Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d065002-9ce9-3df8-bc35-88b2acf320ee.roa
File:                     4d065002-9ce9-3df8-bc35-88b2acf320ee.roa (raw, json)
Hash identifier:          O43uUGswbl89ppu8fcJPAIWNF+iEhi6XA4FqRoE6A40=
Subject key identifier:   F5:B6:96:16:08:83:16:B6:3D:7D:FB:C6:EA:27:C1:6B:EA:24:80:6A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81464EF620379B6E1DB52740
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d065002-9ce9-3df8-bc35-88b2acf320ee.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.18.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:4e:f6:20:37:9b:6e:1d:b5:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=39dbeea7-4d4e-4511-97fe-c98a3c308a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:18:c3:91:96:7d:f7:60:ab:5f:91:07:7b:60:
                    74:c0:58:4f:c7:36:3a:02:a2:ef:c6:15:c3:23:e1:
                    20:e0:66:40:41:c9:0b:9f:7d:b8:06:7d:03:a6:39:
                    ab:eb:b2:6d:37:aa:8e:3b:08:22:d4:f9:37:b8:f5:
                    a6:d6:89:06:1a:72:ba:26:dc:b9:85:24:dd:d5:5b:
                    eb:fe:f6:ea:73:8b:41:c0:aa:ed:e1:3e:37:c3:86:
                    16:aa:56:b6:6b:cb:f5:47:7e:82:dd:cb:61:bd:c6:
                    53:a6:4d:b8:58:f6:b3:b6:5c:e7:33:26:0a:47:6f:
                    4a:98:36:12:2e:e4:2b:73:d2:01:42:ea:fc:96:84:
                    67:43:12:e3:5a:ad:5a:48:ac:b2:1e:b1:c0:af:59:
                    e7:04:7d:7a:04:be:bd:bf:0a:86:4f:f4:ba:e7:21:
                    df:70:3e:f0:82:fc:ff:a2:53:e2:63:03:10:32:48:
                    3b:bd:4a:e9:91:17:2b:48:b9:72:ad:5d:3d:92:e0:
                    1f:df:ef:9a:97:b3:ec:a4:b9:1d:68:1b:e0:50:bf:
                    3c:20:81:73:33:2a:e2:cf:ae:6e:2b:54:03:67:48:
                    d8:fd:6b:40:be:fd:c5:5e:c6:8a:7a:3f:91:ed:8d:
                    52:47:ab:d8:cc:fa:69:e6:1f:1f:f0:f1:54:58:94:
                    a3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B6:96:16:08:83:16:B6:3D:7D:FB:C6:EA:27:C1:6B:EA:24:80:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d065002-9ce9-3df8-bc35-88b2acf320ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5c:f7:9e:d4:5e:4e:f2:0c:bd:92:5e:88:b4:77:64:28:53:
         f5:01:d3:a5:4b:53:18:f8:68:95:19:c5:31:c6:13:be:84:63:
         bc:d7:e8:ce:c5:57:4b:fb:3f:9e:30:82:e1:84:ac:15:c7:45:
         ab:fe:b8:1c:3b:e2:7a:b7:69:6a:52:c3:39:0a:8b:58:ad:bb:
         80:05:11:dc:20:93:80:2b:38:f0:19:d2:0e:7a:75:d9:87:b1:
         d2:cb:4c:2c:af:05:23:ae:e1:95:82:4a:db:a5:08:57:8e:1f:
         48:4f:26:6b:91:47:14:20:e0:60:56:37:65:73:00:6e:98:89:
         c4:d5:77:a1:7d:e7:64:a0:94:57:b4:fa:32:10:13:6c:3f:39:
         02:75:d5:6f:96:5d:a3:38:34:83:49:da:99:c1:f4:38:ca:dd:
         d7:35:c3:d5:3d:f4:3e:5a:ca:62:e9:95:a8:a3:20:53:73:6f:
         ce:58:dd:e3:c1:2c:8d:e7:49:c7:c2:fe:30:e1:27:b0:eb:d6:
         fd:7e:99:2f:cd:c6:af:8f:1c:0b:81:fa:e0:75:91:6c:73:25:
         c2:af:c9:82:56:0c:a8:7c:10:7a:8b:2b:1a:f5:40:d5:8c:b9:
         6a:9f:ea:61:16:fe:dd:44:8b:5e:a0:95:bd:72:f1:4a:c2:3f:
         9c:55:72:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:08:54 2025 by rpki-client