Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5afbdf24-79e5-38e0-9da3-388a534fb999.roa
File:                     5afbdf24-79e5-38e0-9da3-388a534fb999.roa (raw, json)
Hash identifier:          3vZaDMd/lkHElO8pyAK11nckzP/Fy6XAZDKorAbUFDs=
Subject key identifier:   3B:7C:C4:6B:D3:CB:71:D6:A1:9E:0E:6D:AB:D7:CC:00:8F:74:BF:FB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AAE87E7066A9AD964C8A73BC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5afbdf24-79e5-38e0-9da3-388a534fb999.roa
Signing time:             Tue 29 Jul 2025 18:05:14 +0000
ROA not before:           Tue 29 Jul 2025 18:05:14 +0000
ROA not after:            Mon 27 Oct 2025 18:05:14 +0000
asID:                     30036
IP address blocks:        173.25.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:87:e7:06:6a:9a:d9:64:c8:a7:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 18:05:14 2025 GMT
            Not After : Oct 27 18:05:14 2025 GMT
        Subject: CN=74f8318b-6474-4bda-9446-561c8cc75b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:7f:d0:5b:cd:2e:6b:69:d7:bb:95:33:ba:
                    be:75:8f:82:85:32:9f:96:d0:3f:e9:f8:40:e5:08:
                    58:68:a5:62:7b:2c:06:01:35:8f:b5:2e:0b:0a:95:
                    40:76:69:b6:76:86:ab:ed:7e:5b:a7:d2:c0:56:85:
                    59:80:f8:6a:fc:21:d4:59:ff:e9:1a:0c:56:5b:c3:
                    f8:67:d0:02:7b:f0:1c:64:c0:f9:75:2e:60:83:2e:
                    58:6d:59:af:d4:39:2c:24:dd:83:1b:44:b9:52:a4:
                    9a:c0:ed:f4:05:24:a8:41:df:bf:c5:85:1e:a1:5c:
                    1a:d2:a9:79:10:bc:bd:25:92:f6:75:76:d4:ad:bd:
                    0b:4c:56:27:43:49:0c:d0:a5:bf:d7:37:53:58:a1:
                    d3:96:e7:c0:53:61:b1:49:9d:7c:b0:64:cd:53:7f:
                    56:f8:63:c8:13:6b:ed:d7:da:c4:79:1f:1e:7c:88:
                    ec:53:e5:d7:89:17:6f:8b:36:78:79:15:e9:b8:83:
                    18:3d:4d:c1:24:32:22:1a:fc:0a:28:09:20:e5:2a:
                    39:1a:df:e1:05:f0:1f:62:8e:91:26:5d:32:d9:c5:
                    01:a0:6f:0c:e5:8f:63:e5:6e:6f:24:91:0f:3e:25:
                    20:43:17:d9:95:62:34:7c:f2:4e:87:20:4a:1d:4e:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7C:C4:6B:D3:CB:71:D6:A1:9E:0E:6D:AB:D7:CC:00:8F:74:BF:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5afbdf24-79e5-38e0-9da3-388a534fb999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:10:be:ec:55:48:cd:95:a6:71:fe:77:e1:a7:41:97:ae:08:
         15:97:3b:2c:9f:9d:c8:7e:10:bf:fd:e8:e5:ae:79:f8:40:56:
         67:52:23:f8:2a:e4:16:c8:8e:d6:0a:90:e0:d0:c5:14:92:b2:
         d7:2a:32:9d:27:41:44:89:3e:84:75:2a:ad:7a:d9:c9:cc:e5:
         7a:1c:7a:f8:06:65:6d:1e:d5:c8:ca:1f:1c:95:e0:85:20:71:
         27:f6:90:3d:9d:fc:ca:0b:d3:be:9c:51:98:58:33:6e:c0:ed:
         fb:9b:95:ba:cd:05:a1:91:21:ca:de:83:cc:80:ee:19:69:cc:
         18:7a:d5:d3:6d:66:17:5c:d9:02:44:b9:7a:dc:89:af:55:fe:
         f3:b6:2a:2f:cf:93:37:34:1b:0a:ae:d1:06:d7:c8:13:47:05:
         01:3d:73:03:64:a5:c9:a7:70:db:65:98:77:3f:ff:07:31:bb:
         31:14:53:75:27:7b:4c:61:82:90:3b:f0:c4:8d:f6:16:51:bf:
         b9:2c:17:bf:5c:19:b8:0f:2c:f5:88:91:20:1b:57:12:3a:fe:
         04:df:e5:b1:63:4c:51:7d:c3:5c:a7:26:cb:96:1a:84:e1:14:
         8d:77:d6:51:27:da:35:35:85:de:67:2e:98:a9:15:4e:33:b3:
         27:72:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:59:38 2025 by rpki-client