Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72af9fa8-0749-3e6e-9c87-de737eb10918.roa
File:                     72af9fa8-0749-3e6e-9c87-de737eb10918.roa (raw, json)
Hash identifier:          IvkfialdqEBsgq4saeckAYaAr0M1Cohw+2j7SF0pHCY=
Subject key identifier:   96:94:BC:B1:AF:06:0F:4F:22:AC:96:D4:D9:E5:9A:55:4D:F0:44:F2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AA6F62544DC85F4D1A64BE500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72af9fa8-0749-3e6e-9c87-de737eb10918.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     19905
IP address blocks:        173.27.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:25:44:dc:85:f4:d1:a6:4b:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=5a3d150b-530a-4c32-96f5-793b29ad392b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:cd:db:65:2a:70:86:e4:b8:32:aa:a4:2d:
                    86:87:7a:01:63:24:1b:05:e9:47:7d:ea:4b:5f:65:
                    c4:82:75:5d:3f:d4:2b:f4:cf:33:ec:78:10:f9:6e:
                    9c:48:9e:74:37:08:79:f6:be:f4:53:f0:6c:e3:32:
                    b7:7e:d1:01:c7:b1:85:8f:46:da:41:e4:a9:8d:f7:
                    b9:53:6e:ac:81:32:c1:c7:0d:a9:d0:20:12:b5:51:
                    de:6f:67:1e:3f:0e:7a:3b:f2:54:88:9e:13:8e:e9:
                    2b:a2:3e:92:86:9e:6d:7b:88:61:94:a9:79:af:6e:
                    f4:4b:d2:9a:38:61:d6:34:a9:09:a2:d5:92:f5:b3:
                    3c:d3:52:4e:a3:57:9c:16:7b:b8:82:84:fd:bb:bd:
                    59:6a:36:a1:b7:c4:18:eb:94:84:47:10:d2:4c:44:
                    23:68:51:62:93:65:82:41:17:0d:88:80:29:ca:d7:
                    72:d9:5b:e5:81:da:d6:ef:ef:86:63:1e:0e:c1:49:
                    b7:d3:52:7f:f3:47:19:27:c2:8c:d5:fe:51:3d:6e:
                    24:95:9f:83:5b:8e:61:f1:6a:87:f8:ef:5e:ad:c9:
                    2e:c0:e7:0f:8e:1d:79:31:4d:98:76:bb:1a:2f:9f:
                    ee:20:29:2e:21:e7:a9:bb:55:19:5a:03:a0:ec:45:
                    58:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:94:BC:B1:AF:06:0F:4F:22:AC:96:D4:D9:E5:9A:55:4D:F0:44:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72af9fa8-0749-3e6e-9c87-de737eb10918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ff:34:45:2e:37:12:b7:f9:ce:cd:91:fb:f1:7d:d4:ba:e6:
         64:16:ac:ce:5a:42:19:8d:73:9b:ff:77:75:f7:35:83:c2:3c:
         52:87:b8:44:2f:c0:27:67:29:51:39:6f:2f:04:94:b7:f8:e8:
         26:a2:08:b3:48:f8:9b:e1:3e:67:0b:79:ec:f7:bf:ec:3a:2c:
         d8:db:3b:2c:2e:77:f2:5b:3a:ad:01:22:ae:96:28:72:ad:fc:
         bb:11:64:ba:01:c5:a7:e5:6f:54:c8:df:a2:2e:0d:7a:68:82:
         7f:f0:5c:64:06:37:49:1d:be:f4:51:05:e3:ae:16:8d:58:82:
         ec:72:0f:09:b6:46:da:fc:84:80:44:21:99:fa:84:91:01:da:
         54:58:ea:3c:0b:97:71:2c:0b:97:b3:24:b6:7b:52:02:04:d1:
         8f:f5:d8:d1:9f:0a:e2:00:bc:a1:0d:aa:19:86:5f:dc:dd:b5:
         f9:dd:c6:be:50:40:1e:e3:7a:f2:e6:50:f6:48:0c:1e:16:ca:
         76:bd:9b:47:38:6d:f0:08:6d:82:cc:9b:9e:9c:67:23:70:56:
         cd:ae:1c:cf:91:89:cf:7e:00:cf:e1:99:4b:f4:68:3c:2b:14:
         64:0c:8a:72:b3:44:c7:25:42:e8:bb:33:a3:1f:b2:3f:f9:72:
         d1:32:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:27:46 2025 by rpki-client