Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35a3d056-2c42-3007-9cfa-92e09d07c46e.roa
File:                     35a3d056-2c42-3007-9cfa-92e09d07c46e.roa (raw, json)
Hash identifier:          oiDjlINtV8KfJGixBGgFCfMWxIhx2nTW9t7BV4KPCIQ=
Subject key identifier:   6A:6A:12:C5:57:8D:D9:9D:8B:01:AB:3A:62:42:52:48:87:B8:9E:83
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F43285848E59BC0446BC78606267C5378
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35a3d056-2c42-3007-9cfa-92e09d07c46e.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        136.184.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:c0:44:6b:c7:86:06:26:7c:53:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=1c70cbdc-3816-4f89-9170-9683b105f144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:02:08:9b:3f:24:4b:54:fb:12:be:53:ed:cc:
                    e9:1c:45:f5:c7:8a:f0:eb:a2:2b:b4:8a:b4:25:ef:
                    cb:9d:5c:78:9f:9b:1b:36:62:44:c5:9b:68:a7:39:
                    a2:e3:b8:2f:41:48:9b:19:93:34:32:7c:40:d1:e0:
                    ce:2b:e8:87:a4:ae:db:ef:ce:33:95:a1:76:54:3e:
                    1c:3e:6f:38:c2:a0:9b:c0:a6:58:0d:03:2c:d5:00:
                    f8:da:b4:f8:51:5f:90:76:0a:56:59:59:03:be:f4:
                    82:35:97:40:84:75:e3:5e:9e:64:3b:12:f9:8c:49:
                    1e:57:ed:61:85:14:16:05:f0:45:22:3f:36:f9:cf:
                    a7:e2:39:fa:7f:4d:f5:08:f8:59:a0:66:e1:4a:5d:
                    e8:a8:85:8f:cb:aa:6d:f2:3e:60:aa:00:7a:f8:45:
                    72:87:0e:41:95:d1:99:0d:d7:c9:e9:7f:8e:3f:8b:
                    2a:f4:8b:d1:50:00:56:dd:b4:32:78:86:1e:0c:8c:
                    10:a1:13:41:36:70:12:83:28:5a:58:03:45:47:b7:
                    0d:07:3f:d4:de:09:12:5b:53:3b:90:36:a6:cb:24:
                    5b:39:b3:5e:89:87:af:78:9c:22:07:39:4c:0b:50:
                    59:36:ec:0f:50:1d:25:2f:54:57:eb:5a:3f:0f:b7:
                    fd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6A:12:C5:57:8D:D9:9D:8B:01:AB:3A:62:42:52:48:87:B8:9E:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35a3d056-2c42-3007-9cfa-92e09d07c46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:65:fc:6f:d7:94:8d:12:67:09:8b:f3:15:0e:71:bb:42:d2:
         fc:cc:ad:1d:bb:d5:95:90:75:30:94:26:2d:89:3a:29:c4:c8:
         1f:0e:5c:50:8e:c3:45:3e:5b:f1:d0:61:b8:fd:7a:90:e1:81:
         88:6a:30:37:18:ce:ca:c9:a1:54:3e:3c:2a:48:35:e1:bb:ef:
         7e:bf:64:f9:ea:aa:42:88:8d:38:d9:6e:99:1f:c2:85:19:66:
         c0:fa:5a:cb:81:0b:38:ae:0d:11:a4:4d:ce:55:69:8c:39:82:
         80:ee:dc:db:b9:e2:40:0e:49:75:04:20:06:42:75:27:dd:87:
         ea:3a:98:64:16:c8:ab:55:7c:a3:21:1a:90:26:7c:b6:44:64:
         a6:b8:53:63:68:0b:74:bb:40:2d:e5:c4:d5:04:6c:77:eb:1d:
         ba:75:1f:a5:8f:f9:36:9f:fe:3b:0a:28:03:af:69:6d:93:90:
         22:bb:aa:31:5e:9e:51:f7:c6:70:f5:82:07:d2:0b:87:ed:82:
         9c:b0:ac:bc:42:b6:4b:d6:57:39:3d:d3:f7:73:27:a0:02:d2:
         ed:9e:91:27:74:8e:99:f0:b9:ca:d1:db:9f:aa:b5:41:7c:40:
         a5:7b:51:79:4a:a5:d3:5a:1d:df:4f:80:e6:b7:e4:3d:08:75:
         ef:5a:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:39 2025 by rpki-client