue 04 Feb 2025 13:40:26 +0000
ROA not before:           Tue 04 Feb 2025 13:40:26 +0000
ROA not after:            Mon 05 May 2025 12:40:26 +0000
asID:                     30036
IP address blocks:        173.19.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:76:c5:2b:5e:f1:de:d4:a5:83:43:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:40:26 2025 GMT
            Not After : May  5 12:40:26 2025 GMT
        Subject: CN=cf5a2614-cba2-48ef-9d26-14c2f890aed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:12:42:4a:cf:e8:0e:ec:fa:8a:94:99:81:
                    23:34:f7:b1:9c:09:70:8e:d1:2e:71:76:b2:18:86:
                    b0:db:5a:ad:1c:ab:d5:92:16:6c:a3:9b:4c:38:ce:
                    0e:3b:df:fd:87:48:27:56:2c:78:5d:60:d5:6f:05:
                    53:f3:e3:7d:50:bf:e3:9c:c5:9c:6c:92:d0:cc:af:
                    ab:70:df:37:fd:29:33:ad:29:02:0a:84:3e:05:48:
                    fb:67:17:82:e4:b3:96:e0:98:b8:9d:f6:57:51:97:
                    74:a0:3f:e6:b5:e3:0b:1c:c8:35:7e:4b:39:0a:e6:
                    d5:1b:12:cd:34:12:0b:4f:c3:fc:04:f8:bf:58:09:
                    00:95:8d:59:b0:a2:6b:7b:5a:21:03:4b:44:e0:95:
                    a1:0f:7d:68:ce:48:de:81:28:d6:15:54:d1:ee:24:
                    17:37:77:9d:d6:68:5f:35:7d:6b:3b:c5:48:1c:d9:
                    2a:ec:f4:7e:0d:9d:48:20:2b:19:c9:87:72:dc:50:
                    5d:dc:32:88:43:16:5c:b4:bb:04:12:ab:ed:28:58:
                    fe:86:7b:6c:33:12:ed:9e:e6:f4:b0:51:24:53:79:
                    31:a3:10:63:de:6f:e3:e6:93:aa:50:e6:db:87:bc:
                    d0:fd:95:6e:da:cc:aa:28:93:14:33:94:86:48:ab:
                    0e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9B:05:5C:2F:EF:25:49:CD:1C:B3:E2:02:6A:0E:A9:4A:63:D1:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0aa556a-b40b-38ba-9476-baccbd5300b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:0c:e1:57:b1:e1:30:b9:8c:0d:af:e3:f4:93:e6:03:b4:ee:
         43:17:5c:94:32:72:cd:3c:31:f5:0a:6d:dc:b6:a6:58:3b:8e:
         97:97:4c:38:6a:10:f7:64:8f:48:b7:a1:bb:b6:a5:79:2e:ff:
         71:bf:32:46:3a:c0:aa:f1:b3:5a:95:44:33:1f:af:48:01:41:
         db:a9:7e:4c:1b:7c:98:bf:db:02:71:61:07:d2:8b:af:1c:88:
         e4:9f:69:9c:54:74:35:fe:fa:a3:85:80:42:68:b5:18:80:95:
         43:5a:b9:58:2d:ee:24:dc:85:00:e8:bc:fa:7a:d6:5d:05:29:
         5c:72:79:de:bb:88:ab:52:df:32:6f:83:e1:48:48:ef:dd:c2:
         46:1c:cb:60:43:7a:56:0c:52:96:0e:ea:4f:6a:46:dc:28:d3:
         93:73:d3:6e:dd:f2:76:8d:01:b5:d6:5a:df:b5:06:05:b6:9e:
         4f:8a:54:02:23:9c:4c:74:52:67:4f:1f:c4:8e:7d:6f:5b:f8:
         5c:23:f5:89:88:4c:81:8f:4f:bd:5e:e0:41:95:bb:3b:b0:db:
         1a:8a:bd:f7:fd:2b:4d:18:6d:46:f9:be:e0:e3:ff:db:e0:92:
         25:26:17:39:c7:1e:29:98:85:ea:bd:d6:b6:f7:33:f5:76:2e:
         e9:77:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:32 2025 by rpki-client