Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2134ce84-4ecd-3be9-b2fc-1c17cd655bfc.roa
File:                     2134ce84-4ecd-3be9-b2fc-1c17cd655bfc.roa (raw, json)
Hash identifier:          Ge/umRsyX9eKUk22sdCRAawC9CpJMEXoe16kBpuS3Ao=
Subject key identifier:   C5:7A:3F:D3:D5:47:2B:0E:78:E1:7A:9A:5C:22:04:E9:0C:AE:DC:EE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584996C49579461664FEB30E3DA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2134ce84-4ecd-3be9-b2fc-1c17cd655bfc.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.20.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:95:79:46:16:64:fe:b3:0e:3d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=855281a5-f897-493f-8ea1-a72d19f86b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:59:c1:9f:49:76:d9:1d:2b:ee:fb:b1:c9:a4:
                    83:fd:91:13:cb:ef:1b:7e:06:c1:ce:54:09:8f:0a:
                    35:3d:1f:08:81:a2:b8:72:b0:38:8f:d0:1e:28:e1:
                    bc:ce:af:f4:c8:43:5a:fc:20:6c:59:0a:23:0c:27:
                    d9:ee:81:70:3d:ba:f4:f2:d3:29:c9:8a:e9:11:cb:
                    23:b3:08:54:d5:3f:e7:9f:55:36:35:fa:ed:8f:0d:
                    88:e2:f6:d3:e8:d6:61:57:e4:5f:c6:37:7c:53:b2:
                    d2:3a:a5:2d:e4:bd:a4:b3:24:3f:f6:d9:00:d6:f6:
                    42:bc:53:35:50:b8:13:96:3e:80:d0:17:df:b5:d9:
                    3e:38:69:9c:0b:78:6d:b1:cf:c3:82:2a:2d:3f:dc:
                    12:3b:d5:63:c5:da:1e:08:e4:f5:9b:97:f2:7f:c7:
                    0b:72:e7:75:a2:80:e0:8b:70:21:7d:92:7d:cd:d5:
                    af:fa:65:0d:4b:e3:ba:d0:55:32:10:1c:18:58:d4:
                    e6:86:64:c9:db:a1:1b:b5:4d:96:7d:49:2b:b2:3f:
                    bd:e9:e2:fc:15:2d:e8:5e:6b:b9:4f:c6:54:ce:07:
                    86:4d:6f:7f:e9:43:e8:7b:a9:54:b1:0a:9d:c5:43:
                    41:b4:6a:d9:62:c0:af:7a:67:36:26:59:a8:a3:7d:
                    ce:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7A:3F:D3:D5:47:2B:0E:78:E1:7A:9A:5C:22:04:E9:0C:AE:DC:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2134ce84-4ecd-3be9-b2fc-1c17cd655bfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:3e:f0:f1:81:3b:6c:00:36:ae:19:a0:42:1c:3f:5f:d5:b7:
         20:4c:11:e9:b4:c2:47:a6:fb:0d:9c:fa:3e:9d:6c:fd:40:3c:
         83:11:89:08:ad:4d:52:4e:c8:82:eb:34:31:76:fa:02:1b:02:
         bc:96:4d:63:c0:93:a1:d5:b4:3a:0f:db:a6:86:62:af:92:36:
         ec:16:6a:ee:4b:75:c1:77:ff:07:38:3e:1a:a6:c9:0a:dc:ac:
         86:bb:d6:a4:d2:cd:4f:6c:56:8a:bf:99:7e:c7:37:39:73:22:
         0b:2d:7d:28:68:67:bf:bd:dd:eb:29:c1:f8:de:ac:0a:66:e9:
         26:f7:b6:ac:68:5c:4f:66:b8:b3:b0:ab:d4:fe:4e:4a:15:df:
         b7:5f:36:35:a7:c9:f0:5c:ab:c6:75:ae:9c:70:8c:ea:5e:a8:
         e8:74:d2:8f:93:96:69:36:6b:c8:42:0f:b8:8a:ce:ea:ae:b9:
         c8:45:44:31:0c:99:1f:25:99:0f:49:ef:a7:b7:2b:8e:7b:db:
         00:f1:5d:39:cf:94:c0:83:31:41:fa:b8:7b:2b:20:0f:65:e6:
         34:51:6e:72:3a:4f:34:64:f8:43:4e:74:bf:89:6c:db:18:01:
         d9:c8:00:c5:4d:0e:87:b1:8a:de:45:a1:07:2e:52:f3:bb:8c:
         73:31:66:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:04:57 2025 by rpki-client