Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/387cb87d-6fe7-3ec4-80bf-604c00c91e60.roa
File:                     387cb87d-6fe7-3ec4-80bf-604c00c91e60.roa (raw, json)
Hash identifier:          +B+OImHUqMi06Jlgnjv21JcwOVM5poG0n5FCFvDD8dg=
Subject key identifier:   95:A4:AC:11:78:37:4C:C0:50:47:52:DD:A7:A8:97:51:AD:E5:BC:21
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410C996EA7D979E92D55EE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/387cb87d-6fe7-3ec4-80bf-604c00c91e60.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.23.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c9:96:ea:7d:97:9e:92:d5:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=dc96a3c4-f3e8-45b5-85c8-4323d3b427c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:af:3d:37:ab:6c:df:76:f9:b6:ca:29:57:
                    9e:7d:8f:80:2e:9c:d3:a4:52:21:be:21:91:68:50:
                    7c:aa:58:e3:ee:9b:4c:f2:4c:2b:aa:a8:83:dd:0d:
                    fe:7c:d0:9e:5e:73:89:66:f9:52:13:2f:e9:5b:82:
                    8b:b4:a7:93:0f:f3:d4:2e:e2:97:8e:a6:67:02:a2:
                    d9:78:76:1d:33:28:15:32:6d:ad:45:d2:24:31:7c:
                    38:13:92:07:d8:c2:9c:01:89:f2:bc:18:ef:c5:6a:
                    e0:ad:69:09:10:31:95:e9:c6:61:a6:fa:98:73:fa:
                    84:1f:0e:a1:f1:4c:0e:8a:0b:fb:8a:88:11:85:50:
                    24:25:47:7d:fd:0e:46:ba:ca:b2:ad:56:0f:30:18:
                    24:db:b0:bc:76:e0:dd:3e:02:70:d2:28:95:61:c8:
                    85:00:18:9a:aa:2d:e5:1e:c6:b2:65:b8:65:b5:3d:
                    b6:d3:25:0d:6d:03:82:78:3a:e5:5e:11:cd:ca:d1:
                    2c:ec:27:9a:eb:a0:e2:43:c3:1a:1e:93:06:ce:4c:
                    f2:61:79:f1:44:d5:2e:a4:61:0a:59:8a:33:bd:e7:
                    91:e6:ed:88:98:58:8b:c5:b4:3a:3b:55:90:45:cf:
                    c6:da:d5:88:dc:36:d5:71:26:73:0c:54:57:01:99:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A4:AC:11:78:37:4C:C0:50:47:52:DD:A7:A8:97:51:AD:E5:BC:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/387cb87d-6fe7-3ec4-80bf-604c00c91e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:44:45:69:1f:17:06:be:15:fa:b3:1c:92:cb:d8:fd:40:e6:
         ce:c4:57:29:41:bb:5c:3e:6e:fc:f9:03:57:fc:18:07:ab:fc:
         a2:49:fb:c3:39:df:51:b8:c3:c5:75:e5:9f:de:36:52:d2:23:
         76:ff:e0:cf:17:67:ed:b8:56:07:61:da:fd:be:11:43:56:13:
         ac:27:1a:9e:ab:42:3f:22:16:a1:a2:4e:d5:95:82:59:37:92:
         3e:ac:98:df:45:02:e5:18:cf:54:93:80:f1:29:07:0c:52:a4:
         3c:f6:2e:4e:0f:20:6e:42:4a:1b:1e:df:7b:ed:aa:ff:94:97:
         50:17:bd:2c:23:36:7c:58:b2:eb:20:61:07:e4:24:fa:f5:dd:
         6e:e3:e4:cc:9c:b2:44:68:9c:26:55:f6:10:ac:54:ce:ee:f3:
         c0:99:ab:72:79:26:fc:a8:90:14:44:49:ec:d2:0e:bd:b0:e4:
         55:6e:76:f1:53:5e:bb:6e:c6:6b:32:45:e9:63:18:96:8d:9e:
         ca:5a:0e:22:1e:10:3f:9d:47:50:df:11:68:c4:09:fc:40:90:
         6d:08:13:5e:d6:83:3a:d5:1c:7d:7e:cf:89:20:a8:a8:c8:82:
         9c:5a:24:51:a6:74:eb:9f:37:a8:a7:df:91:0c:65:42:f8:d7:
         a3:2e:81:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:50 2025 by rpki-client