Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/13998bd5-7082-3169-8300-529a940247b4.roa
File:                     13998bd5-7082-3169-8300-529a940247b4.roa (raw, json)
Hash identifier:          gIwkHbdSQFkgq74lyPdBBtLQsE0CosjSFtoarzFTM20=
Subject key identifier:   9C:EC:2C:71:1D:A4:FD:6C:18:93:21:0E:6A:4D:AD:64:D9:67:C4:E7
Certificate issuer:       /CN=e0d54f0d-8151-4500-80b5-008165b77555
Certificate serial:       010D0C9F4328584A14657CF4112240910EFC8780
Authority key identifier: 6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/13998bd5-7082-3169-8300-529a940247b4.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     11664
IP address blocks:        173.241.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:7c:f4:11:22:40:91:0e:fc:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d54f0d-8151-4500-80b5-008165b77555
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=c3bb1db4-4d5d-4583-bc1e-f4ac31e686f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:79:3e:a5:00:f0:0a:de:b2:ae:72:cf:d9:
                    13:c1:5c:a2:4c:b6:24:07:8d:e2:d3:aa:aa:a7:bd:
                    81:1f:fa:0a:2b:87:b2:da:41:1a:49:a1:66:16:30:
                    5a:ba:0d:3a:4b:33:11:33:e1:fd:b6:e8:92:67:8e:
                    43:26:ad:27:a9:86:dd:78:30:cc:af:5a:7d:34:6e:
                    cf:4c:50:9b:44:f1:d3:f6:05:b8:f2:72:2c:fa:b1:
                    d7:67:1c:2a:bb:96:7c:30:45:f6:23:aa:aa:37:bd:
                    e9:65:04:2f:c3:3a:d3:ed:03:7a:19:0a:19:58:1e:
                    30:c7:40:c9:8d:6c:2f:d7:09:64:63:15:43:fc:8d:
                    4f:3b:51:55:cc:8d:30:4d:40:bc:c9:ce:75:35:3e:
                    33:14:6b:e7:4c:2a:b3:bb:2b:4f:da:44:fb:f1:b9:
                    18:49:b3:49:f2:94:bb:08:fc:cb:ab:16:79:d3:06:
                    98:d5:d4:71:3a:5d:2d:63:39:0e:e5:d2:00:89:c6:
                    e9:bd:bb:39:c4:72:48:6f:d3:ab:e5:be:18:d5:8b:
                    66:73:91:86:41:34:3b:2e:14:35:b5:c7:c9:f9:01:
                    e2:09:01:c7:83:65:ad:eb:0d:be:96:e1:01:da:f9:
                    a6:3b:13:33:2d:f5:a7:ad:e3:dd:d8:6e:51:a5:07:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EC:2C:71:1D:A4:FD:6C:18:93:21:0E:6A:4D:AD:64:D9:67:C4:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/13998bd5-7082-3169-8300-529a940247b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl

            X509v3 Authority Key Identifier:
                keyid:6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:dd:8d:93:7b:1a:7e:6a:4a:bb:5f:e2:88:89:b4:a9:44:8a:
         1f:2c:28:2e:d4:16:63:ac:20:dd:f1:a8:ee:3b:a3:16:30:19:
         55:8c:18:5a:45:34:99:02:37:53:e5:d9:59:ed:30:02:ce:f1:
         11:1e:d0:18:50:c7:a0:84:d1:10:c2:e7:a2:1a:3c:32:60:b0:
         25:a5:a6:39:4f:10:16:4a:70:39:58:ce:55:ce:72:7d:4b:8c:
         ef:84:93:4f:c3:44:e5:18:01:9c:e7:d0:2c:0e:2b:a9:30:aa:
         01:a9:81:36:a6:8b:73:ec:ba:b4:40:df:d6:25:f7:d3:21:03:
         98:53:1b:eb:80:d6:5a:6a:e0:81:6c:ff:9a:f5:f0:c8:01:39:
         dc:e8:39:78:3d:17:28:ec:d7:2f:31:b2:26:8d:aa:a2:57:1d:
         fa:27:20:2b:1a:68:dc:b3:4f:1b:26:24:67:05:b9:6b:25:2b:
         88:1e:b2:20:9a:22:79:d2:82:7a:bc:6d:29:4c:4a:27:49:fa:
         ed:57:70:1d:80:65:dd:67:b1:58:99:60:d7:2e:31:a8:f1:17:
         04:59:1f:da:f8:ea:81:a1:35:8d:03:1e:7f:63:b5:a1:2b:2d:
         4e:2a:c7:78:aa:74:0b:2e:9b:74:d9:65:30:7b:bc:1a:9c:a3:
         17:ae:66:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:59:41 2025 by rpki-client