Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f7646bc-6592-3cd5-9347-184e8785764e.roa
File:                     4f7646bc-6592-3cd5-9347-184e8785764e.roa (raw, json)
Hash identifier:          ZDZoOQvNM6F4q+3WRO5Z60zFxL/Wvl9Fg9YOjoPLEjE=
Subject key identifier:   F7:2C:D7:0E:CF:AA:CA:6C:00:BC:5B:A3:8B:3B:2E:3D:B5:7B:F0:DD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81464E610E3F47832DC7C4E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f7646bc-6592-3cd5-9347-184e8785764e.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.29.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:4e:61:0e:3f:47:83:2d:c7:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=c71967af-63bb-4c92-a440-9334b6d45193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:80:20:59:c6:b4:3d:1f:ba:2c:a1:ff:87:88:
                    ea:09:40:ae:48:a5:18:5f:72:d2:da:21:29:8a:21:
                    64:6b:15:a3:97:ac:12:be:43:29:53:fe:1d:cd:98:
                    34:49:e9:7a:ba:6b:74:1b:8b:f7:03:a3:f8:07:56:
                    4f:86:b5:df:44:82:f9:14:41:54:a3:32:56:a3:ab:
                    fd:86:49:2c:8c:40:e6:b6:bc:59:35:21:3a:fd:c4:
                    d3:00:8b:51:37:9f:3f:28:78:1d:ce:d3:2f:c8:45:
                    5d:a5:c2:7f:e2:b7:d9:2a:28:9e:62:fb:38:14:0d:
                    a5:36:e2:b3:9c:7b:03:f7:d1:03:11:eb:cc:c1:c0:
                    4a:6c:b6:09:70:4a:49:ca:f8:06:25:3b:71:8d:a6:
                    08:27:0a:a6:ac:b0:36:6a:8d:f1:50:28:c0:2f:54:
                    7c:ae:f0:ee:fd:b2:13:ef:15:0e:96:49:14:a9:23:
                    23:8b:96:7d:c6:1f:9e:16:63:60:2a:ec:fe:86:5d:
                    68:22:8b:a0:a0:92:00:fe:4a:8d:a7:88:f2:ac:e0:
                    70:5f:af:aa:35:85:57:98:8b:5a:b9:f0:3f:6e:a9:
                    0e:92:9a:3d:04:9a:08:b1:7c:0b:d0:ec:4f:16:94:
                    5d:ee:24:ac:0f:0c:ff:f8:31:18:b3:3a:d9:7c:d3:
                    88:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2C:D7:0E:CF:AA:CA:6C:00:BC:5B:A3:8B:3B:2E:3D:B5:7B:F0:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f7646bc-6592-3cd5-9347-184e8785764e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ac:be:ca:c8:3d:89:2e:8a:e9:d9:0a:7a:44:28:4f:50:c2:
         0d:5e:11:e2:28:e3:ca:30:a5:4f:b7:9d:82:79:8a:98:78:a3:
         83:ab:a8:c9:e3:28:0e:83:f9:fd:25:4b:0f:aa:7e:64:4f:03:
         83:73:06:d3:5b:83:b3:99:12:50:d4:3e:e9:ae:08:e0:87:53:
         32:16:31:d0:2c:38:0f:03:44:60:65:c6:46:45:61:74:48:4b:
         80:6c:a5:eb:30:8d:4c:0c:4d:94:47:d7:70:e2:cd:36:83:a7:
         b2:7f:41:f8:1a:8e:ac:d5:b2:df:b3:0f:2b:4d:04:20:22:55:
         d9:5d:3a:a2:33:37:71:ce:27:57:ef:0f:ef:53:ce:ae:44:b2:
         4e:06:9d:f3:31:d8:17:c5:ef:ef:49:e9:16:81:10:d1:8c:58:
         4e:94:b8:6b:3b:ea:f6:8d:e5:0b:4e:d7:41:b1:de:56:0c:ae:
         76:2b:dd:2b:01:56:90:41:78:37:27:ce:97:b1:f8:2d:e4:62:
         34:4c:bd:11:5d:4e:83:0e:12:c2:76:79:82:2a:d3:62:9e:5c:
         e0:90:d2:5e:72:ad:13:94:1b:ac:39:30:a9:4e:85:ac:22:bc:
         8a:26:b1:d9:a7:bc:e2:cd:78:8d:d1:aa:aa:42:33:5b:68:ad:
         92:b4:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:16:50 2025 by rpki-client