Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba87132f-4139-3adb-873b-1d8c98e40c4f.roa
File:                     ba87132f-4139-3adb-873b-1d8c98e40c4f.roa (raw, json)
Hash identifier:          PMygJbR2UNYzVJVwywVMc6p0TaILyLW5Ez0VeA+j9fQ=
Subject key identifier:   9D:52:56:43:7E:6D:A4:5C:C3:5D:04:DA:4C:EE:B5:1E:D1:1F:32:4A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848B736CA98CC59482B62C1FC80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba87132f-4139-3adb-873b-1d8c98e40c4f.roa
Signing time:             Thu 30 Jan 2025 11:10:13 +0000
ROA not before:           Thu 30 Jan 2025 11:10:13 +0000
ROA not after:            Wed 30 Apr 2025 10:10:13 +0000
asID:                     30036
IP address blocks:        173.18.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:36:ca:98:cc:59:48:2b:62:c1:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 30 11:10:13 2025 GMT
            Not After : Apr 30 10:10:13 2025 GMT
        Subject: CN=9936cb52-5dca-4bfb-b586-576ea2039265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:56:7e:d8:4a:f4:55:df:9e:0f:ba:cd:d2:
                    3e:60:39:fb:7b:a3:92:3d:23:1f:a5:02:08:b5:54:
                    ae:d2:0f:d5:4f:f9:c8:a1:7a:b9:4e:79:ea:9e:e4:
                    66:e8:ae:79:ce:7f:1b:b9:84:09:7a:1f:26:69:c2:
                    b4:8b:20:f8:a2:b1:66:83:e8:b5:ee:e6:fb:d6:23:
                    93:a9:a5:ea:35:5b:12:ac:d4:05:37:8c:c6:99:ae:
                    3d:8d:17:bf:89:36:be:da:f0:40:18:0d:71:68:22:
                    37:14:6c:0f:0f:95:3b:6e:43:4c:ed:5c:06:e3:25:
                    b5:6b:13:68:06:4b:dd:4c:37:91:73:74:06:ce:19:
                    27:4a:69:3b:06:20:64:ff:fb:43:1d:fd:be:9d:6c:
                    e2:57:53:6c:1c:7e:16:1d:7c:ab:7d:1a:fb:37:dc:
                    15:4e:98:99:f0:db:25:91:2f:aa:04:93:5d:cc:fa:
                    75:54:d6:cf:f8:2d:0d:4f:d9:30:94:d5:35:26:e0:
                    45:05:60:14:a0:1f:44:2f:b2:61:ff:5d:8f:0b:c8:
                    38:da:1b:37:e8:cd:25:51:d6:4c:38:00:a7:c5:69:
                    fe:b0:df:cc:e0:13:f7:c8:ed:d1:b9:1d:44:c8:99:
                    10:fd:cc:fc:9e:bd:40:84:26:88:f9:ef:17:4e:0f:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:52:56:43:7E:6D:A4:5C:C3:5D:04:DA:4C:EE:B5:1E:D1:1F:32:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba87132f-4139-3adb-873b-1d8c98e40c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:46:34:ad:f8:9b:86:69:83:14:be:e0:70:c3:a2:ec:f2:de:
         ac:28:99:81:1b:07:eb:1e:ea:32:7b:63:58:00:a4:af:03:91:
         27:89:c2:29:69:07:3e:db:fd:57:b8:15:c0:55:14:98:b8:23:
         51:b8:ea:ba:3c:dd:11:b2:64:3f:fb:51:d0:89:37:16:f0:90:
         39:02:88:f0:73:c0:28:79:d5:f3:af:76:f6:95:82:c0:a9:a1:
         b5:9d:0c:0b:43:3e:36:e5:7c:bd:0b:b8:0e:c8:0d:78:5a:3e:
         4a:14:f5:a1:5e:0f:e5:f2:11:75:bf:83:09:0d:85:6a:5d:4a:
         e0:b1:9d:55:a8:ce:e7:3d:d6:94:99:b6:63:cf:35:22:83:58:
         76:cb:72:e7:78:34:46:ca:b7:0e:56:0a:2e:72:6e:a0:9b:c2:
         1d:8f:33:6d:b0:74:95:dc:30:c9:35:01:15:6f:f1:e6:c3:b9:
         30:14:7a:63:fc:21:8a:fa:2d:12:9d:6b:b7:64:b1:23:51:1d:
         00:43:77:65:45:32:15:2b:9d:dc:a6:b8:33:29:5e:14:e0:37:
         24:ec:b8:1c:9a:48:4a:4f:ef:b3:22:91:da:92:fe:eb:79:c1:
         59:07:3c:1d:92:49:41:b0:02:17:89:d8:78:11:a8:c4:93:9f:
         a7:0b:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:19 2025 by rpki-client