Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/483bd595-027b-3f08-b25b-e78e454174d5.roa
File:                     483bd595-027b-3f08-b25b-e78e454174d5.roa (raw, json)
Hash identifier:          rHrja1dfhneL71r40XyeAu+R/vx3bbdvUxlrLSGPLHk=
Subject key identifier:   19:89:2D:9A:15:20:A4:6B:BA:C8:30:B6:8F:CA:6D:2C:36:25:C2:6E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DB6CBB335FCB7AD86CA3C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/483bd595-027b-3f08-b25b-e78e454174d5.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.17.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:6c:bb:33:5f:cb:7a:d8:6c:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=721a056d-0393-43d7-8649-d7639ca2c485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:80:d2:48:f9:ad:0a:97:9b:72:56:51:01:02:
                    70:46:5a:0e:3f:b2:9e:30:e2:5a:65:a6:1e:da:d5:
                    3b:9d:9a:dc:a6:5b:61:e6:0a:c5:cb:b0:19:b4:5e:
                    84:8b:2b:72:9c:b5:35:4c:47:2a:96:64:8e:7e:36:
                    97:43:50:ba:6d:8e:f6:b4:65:a1:44:08:a1:5e:52:
                    39:a5:98:93:5a:b8:40:bb:81:b3:bc:40:e0:88:3c:
                    72:1b:62:a6:0a:cd:94:ed:b5:ca:c4:aa:6e:28:b8:
                    9e:4e:78:92:ad:56:cc:4a:8c:4a:e5:d3:c7:53:06:
                    d3:24:8d:da:e2:7e:65:34:48:19:77:7d:9d:27:4d:
                    0e:5d:32:34:7a:a8:69:85:22:ba:2a:41:e0:39:57:
                    5e:c3:e8:53:26:2d:c7:44:51:10:ed:c7:b3:d4:29:
                    8d:f3:10:94:6f:16:8e:89:18:7f:b0:81:3f:f3:f8:
                    e7:b6:d5:73:c7:92:c1:97:f4:ff:8a:f9:05:e4:b7:
                    16:f5:d2:b5:79:c4:40:67:c3:e4:35:a0:2b:96:94:
                    ce:b7:e6:97:11:b6:3d:56:2b:16:73:08:42:c9:e3:
                    7f:6d:ab:65:1b:12:dc:0f:6e:8a:65:f6:6b:62:b7:
                    01:1c:82:53:57:27:cc:3d:48:56:11:fd:10:a4:4a:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:89:2D:9A:15:20:A4:6B:BA:C8:30:B6:8F:CA:6D:2C:36:25:C2:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/483bd595-027b-3f08-b25b-e78e454174d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:64:56:cb:db:35:a0:ff:2b:59:99:5e:13:75:5f:65:ef:5f:
         58:90:55:5c:6c:67:cb:9a:cd:8b:48:8b:3c:14:42:88:f7:9a:
         88:b6:d3:f6:44:2c:84:13:38:13:a6:c9:8e:56:1d:37:54:c2:
         8f:68:b6:a9:ba:6e:1c:5a:f7:0c:5c:1e:0a:8e:24:4c:b3:47:
         b4:57:62:4a:fb:f8:c4:c8:86:d4:e5:65:70:ad:27:68:f9:7c:
         e4:16:86:5c:31:a3:af:e8:2b:39:c8:98:b3:02:03:d3:ff:4e:
         89:04:67:74:36:0c:c1:a7:db:33:38:4e:52:2e:b5:d7:91:62:
         68:d0:d1:9f:80:6f:3f:ca:c9:59:34:b6:44:75:40:9e:d5:79:
         b3:ba:b4:6b:6d:5d:21:fc:d4:f8:11:cb:88:89:47:ab:59:42:
         bc:b5:c3:5d:0a:b5:8f:af:32:14:bd:d4:33:88:ad:bf:aa:37:
         52:0c:d5:52:87:7a:2e:d3:04:c7:3d:19:2a:0b:86:9b:10:f4:
         14:27:88:3e:61:a8:6f:cb:a5:8b:79:07:44:ed:70:5a:d0:9f:
         c0:59:61:35:6e:1b:63:d0:49:5d:0a:ac:b1:d2:20:a1:68:52:
         8e:f3:c4:54:d3:df:4b:6c:88:36:62:ec:15:84:06:08:15:8c:
         c2:8a:18:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:43 2025 by rpki-client