Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9078c15a-7e99-334f-8e93-4ff3d23c92e8.roa
File:                     9078c15a-7e99-334f-8e93-4ff3d23c92e8.roa (raw, json)
Hash identifier:          gnbk3sg0xmlhvjT2C4C+xKLZ4zpmyroa6axmK7o1oUM=
Subject key identifier:   F7:56:8D:21:6D:5F:63:FF:E3:43:A7:3F:16:8D:8B:68:3D:B6:A5:99
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F43285848B8F0CDC3A84586816AB38A00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9078c15a-7e99-334f-8e93-4ff3d23c92e8.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     11090
IP address blocks:        185.30.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:cd:c3:a8:45:86:81:6a:b3:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=bb713f21-a688-4d0e-8c50-85ef70708a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0e:4d:f3:32:5e:c9:cd:83:14:03:ac:ab:e0:
                    32:34:dd:91:03:d1:37:2f:ce:25:14:ba:60:47:49:
                    94:e5:da:78:0e:15:e7:f5:af:00:e6:1a:cc:90:91:
                    ae:d5:83:1d:39:16:ad:cc:f4:ea:01:3f:a1:b2:ea:
                    ba:84:20:a6:ee:60:ad:56:71:11:a8:22:c6:15:6a:
                    50:e1:1c:0c:d1:6f:f4:f2:f1:91:cd:1d:1a:0b:93:
                    16:0f:50:d3:99:c0:00:a8:d2:e4:d2:5a:9e:dc:f3:
                    90:38:7b:1e:72:f9:59:66:e8:fe:d4:1a:64:00:87:
                    ec:8b:3e:5f:ae:69:c2:fe:bf:15:5d:2a:fb:8e:57:
                    00:8b:3e:1c:d6:10:18:de:7e:ff:2e:97:a9:14:0c:
                    27:f9:88:42:d2:c8:13:09:a4:79:a5:8d:2a:53:05:
                    41:ca:f2:86:dd:12:49:a2:7e:84:67:ad:7f:3b:8f:
                    61:76:15:31:ae:a5:6a:5e:d2:5d:e7:00:40:eb:e0:
                    b2:c3:66:0f:bd:f1:90:85:3e:ec:36:df:43:ba:2d:
                    75:32:15:2b:2f:eb:7f:15:4c:c6:2e:8e:35:fa:a3:
                    a6:cb:78:86:ef:68:8f:b4:d1:26:35:7c:ff:84:6b:
                    a3:c0:25:d9:87:88:9d:aa:8d:fe:d2:28:63:94:70:
                    13:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:56:8D:21:6D:5F:63:FF:E3:43:A7:3F:16:8D:8B:68:3D:B6:A5:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9078c15a-7e99-334f-8e93-4ff3d23c92e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0f:61:3e:b3:e8:43:11:c3:7a:24:d6:11:a0:7a:d7:fa:f4:
         98:b9:fe:16:83:be:4a:eb:ef:46:3b:04:18:42:a8:5e:25:37:
         ea:87:4a:76:0d:4c:df:3e:bd:94:d6:49:08:72:62:97:84:34:
         9c:32:29:db:5c:08:f9:03:eb:45:45:6e:85:63:18:bf:cf:80:
         64:3b:a4:c5:17:d0:7a:20:fc:64:df:83:bc:bb:ac:e7:9e:f1:
         3d:71:ca:08:f8:e8:73:1d:d6:e4:06:79:b4:c2:53:97:a3:94:
         88:14:a1:f0:36:3c:7c:51:bc:0f:7e:db:79:df:ca:3d:5f:0a:
         ca:57:a9:7f:95:f0:aa:88:25:c1:0f:08:45:bb:1b:21:cf:3b:
         8c:fc:ec:07:ae:2f:0f:cf:34:67:2a:e9:01:ef:ef:1a:ad:cf:
         31:1a:f6:2e:95:4b:70:4f:dc:54:9a:f5:35:f2:2d:8e:bb:73:
         60:03:a8:6b:e8:76:3c:04:ef:e6:22:9b:e1:a3:50:0a:4c:3e:
         9a:62:14:6b:42:13:61:76:9b:1e:58:bc:e0:09:c9:bb:e7:d7:
         79:9a:df:b8:ad:6a:2e:7d:e7:6d:d5:d6:6d:65:a8:5b:69:8f:
         d4:e4:fe:79:22:48:85:10:e6:3a:d1:fb:bd:58:6b:6a:cf:99:
         cd:9d:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:21:39 2025 by rpki-client