Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55a2fa81-3e0c-3ef8-a494-40b73990f4d1.roa
File:                     55a2fa81-3e0c-3ef8-a494-40b73990f4d1.roa (raw, json)
Hash identifier:          yekRVD4Y9ykhfAL1A2lzsHaNGC6+Co7sGeVzNmMUTmo=
Subject key identifier:   83:12:0C:E2:02:65:BE:0B:A1:3A:AB:F5:8B:FA:7C:DF:2D:E0:FC:59
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA3FF03EAD86F770FC0B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55a2fa81-3e0c-3ef8-a494-40b73990f4d1.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.25.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:3f:f0:3e:ad:86:f7:70:fc:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=1e528c14-0f4d-4688-b519-fda746c61776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a1:3e:c4:08:20:d8:d4:18:8f:3b:39:11:64:
                    45:f5:34:87:f7:05:59:1e:f7:7e:4e:11:e4:d5:df:
                    bc:3b:91:bd:93:8d:3c:f0:1e:59:ca:da:a1:74:1c:
                    70:5a:c7:06:98:3f:b2:f1:fd:7e:3c:fa:a8:18:d3:
                    07:34:8c:86:6a:c3:39:8d:c2:c3:d3:02:df:e6:9b:
                    68:de:3c:1f:de:38:8d:ce:7f:95:03:6c:a0:70:35:
                    8d:3a:a4:79:1d:b5:f0:eb:21:a0:cd:4a:df:89:45:
                    26:e5:28:b1:4a:32:56:65:07:b7:41:35:8a:61:70:
                    50:89:aa:e5:4d:7b:a7:31:ed:d8:21:ef:c8:3d:f5:
                    30:c7:8c:06:e5:93:ba:e7:2f:c7:0a:52:2c:25:d4:
                    2f:0b:65:7e:68:5a:f7:24:4b:95:98:8f:fa:e4:4f:
                    ef:43:0e:19:0f:3b:b5:c0:a2:eb:13:92:b1:2c:81:
                    15:db:50:b0:ba:82:57:4b:37:65:76:30:76:bc:92:
                    32:93:61:b0:f8:da:6d:80:56:13:fb:f9:8f:b1:11:
                    89:cd:3e:2c:4d:68:61:f8:35:12:73:c8:4f:e8:6b:
                    f8:ad:42:86:57:43:18:cc:55:e1:fe:24:ee:4c:cf:
                    c0:37:3e:78:ea:c3:cc:ed:90:35:e8:29:68:5e:94:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:12:0C:E2:02:65:BE:0B:A1:3A:AB:F5:8B:FA:7C:DF:2D:E0:FC:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55a2fa81-3e0c-3ef8-a494-40b73990f4d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:09:5f:52:6b:52:3c:e3:ab:ff:3f:63:74:18:f2:59:f9:c8:
         51:35:fb:23:d7:98:5d:f9:99:8c:a6:e2:ea:10:da:01:a0:6f:
         22:b7:33:23:75:ce:12:87:1d:91:fe:b8:0e:6d:d8:f0:d7:83:
         4f:99:e1:79:5b:87:e7:67:85:1c:a0:3b:4a:62:0a:61:49:fb:
         1f:fa:23:98:67:70:0a:06:3e:7d:cd:b9:77:6e:ac:c9:88:ba:
         11:e7:32:60:97:4f:1c:3f:75:6a:83:32:2b:1f:16:27:ae:f9:
         5a:95:0b:cc:cc:a9:4a:4f:6e:53:05:a5:ec:dd:fb:41:37:f0:
         0c:4f:dd:a1:32:83:ae:0a:39:7b:fe:6e:dc:eb:1f:94:77:7f:
         8e:86:62:6c:60:ee:c8:04:35:6f:02:0d:d6:f7:91:48:a5:bf:
         c5:07:52:14:af:75:30:97:fd:b5:ad:90:ff:19:70:c2:15:a4:
         62:49:c7:18:d3:ab:d3:a0:70:89:7a:13:bb:8a:a3:e9:e9:cd:
         ba:1d:1e:76:58:b7:38:b1:3d:ec:5c:b2:c9:92:06:c4:75:fa:
         5f:1a:51:4f:27:f5:d6:8c:a9:ff:59:c3:ea:f6:e5:d1:1e:e9:
         09:db:d1:06:ff:e4:7f:93:23:7f:a1:a8:81:50:4f:1a:36:44:
         c5:7e:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:43:12 2025 by rpki-client