Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d63a8b07-2950-36f2-b4d9-64b4e4317373.roa
File:                     d63a8b07-2950-36f2-b4d9-64b4e4317373.roa (raw, json)
Hash identifier:          WgmpHIAFB8ISV1XeNandLLqxBWqbI9tBumM80q43oAo=
Subject key identifier:   82:C4:54:EB:35:31:22:02:CF:8E:9B:29:B9:05:49:D5:BF:F1:37:79
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7F6DEFE9724D0EA608F64E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d63a8b07-2950-36f2-b4d9-64b4e4317373.roa
Signing time:             Wed 05 Feb 2025 11:10:10 +0000
ROA not before:           Wed 05 Feb 2025 11:10:10 +0000
ROA not after:            Tue 06 May 2025 10:10:10 +0000
asID:                     30036
IP address blocks:        150.195.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f6:de:fe:97:24:d0:ea:60:8f:64:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:10:10 2025 GMT
            Not After : May  6 10:10:10 2025 GMT
        Subject: CN=b3ee5087-d74b-472c-a1cb-abde04b85de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:04:34:f8:66:29:d5:06:89:fb:9e:d7:b6:2a:
                    4c:39:c3:e6:0c:c0:40:08:09:1d:13:d2:59:7c:a9:
                    e7:1d:d5:64:cd:bb:4f:a5:24:d6:b5:0e:4d:1a:41:
                    a4:14:70:c0:94:d7:77:fa:02:96:6f:a4:7a:f8:2c:
                    c7:4a:96:b3:37:7d:e6:50:0c:b9:3a:bf:b5:5e:fe:
                    52:18:b5:a1:c4:b4:8d:31:29:f1:4a:a0:8c:99:2f:
                    c7:58:b6:8b:4c:35:5f:20:ca:f1:5a:08:71:9c:56:
                    a4:91:e1:f9:4f:d4:f4:0f:3b:2a:f7:b4:b3:5c:da:
                    73:7c:df:38:9a:06:14:33:4c:04:f7:c6:db:a9:9d:
                    85:e8:23:e2:94:f1:bd:12:b3:7f:08:2a:56:e5:9b:
                    a9:21:f0:98:25:dc:92:f9:f4:41:00:be:cf:07:e1:
                    3b:e1:9a:72:ed:c2:d1:ce:ea:4d:da:9e:d2:e6:4f:
                    e6:35:f7:40:6e:eb:a9:57:06:e8:f3:22:03:82:ea:
                    b3:80:bc:f6:41:00:73:c9:63:76:30:a8:18:dc:b8:
                    a0:ed:84:c3:22:72:e8:2e:94:c5:03:36:4b:c6:25:
                    1a:d4:bf:c2:7c:69:ae:dd:ba:43:c5:0f:04:49:0d:
                    5a:29:1e:fd:0f:a2:8e:a9:dc:0f:4c:f4:94:96:32:
                    ce:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C4:54:EB:35:31:22:02:CF:8E:9B:29:B9:05:49:D5:BF:F1:37:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d63a8b07-2950-36f2-b4d9-64b4e4317373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:9c:6a:2c:79:b6:fe:f5:ec:ce:1f:b9:ff:5e:19:2e:41:12:
         f0:a0:ba:c5:f8:7c:4f:18:8c:34:95:2d:e2:38:fb:dc:f1:4e:
         e0:40:9d:77:06:51:cd:84:01:7d:b3:02:11:70:71:1e:7b:ee:
         ea:5f:05:c9:6f:91:2f:31:6d:65:b2:6a:0c:4b:fc:bb:85:45:
         d3:d0:d8:e9:07:61:cd:a2:29:48:50:85:ee:b6:98:84:04:e3:
         79:d6:51:6f:ec:c2:1e:42:2f:f1:61:ed:08:d5:27:a2:19:35:
         68:17:6e:fd:05:75:c9:f2:4d:35:78:be:f9:79:71:4b:62:67:
         27:73:8e:c2:78:44:36:37:33:3e:9c:c1:8a:2b:38:21:57:fc:
         e7:0d:70:da:e4:ac:9a:04:f2:4c:41:af:cf:f7:b1:82:30:46:
         89:29:8b:44:2c:1d:98:b4:06:1e:7c:0c:97:db:3d:3c:43:1a:
         5e:6c:bb:0d:03:0a:f8:54:94:3b:a6:44:36:40:3f:ad:08:aa:
         7f:6a:83:55:57:b0:96:80:58:61:86:13:cc:94:fb:95:a0:c3:
         03:3c:6c:5d:4d:56:5c:02:d2:66:bd:08:82:52:55:6e:f7:1e:
         7b:36:64:8b:b8:a0:26:ab:2d:7c:44:85:ae:1b:c5:1e:51:c7:
         b5:0d:12:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:46 2025 by rpki-client