Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc7f0507-7a62-3182-beda-806aa55f9f20.roa
File:                     fc7f0507-7a62-3182-beda-806aa55f9f20.roa (raw, json)
Hash identifier:          ndS0/+KA+DWZOoD5iBshRyikl8PrmELB3I+IQuc1kxs=
Subject key identifier:   15:4D:33:B9:4D:3C:D8:A3:FC:BB:63:F4:65:5C:E8:0F:95:8E:B4:DF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C261A33B32AECDD6F4B072BA
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc7f0507-7a62-3182-beda-806aa55f9f20.roa
Signing time:             Mon 03 Feb 2025 11:10:26 +0000
ROA not before:           Mon 03 Feb 2025 11:10:26 +0000
ROA not after:            Sun 04 May 2025 10:10:26 +0000
asID:                     30036
IP address blocks:        173.17.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:61:a3:3b:32:ae:cd:d6:f4:b0:72:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:10:26 2025 GMT
            Not After : May  4 10:10:26 2025 GMT
        Subject: CN=a3f7ee7d-494b-4d96-83ca-c7cf6b5ebb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b8:4c:eb:d9:55:c8:3d:2e:38:a7:fb:4d:92:
                    a1:ce:bf:89:9e:af:69:83:b3:d9:2a:98:19:4d:99:
                    76:7c:98:50:5a:8f:38:d5:6c:c9:3a:c5:55:19:9a:
                    c0:74:80:9f:bc:e5:5f:7b:45:76:76:08:98:d3:71:
                    ad:a9:2a:45:23:10:4a:ae:35:28:54:22:85:e9:9d:
                    be:86:ab:d3:b2:19:b5:bf:17:85:cf:41:f2:ae:54:
                    b0:c6:7b:e2:d6:98:1f:b7:11:8d:3d:96:d4:85:14:
                    79:74:ab:f6:f0:3d:94:6c:25:f3:0e:fd:0c:74:15:
                    96:eb:1a:c9:86:6d:86:b8:0a:87:05:cd:a8:92:7c:
                    01:b0:38:c4:56:2d:35:64:31:ef:54:c1:3a:f0:9b:
                    e7:d4:9a:a9:16:6c:a9:2c:85:ad:eb:c3:fa:7a:5e:
                    8d:0d:a3:47:93:71:59:3f:e7:9e:2a:3b:b7:22:7d:
                    26:76:75:8f:03:db:41:e6:15:b0:3e:08:ad:88:44:
                    f1:a9:8d:6e:ab:45:9c:d1:0d:22:86:93:a8:af:dc:
                    32:0e:4b:3f:f1:97:41:19:3d:fe:1a:df:9f:a4:02:
                    df:2e:24:40:5e:2b:45:45:9e:01:5b:b0:86:16:6d:
                    8c:24:58:5b:d8:62:81:11:68:d9:85:12:4b:ea:b1:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4D:33:B9:4D:3C:D8:A3:FC:BB:63:F4:65:5C:E8:0F:95:8E:B4:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc7f0507-7a62-3182-beda-806aa55f9f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c6:11:66:4c:8e:aa:d6:63:3e:8e:f5:7d:1e:23:a5:fb:37:
         ca:c2:fb:7d:c9:55:f9:28:31:77:ce:2e:82:11:66:5f:86:04:
         17:7b:57:df:5b:05:10:cc:96:5a:46:99:40:d2:3c:5f:c1:05:
         f4:ce:f2:59:b7:e4:1c:e5:67:cd:97:82:20:0c:2e:54:44:8d:
         87:5a:7d:d6:70:96:d6:4e:8b:94:97:1a:61:93:d9:78:65:31:
         71:77:8c:41:ed:b9:37:3b:92:1d:4d:f6:1e:dc:81:c0:62:fe:
         0f:f4:b0:57:4b:45:97:11:3f:5d:67:20:67:32:0d:55:d3:fe:
         b9:69:51:6e:ec:e1:1a:b3:24:c7:4f:e4:13:7c:3f:08:1e:9b:
         b1:11:90:6b:1f:e5:43:1b:fd:59:45:f4:42:48:13:f4:2d:5a:
         8d:06:34:b1:f0:83:61:dc:64:00:ca:22:fb:1d:15:c1:4d:b0:
         54:a0:c0:2f:1d:c8:14:78:fa:00:49:b8:6e:2a:80:2b:39:f0:
         9d:63:ec:14:b5:cf:d5:86:47:21:fc:b8:cd:84:ba:a7:80:49:
         a2:18:7b:e5:1c:4e:f0:3e:a4:5c:b5:58:eb:4b:c4:58:98:f4:
         60:c6:ed:d5:6e:f2:24:15:c3:01:2b:b5:42:7c:ca:a6:01:cc:
         24:be:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:10 2025 by rpki-client