Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/50716423-c0d2-32a6-be60-03fd15878cf3.roa
File:                     50716423-c0d2-32a6-be60-03fd15878cf3.roa (raw, json)
Hash identifier:          vUcwIfIb2G3ZZJmtmdBDUswbW/2UJzQEO+hSIeDoejI=
Subject key identifier:   83:AF:D4:BB:3B:95:36:62:C0:EE:6C:C9:4F:96:80:E1:48:6E:1E:1F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA1F3240ABBCE3A6DCBF20
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/50716423-c0d2-32a6-be60-03fd15878cf3.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.17.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:1f:32:40:ab:bc:e3:a6:dc:bf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=75ba82d6-8714-434f-b301-f3b162e07530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7c:d4:c5:c5:d9:41:08:3f:85:06:59:40:6a:
                    92:af:5b:f3:8a:d3:61:45:dd:a5:f1:53:9d:73:49:
                    17:a2:7f:f0:c9:db:23:fc:d5:db:25:90:a1:dd:38:
                    c8:73:bc:62:1a:08:db:86:c9:a0:13:c7:a9:05:84:
                    53:aa:31:24:af:7b:03:1e:2a:b0:dc:33:6e:93:88:
                    46:b0:65:67:32:15:72:a5:f8:b0:5a:19:6b:f4:c5:
                    62:9d:4d:fe:31:49:2d:a8:b7:10:7f:82:ba:cf:9f:
                    d9:fc:1a:43:2d:8e:9b:50:5e:0a:28:e4:72:0f:12:
                    f0:18:ee:13:d4:ca:98:a7:15:64:c7:ed:9e:5c:4f:
                    22:5a:f3:47:ef:04:ee:67:e4:73:14:dc:30:b3:f0:
                    69:0a:c8:71:51:a3:36:ad:98:e7:4a:6e:25:b7:10:
                    59:ef:e3:99:4b:85:72:38:6c:15:bd:9b:61:6f:ec:
                    ec:9a:64:8f:22:1d:c0:27:41:13:22:4e:95:da:8f:
                    45:1b:ef:76:43:6e:0b:8e:ed:70:31:4e:c7:34:67:
                    d5:36:94:c7:02:9c:8c:da:4c:6c:17:ed:a2:58:9d:
                    dc:46:57:4f:e6:cd:d8:14:b8:50:f6:43:1b:4f:80:
                    f3:bc:8c:d0:ba:88:21:ff:88:88:c8:f3:11:32:c1:
                    ab:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AF:D4:BB:3B:95:36:62:C0:EE:6C:C9:4F:96:80:E1:48:6E:1E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/50716423-c0d2-32a6-be60-03fd15878cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:7b:a7:5a:5f:16:85:c1:59:d0:74:f1:69:fe:3f:8c:a4:97:
         16:09:61:68:1b:33:fc:c7:34:59:90:bb:39:d8:60:83:63:cc:
         a2:d5:31:98:05:61:f9:92:b8:6e:e8:2f:60:0d:83:a5:3b:ce:
         d2:90:aa:06:d5:3f:be:31:17:13:5c:06:b8:2a:3c:5d:55:5c:
         a7:ec:d6:40:6e:1a:65:1f:62:07:7f:55:6c:06:4f:27:49:64:
         39:e2:25:97:5d:74:22:f0:3e:c7:02:c4:8e:b4:7d:15:e1:03:
         ac:0e:81:3f:4b:a7:29:0c:ba:7b:1a:5d:52:8e:f4:cd:d3:25:
         d0:37:42:0c:ef:08:3c:0e:aa:09:7e:23:41:f8:5e:d8:d0:64:
         d0:78:00:a3:f8:78:2e:65:5d:7e:80:3e:10:bd:a6:72:66:21:
         73:57:9d:7a:91:8f:f7:46:6b:16:2b:9c:90:56:17:e6:7c:b9:
         89:99:9b:50:b9:f3:f2:d9:cc:c7:79:f5:f1:29:12:33:80:dd:
         fe:23:fd:b8:e9:32:d8:82:b8:21:bf:bb:f7:5f:99:3a:ce:b0:
         fb:2f:c0:18:60:ef:e0:52:9f:2b:51:e2:35:e7:98:c7:7d:3b:
         67:28:40:c3:0b:12:02:51:ee:d5:c8:c1:7f:24:d5:53:03:b2:
         3a:b1:1a:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuh8yQKu846bcvyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NzViYTgyZDYtODcxNC00MzRmLWIzMDEtZjNiMTYyZTA3NTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHzUxcXZQQg/hQZZQGqSr1vzitNhRd2l8VOd
c0kXon/wydsj/NXbJZCh3TjIc7xiGgjbhsmgE8epBYRTqjEkr3sDHiqw3DNuk4hG
sGVnMhVypfiwWhlr9MVinU3+MUktqLcQf4K6z5/Z/BpDLY6bUF4KKORyDxLwGO4T
1MqYpxVkx+2eXE8iWvNH7wTuZ+RzFNwws/BpCshxUaM2rZjnSm4ltxBZ7+OZS4Vy
OGwVvZthb+zsmmSPIh3AJ0ETIk6V2o9FG+92Q24Lju1wMU7HNGfVNpTHApyM2kxs
F+2iWJ3cRldP5s3YFLhQ9kMbT4DzvIzQuogh/4iIyPMRMsGrUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIOv1Ls7lTZiwO5syU+WgOFIbh4fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTA3MTY0MjMtYzBkMi0z
MmE2LWJlNjAtMDNmZDE1ODc4Y2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZ7p1pfFoXBWdB08Wn+P4yklxYJYWgbM/zHNFmQuznYYINjzKLVMZgF
YfmSuG7oL2ANg6U7ztKQqgbVP74xFxNcBrgqPF1VXKfs1kBuGmUfYgd/VWwGTydJ
ZDniJZdddCLwPscCxI60fRXhA6wOgT9LpykMunsaXVKO9M3TJdA3QgzvCDwOqgl+
I0H4XtjQZNB4AKP4eC5lXX6APhC9pnJmIXNXnXqRj/dGaxYrnJBWF+Z8uYmZm1C5
8/LZzMd59fEpEjOA3f4j/bjpMtiCuCG/u/dfmTrOsPsvwBhg7+BSnytR4jXnmMd9
O2coQMMLEgJR7tXIwX8k1VMDsjqxGi0=
-----END CERTIFICATE-----
Generated at Fri May 9 20:47:43 2025 by rpki-client