Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf4d045-d941-3690-b728-44072ee36b45.roa
File:                     0bf4d045-d941-3690-b728-44072ee36b45.roa (raw, json)
Hash identifier:          u32TbvJz0wSAgRfmacGTlrLhOdj3JTMi64EG6Iwa8pw=
Subject key identifier:   04:9A:F0:28:C1:6D:80:E2:0A:B4:B6:38:59:14:63:92:23:AE:6F:FA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8146656E5C1323F2BF6DEAC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf4d045-d941-3690-b728-44072ee36b45.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.31.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:65:6e:5c:13:23:f2:bf:6d:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=b4a7d863-d716-4d79-b2f8-03b34ac76d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:0e:e6:29:5f:6d:fe:a3:8f:10:f5:f6:fe:
                    06:d6:23:df:52:2e:da:9d:77:3d:88:40:43:00:ad:
                    58:0d:f0:3c:18:09:c8:80:8e:67:b8:c4:31:2a:8f:
                    2d:06:21:bf:34:fe:77:cc:b3:d4:d2:47:23:d0:65:
                    e9:fc:f1:51:09:bd:a8:87:79:37:b0:1d:7f:16:9a:
                    15:77:cf:13:ff:12:87:c1:81:00:b3:09:a0:35:3e:
                    2f:38:22:f3:18:f8:5f:fa:f9:72:84:49:de:99:8f:
                    54:35:92:ba:ce:e6:81:25:ab:84:71:b1:91:0f:90:
                    8d:e6:01:1b:54:3c:cd:e4:6e:f3:6f:34:d3:ce:56:
                    c0:0d:94:5c:21:94:61:e7:3e:74:c9:a9:95:4b:00:
                    50:b2:ab:59:3a:af:dd:80:d5:44:48:0d:87:71:fd:
                    93:b3:03:7c:28:d5:c8:6f:5d:9e:7b:66:1b:2c:55:
                    aa:34:30:f4:aa:bb:5c:33:68:1d:d1:d9:89:cd:b9:
                    82:28:c7:96:26:36:27:58:00:92:87:2e:25:70:24:
                    a9:53:e1:16:82:93:57:68:79:1b:90:cc:a7:a4:20:
                    63:77:10:b2:06:22:50:d4:b2:45:a7:91:7e:c1:35:
                    6b:06:6f:c2:18:6d:1a:e0:2a:89:85:44:99:2b:37:
                    d6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9A:F0:28:C1:6D:80:E2:0A:B4:B6:38:59:14:63:92:23:AE:6F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf4d045-d941-3690-b728-44072ee36b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a2:f8:9d:3b:34:b4:2b:90:b7:bf:77:15:6c:76:79:a0:97:
         b9:1c:46:0a:bd:5b:0c:cc:62:3a:49:3e:e8:57:21:0b:01:c7:
         ee:cf:2d:67:e5:4c:ee:5a:bf:5a:e2:6b:ab:3a:64:35:25:8d:
         c9:50:7a:b6:19:38:fb:ce:8e:90:4a:44:61:b4:37:7a:ef:89:
         60:4e:c9:47:2a:83:90:42:3b:6c:69:52:d4:79:e0:9f:d4:d6:
         2f:59:e2:66:f4:ec:a6:b6:26:ac:c8:ea:4a:2c:8a:e6:cb:ab:
         e4:80:54:4c:99:3d:d3:28:01:6e:5b:64:46:04:1f:ea:06:74:
         56:c0:27:a8:15:4b:1e:a8:81:a0:b4:40:29:55:2f:f7:5a:44:
         d0:76:04:fc:af:82:4c:a5:b5:0f:e5:02:18:1d:b7:e3:b4:f9:
         5e:2c:45:76:25:2d:71:8c:dc:03:43:ff:db:2c:e2:be:e7:1f:
         e5:9f:86:57:35:5b:20:9e:4c:4e:2e:1c:28:b4:83:44:44:df:
         c9:13:5c:b8:d0:5a:ac:bf:33:03:83:87:2e:a4:63:4a:bb:87:
         cd:f4:c8:39:bd:6e:48:c5:15:b7:61:bd:c0:a2:a0:0e:e6:13:
         ad:df:cb:c8:d6:c4:ae:b2:cf:84:03:4a:83:b7:f6:e3:cd:95:
         b9:6d:9d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:51:58 2025 by rpki-client