Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dce96a6-b74e-3ff5-a879-3ab0ef8dc82b.roa
File:                     6dce96a6-b74e-3ff5-a879-3ab0ef8dc82b.roa (raw, json)
Hash identifier:          YgNdXXP7Lls9A21dXMLDE5U0urH8LvINiPV0uNHZYKQ=
Subject key identifier:   13:C0:4E:A6:B5:DD:68:E3:84:FD:C8:3A:79:EE:D2:3C:D3:A0:5E:E6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81462918D30B1E4FAAA64FC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dce96a6-b74e-3ff5-a879-3ab0ef8dc82b.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        173.25.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:29:18:d3:0b:1e:4f:aa:a6:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=d4435646-9889-4b8a-9a78-147811e3bf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9a:98:8a:e6:99:9e:51:a5:15:f8:88:95:a8:
                    5d:52:51:21:ba:e1:48:1a:b3:7b:4a:79:37:0e:00:
                    72:02:62:3a:0e:95:2a:d2:56:97:47:ea:6a:07:8f:
                    fb:67:86:d0:c2:df:1a:4c:ed:4c:dc:63:9a:22:6f:
                    6a:13:fb:62:da:88:d7:e0:07:4f:94:6f:e1:d3:8b:
                    73:ce:6e:e3:d5:6b:46:10:1d:cf:20:ba:46:85:ae:
                    d7:eb:3a:a9:6b:12:af:ac:96:22:c0:36:52:32:f5:
                    b6:fb:64:70:e9:a4:27:bd:5c:51:18:68:f1:4c:03:
                    e1:7c:e9:46:90:d7:89:c2:9e:88:e1:8f:c1:04:6d:
                    8b:42:56:9d:d9:85:74:11:e6:86:42:8c:41:40:52:
                    38:34:8a:5c:c9:aa:84:3d:a5:88:71:8e:0f:81:a8:
                    94:4a:34:7a:86:a2:e5:05:44:5a:b1:11:cd:06:a1:
                    07:37:50:40:e2:1e:f7:07:7c:dd:2c:a9:24:9b:7c:
                    87:f8:e1:80:4c:4c:dd:ad:af:db:44:f2:80:9b:5d:
                    98:64:c3:fa:e2:eb:52:e8:f8:60:61:d1:03:e3:84:
                    f6:3e:f0:ce:96:8c:bb:a7:68:4a:b0:71:01:ff:37:
                    88:de:0c:5e:0b:6d:2f:5d:89:15:46:0a:24:c8:02:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C0:4E:A6:B5:DD:68:E3:84:FD:C8:3A:79:EE:D2:3C:D3:A0:5E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dce96a6-b74e-3ff5-a879-3ab0ef8dc82b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:40:e7:ef:1a:60:28:3b:b1:b1:5e:24:4f:2a:1c:14:91:df:
         fd:35:e4:9a:d9:2f:19:5a:63:2f:90:25:b2:67:5b:b1:d5:47:
         b3:95:c6:b6:22:1b:fb:70:df:42:28:3a:a4:72:c7:d4:46:2b:
         49:49:d1:a9:f0:d8:ba:2d:fd:02:34:33:9c:74:a0:21:83:b8:
         1a:10:a8:e3:2f:c9:9c:0b:2f:8e:36:dd:7d:94:da:2c:05:81:
         dc:9d:27:84:06:7d:de:f7:3a:bd:ca:a7:0d:6e:cb:63:15:72:
         29:98:c5:3b:6a:7f:cf:3a:c7:88:83:56:75:45:c8:5d:ce:f6:
         42:21:f0:4b:c7:2a:26:81:ea:92:6e:d8:aa:e4:08:ab:ad:e9:
         6e:b4:b5:40:ca:9a:df:cc:b8:f2:12:fd:72:0d:1f:e9:36:68:
         d7:29:6d:4b:37:2f:f8:d4:1f:78:d0:e5:2d:82:3a:4f:c7:ac:
         bd:88:48:6d:74:09:90:5b:a5:36:19:65:f4:fa:5c:1a:ce:aa:
         27:19:37:be:68:a0:fd:03:d8:ba:8f:02:f0:a6:f8:14:cc:f2:
         be:ae:00:55:46:f2:d2:0f:ac:86:cf:4d:0f:e3:4a:34:28:71:
         19:62:6f:79:7c:1a:ca:71:ef:10:3a:a4:29:70:22:d2:5b:70:
         07:af:93:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 21:37:27 2025 by rpki-client