Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42a1c371-76f3-3cab-8604-eda1b70b5556.roa
File:                     42a1c371-76f3-3cab-8604-eda1b70b5556.roa (raw, json)
Hash identifier:          FcwohduSNuWI2Ki3DnTguv63dWrKcZ0L9b3hL7BL8T4=
Subject key identifier:   53:BF:ED:4A:9C:F8:41:5B:31:21:F8:E9:60:79:4D:46:17:4F:A7:E8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF5EFF4766744F9545E740
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42a1c371-76f3-3cab-8604-eda1b70b5556.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.31.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:5e:ff:47:66:74:4f:95:45:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=1bfbbd8c-4b37-46a2-a4e5-c678016176bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c2:05:3c:d6:24:3a:67:a2:f2:99:51:fa:f4:
                    cd:58:da:f9:1a:8e:10:76:ea:93:a8:c6:ba:2e:a4:
                    f5:40:b1:e1:01:1d:8c:06:73:f1:fd:47:b9:32:33:
                    df:e9:c2:59:e8:7e:9c:43:15:5b:26:e8:08:dc:5d:
                    51:07:3e:5f:41:52:8e:9f:09:ec:3d:5a:b3:2e:52:
                    df:df:b4:48:a6:f1:36:54:1e:d6:3a:fd:af:79:2f:
                    0e:14:b5:fa:74:a2:d2:da:1e:e8:98:45:0d:11:ff:
                    ab:5d:29:58:24:8a:8d:f0:eb:da:5d:bc:cf:77:fe:
                    76:87:32:d9:cb:16:d2:1c:7e:61:92:16:bd:61:8c:
                    6a:49:62:7c:6e:65:ff:47:52:01:fa:72:22:85:c2:
                    5f:f7:67:af:b2:3e:9b:8f:7f:ac:59:d3:01:e3:41:
                    c3:0b:d9:e9:b5:33:57:6c:e2:17:31:7d:8b:27:39:
                    87:b5:c2:69:1d:83:eb:be:24:4b:12:35:51:94:49:
                    74:f2:be:7c:3e:ba:1a:2e:7d:03:a2:6b:6d:54:2b:
                    1a:72:57:88:b6:cf:9a:1e:86:c1:78:74:33:23:05:
                    27:99:0e:a9:57:fe:49:75:33:08:1e:97:b6:cf:1f:
                    73:c4:62:9d:56:e7:f7:c6:23:33:d1:f0:0a:46:27:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BF:ED:4A:9C:F8:41:5B:31:21:F8:E9:60:79:4D:46:17:4F:A7:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42a1c371-76f3-3cab-8604-eda1b70b5556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:dd:ad:e5:22:a4:f4:02:86:82:53:70:42:52:67:29:1a:ad:
         a6:4d:41:6f:98:90:3e:5b:d3:cd:1d:69:84:27:ec:9e:4a:fc:
         bc:bc:b3:0f:61:ee:8a:c9:dd:78:42:8a:46:88:50:e0:eb:82:
         5b:ea:d9:07:3b:14:e4:53:0b:28:52:55:f6:dd:3a:b3:4d:58:
         e0:e9:79:35:d8:aa:07:83:04:9e:d1:0d:a4:ae:7b:24:ea:fa:
         2c:7a:ea:da:bd:40:23:db:3e:63:86:ca:e4:3b:7c:07:33:e4:
         f8:54:ca:d6:42:f6:81:7a:06:04:b0:27:93:32:a4:88:90:73:
         a3:16:99:2f:db:50:9d:01:d2:c0:8e:df:ec:6e:3e:09:5c:41:
         ae:57:f8:3a:de:01:c7:ac:f1:01:0f:b8:00:94:f8:6c:81:c0:
         c0:75:a0:21:7e:d5:d9:5f:9e:f3:b5:97:25:29:90:3d:ff:cd:
         cd:8d:e4:8d:2e:bc:5d:29:c5:f9:e4:78:03:aa:e0:f5:f7:bd:
         14:ce:a5:36:19:89:da:ff:41:9d:d7:22:a6:54:98:94:80:b8:
         76:ad:a4:57:77:fb:92:36:2b:01:4c:1f:04:f3:7e:ad:4c:71:
         15:7d:f1:f6:10:4e:52:d9:f1:be:3a:7c:b8:56:0c:87:cc:93:
         aa:d9:69:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh717/R2Z0T5VF50AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk
MWJmYmJkOGMtNGIzNy00NmEyLWE0ZTUtYzY3ODAxNjE3NmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsIFPNYkOmei8plR+vTNWNr5Go4QduqTqMa6
LqT1QLHhAR2MBnPx/Ue5MjPf6cJZ6H6cQxVbJugI3F1RBz5fQVKOnwnsPVqzLlLf
37RIpvE2VB7WOv2veS8OFLX6dKLS2h7omEUNEf+rXSlYJIqN8OvaXbzPd/52hzLZ
yxbSHH5hkha9YYxqSWJ8bmX/R1IB+nIihcJf92evsj6bj3+sWdMB40HDC9nptTNX
bOIXMX2LJzmHtcJpHYPrviRLEjVRlEl08r58ProaLn0DomttVCsacleIts+aHobB
eHQzIwUnmQ6pV/5JdTMIHpe2zx9zxGKdVuf3xiMz0fAKRiefyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFO/7Uqc+EFbMSH46WB5TUYXT6foMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDJhMWMzNzEtNzZmMy0z
Y2FiLTg2MDQtZWRhMWI3MGI1NTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHdreUipPQChoJTcEJSZykaraZNQW+YkD5b080daYQn7J5K/Ly8sw9h
7orJ3XhCikaIUODrglvq2Qc7FORTCyhSVfbdOrNNWODpeTXYqgeDBJ7RDaSueyTq
+ix66tq9QCPbPmOGyuQ7fAcz5PhUytZC9oF6BgSwJ5MypIiQc6MWmS/bUJ0B0sCO
3+xuPglcQa5X+DreAces8QEPuACU+GyBwMB1oCF+1dlfnvO1lyUpkD3/zc2N5I0u
vF0pxfnkeAOq4PX3vRTOpTYZidr/QZ3XIqZUmJSAuHatpFd3+5I2KwFMHwTzfq1M
cRV98fYQTlLZ8b46fLhWDIfMk6rZad0=
-----END CERTIFICATE-----
Generated at Fri May 9 03:58:13 2025 by rpki-client