Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e61e0a4-2b9a-38bf-8cfc-f237b4cf83c7.roa
File:                     2e61e0a4-2b9a-38bf-8cfc-f237b4cf83c7.roa (raw, json)
Hash identifier:          Je3Kyl5Pu4c+Qug+J/x7N6lrPyqQKVa/PUBgh9pNy7k=
Subject key identifier:   5C:C1:6D:7F:30:98:D6:BC:1C:A5:56:2F:2C:73:EE:AA:57:A5:B3:2D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849B0D42CF19BF2429DAFCFF5EC
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e61e0a4-2b9a-38bf-8cfc-f237b4cf83c7.roa
Signing time:             Tue 29 Apr 2025 21:03:36 +0000
ROA not before:           Tue 29 Apr 2025 21:03:36 +0000
ROA not after:            Mon 28 Jul 2025 21:03:36 +0000
asID:                     19905
IP address blocks:        173.26.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b0:d4:2c:f1:9b:f2:42:9d:af:cf:f5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 29 21:03:36 2025 GMT
            Not After : Jul 28 21:03:36 2025 GMT
        Subject: CN=cedd9878-c9c2-4b68-a710-0d75718eb962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d8:27:fa:4c:28:ab:16:7e:b6:56:eb:2b:61:
                    2a:8d:da:78:22:1b:42:71:51:f9:ed:64:ce:96:de:
                    12:b1:99:50:94:2c:ab:03:71:36:2c:3d:10:8a:1a:
                    94:a7:b3:52:ad:7f:39:40:a1:25:00:b4:86:00:9b:
                    c5:de:21:b0:ce:4f:58:74:05:d4:18:e9:f4:7e:5a:
                    e3:05:de:43:25:62:17:f0:0d:79:59:20:79:40:e4:
                    df:3c:91:b3:9f:17:39:4c:f4:36:76:1a:fc:98:54:
                    96:de:3b:d0:58:c9:64:4f:d9:39:b8:78:e7:6c:1d:
                    25:69:3d:fc:96:88:f5:f8:26:58:80:8f:bf:78:8b:
                    97:34:d1:33:84:a5:cf:c3:a5:d1:40:ec:6d:51:6e:
                    36:ca:99:ba:50:e8:56:e5:57:9d:b9:d8:5d:a2:f3:
                    39:cc:1d:7c:32:41:2b:95:75:b4:5b:df:2e:d1:27:
                    40:0a:b5:17:75:b7:6e:5e:aa:53:c3:d6:17:b4:ea:
                    fc:a5:26:6d:be:26:fd:c0:3b:41:21:d5:71:88:9d:
                    3b:71:10:9c:17:d7:4a:71:2d:44:f8:ef:74:9c:f6:
                    a5:51:3b:e4:03:65:8f:f4:62:d9:34:c3:af:c2:e2:
                    5b:ba:4a:4c:0e:d4:61:af:43:02:4a:33:5c:d2:f9:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C1:6D:7F:30:98:D6:BC:1C:A5:56:2F:2C:73:EE:AA:57:A5:B3:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e61e0a4-2b9a-38bf-8cfc-f237b4cf83c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a6:e3:be:a3:6f:70:48:fa:31:19:28:48:ba:94:db:dd:17:
         2d:4d:14:fd:cc:72:c7:35:c9:eb:77:b1:7d:8b:61:56:e5:af:
         e7:b1:2f:39:78:bf:9e:85:d9:2e:d1:90:75:18:ed:f7:f5:6f:
         1d:7e:dc:c6:01:a7:f9:d3:cc:90:72:51:5e:bd:b0:90:27:25:
         4f:08:79:4b:ef:4b:16:0c:34:7f:7c:11:e1:28:f3:fa:11:6f:
         61:30:b0:a6:e7:02:11:eb:04:51:0e:b3:2b:d7:dc:dd:7b:80:
         04:e4:6d:d3:3c:d8:94:d9:06:95:b2:ad:d1:f8:0f:dc:14:4a:
         5e:92:ce:8b:cb:1e:e7:e0:4b:cf:25:3a:62:aa:5a:1d:d6:21:
         bc:18:2b:d3:00:d7:34:60:cb:39:30:e3:c6:43:a6:5e:00:27:
         f3:79:5b:0a:ac:1f:5b:ff:d0:15:9b:2f:4b:20:bb:d4:aa:1e:
         eb:31:99:14:8a:cf:48:8f:31:d5:46:2d:c6:83:af:00:86:f5:
         4d:48:d1:2c:8f:e0:47:21:bd:60:ae:86:a0:76:2f:d3:8e:af:
         52:ac:94:ab:89:6c:29:d9:39:a1:2d:60:48:f6:f6:ad:4a:e5:
         2c:fe:18:d2:bd:98:11:32:65:31:ef:78:d4:63:e5:31:a7:f4:
         52:0a:98:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:56:53 2025 by rpki-client