Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47f6e69b-8671-3e07-8740-1aff5ac5f5b2.roa
File:                     47f6e69b-8671-3e07-8740-1aff5ac5f5b2.roa (raw, json)
Hash identifier:          9Cqzm1/AG6b5rjm3Ly4XKe4fqBZJdUj/8KWYMsM6MlE=
Subject key identifier:   6E:67:15:66:3D:71:CF:47:B2:06:03:22:F9:1E:E6:43:DA:D6:F0:02
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84125598B8BA85B8E951DC40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47f6e69b-8671-3e07-8740-1aff5ac5f5b2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.16.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:55:98:b8:ba:85:b8:e9:51:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ce277a9d-c6ce-4b77-91f2-bcafe5b918b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:3d:2e:c3:ba:11:ea:e6:3d:78:df:af:99:
                    97:ed:0f:fb:fe:e1:5d:35:bf:ea:e2:94:e7:64:13:
                    73:4c:c4:c1:51:16:9b:3c:10:1a:54:ec:cf:b5:32:
                    bd:12:b9:21:74:48:d4:dd:b7:4b:e7:31:5f:49:86:
                    97:d6:24:ed:dc:b0:4b:00:33:b9:52:f0:2d:27:9f:
                    39:d1:58:47:dd:6b:b9:e3:ee:f0:c2:f6:92:0c:94:
                    d5:80:5c:a9:80:27:7a:9b:80:ca:b9:0d:da:3d:fe:
                    da:ec:3a:89:c3:1e:96:c9:2b:c3:12:29:7f:e4:30:
                    46:12:13:96:ea:fe:6a:50:f4:c8:ef:35:81:1e:5b:
                    b5:7b:30:a0:cf:f5:5a:3e:cc:92:fa:66:94:e9:db:
                    5d:a1:dc:0b:24:43:6e:54:5a:87:a9:cb:a2:9f:5a:
                    58:eb:80:8a:13:3b:f7:b1:0e:32:7a:1d:8f:59:40:
                    e7:ff:db:b7:63:3d:95:07:f4:6f:8e:8d:e2:4f:6c:
                    75:d5:af:eb:10:d7:e2:fb:e9:91:e2:15:9a:a5:a2:
                    01:e2:75:28:ee:d8:86:71:4f:16:81:c8:54:08:d1:
                    62:f2:24:4d:95:b8:92:38:d1:ab:db:85:a5:74:31:
                    3d:27:9e:78:b8:e3:74:96:76:76:3c:b7:e6:0c:1e:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:67:15:66:3D:71:CF:47:B2:06:03:22:F9:1E:E6:43:DA:D6:F0:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47f6e69b-8671-3e07-8740-1aff5ac5f5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:07:17:59:3b:fc:09:b3:4d:b6:7b:63:38:6b:e7:02:61:ae:
         15:3d:d4:4f:19:a3:01:25:49:c2:a3:8c:3f:92:f6:7b:a8:6f:
         ad:eb:f1:e5:c6:23:64:68:09:a6:11:fa:e2:34:ea:aa:88:fe:
         28:55:23:13:e1:13:1b:92:73:d9:49:1a:2f:e3:e5:e9:f4:2d:
         d3:e7:55:d0:db:d9:a9:60:73:9f:74:f8:bf:15:e8:4e:43:13:
         52:a7:9a:99:77:c6:88:71:9f:18:12:41:c2:60:3a:aa:82:bb:
         8a:ef:e1:6f:dc:be:d5:e5:1b:67:91:26:df:6e:ac:ac:88:88:
         5e:da:ae:53:cd:c8:c3:06:23:4e:18:c3:c5:96:81:6d:26:50:
         ed:cc:96:fa:d5:df:75:4d:5d:aa:b6:73:9e:a7:b5:1d:4c:1e:
         cf:99:3e:ee:40:2c:04:75:1d:e8:39:f4:fa:31:94:92:3f:d9:
         3a:71:c6:aa:2c:0a:69:c2:0c:3b:77:fd:cb:58:7c:ff:31:f7:
         35:47:e9:bf:ca:33:63:17:44:c8:04:28:e6:31:99:65:39:e5:
         7b:de:de:5e:62:50:73:51:68:70:4d:58:af:e7:56:63:ca:62:
         cb:f5:0b:44:6e:b8:6a:42:3c:24:62:17:c4:1b:33:3b:a2:a2:
         6e:9a:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:12:16 2025 by rpki-client