Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa
File:                     9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa (raw, json)
Hash identifier:          XZpScL3erITmmeKf+IsYRs6evYShlf1a0dhSIgsknWw=
Subject key identifier:   C6:7F:62:E5:AF:6F:66:9D:D3:E5:05:CC:15:2A:6A:82:72:D0:2C:FC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF4ADC6D028A34CA3227F0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.19.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:4a:dc:6d:02:8a:34:ca:32:27:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=854d7d67-98a2-4baf-9360-96c23f5c5350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:a2:6d:b9:2d:70:0a:4c:23:c3:a7:57:11:
                    86:0b:12:b6:a1:b5:46:af:9b:84:96:33:3f:df:46:
                    11:47:0a:0c:c1:a2:bc:ae:59:14:a1:60:b3:2c:53:
                    64:3b:e1:cf:60:30:4e:36:31:4e:9f:43:50:10:2b:
                    40:a8:45:c4:91:af:14:c7:32:e9:a5:04:14:e8:30:
                    e8:cc:f2:36:04:33:f5:76:57:ca:3e:37:bd:da:b1:
                    76:51:b8:45:63:c5:e8:26:72:b2:e9:a6:6e:0a:b1:
                    7a:5b:26:12:54:f2:18:47:68:07:6d:0d:2b:17:f8:
                    8b:a9:84:25:8d:77:cb:91:5a:40:97:29:e7:60:54:
                    32:c0:60:1a:ff:d8:6d:e2:5c:fa:4c:f7:ad:f6:b8:
                    10:9f:bf:d8:a0:16:b4:94:d6:91:76:84:8c:11:19:
                    43:5f:04:e9:c9:f2:3a:8e:8d:91:97:93:d4:85:b1:
                    a7:fb:a6:c2:fa:5b:fa:8e:10:45:62:67:1f:d4:07:
                    5c:73:ca:e7:7b:bf:f5:44:65:0e:ce:6b:24:fb:b5:
                    67:b8:09:7a:50:48:2b:ee:a3:b5:13:d2:18:a2:50:
                    4c:35:45:06:4a:2f:4a:6b:bc:ba:ea:06:bd:b3:ef:
                    2d:7f:f0:d0:b5:b5:fb:fd:e5:16:12:b6:dc:20:0e:
                    0d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7F:62:E5:AF:6F:66:9D:D3:E5:05:CC:15:2A:6A:82:72:D0:2C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:5e:03:81:8c:7b:7f:83:47:42:f2:df:ee:57:70:b8:85:
         50:ef:fc:41:97:cf:ad:cf:92:a9:11:74:d6:bb:b1:c7:9a:d9:
         bb:84:68:3a:2d:59:4c:44:15:ff:87:b9:aa:f9:32:be:27:04:
         4f:6c:d9:98:55:ed:bc:26:0e:6c:43:2f:17:e9:80:ac:bc:b0:
         93:6f:34:4f:26:d1:7a:2a:83:c5:eb:c6:2b:99:04:f4:c5:e5:
         32:6a:19:7f:60:eb:56:6a:e0:10:d3:f2:68:57:b4:97:db:e3:
         46:21:09:74:b8:87:d9:2d:66:8d:27:92:5f:ad:99:4c:55:17:
         49:1e:c7:93:2f:fe:97:54:d6:2b:06:8e:a0:b6:c7:e0:de:02:
         37:ac:d2:46:67:7d:96:16:6f:64:bc:63:da:e7:58:39:1e:1f:
         f5:0e:f5:b6:be:29:75:41:0a:1e:88:13:11:81:ce:f1:b3:4e:
         63:9b:a0:a3:0d:e6:e4:4c:18:5d:90:83:80:d3:b8:f8:cf:8d:
         3f:8f:75:46:88:60:ec:2a:7e:32:c0:f7:27:9e:dd:e9:7f:8a:
         3b:25:11:79:f7:ee:dd:ff:5c:9c:77:74:f3:be:0b:86:5e:4f:
         73:87:c5:07:d4:d4:41:56:a5:50:bc:da:0e:0e:92:98:55:6b:
         29:24:ae:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:30:04 2025 by rpki-client