Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74239240-ed25-3023-8dcc-4791eb681f56.roa
File:                     74239240-ed25-3023-8dcc-4791eb681f56.roa (raw, json)
Hash identifier:          801mJ40tR2TglWZC/Z0QnmkrqjbWECet21GQgF2znJs=
Subject key identifier:   DD:8B:01:7B:E5:CC:B2:44:4E:3C:90:7F:59:64:A2:0E:D5:C5:CB:86
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410F2FAD9DD66F2D5241740
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74239240-ed25-3023-8dcc-4791eb681f56.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.16.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f2:fa:d9:dd:66:f2:d5:24:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c2e97591-6877-4051-9141-23b9623b0c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:38:d1:4e:fd:5c:14:41:ff:76:4c:ea:68:
                    17:20:6d:f7:73:6f:d9:b2:19:7a:a2:2c:6c:46:f1:
                    93:30:05:b7:cc:69:bc:7e:fb:e1:30:62:12:68:62:
                    e2:20:c9:87:f4:d2:c6:d4:21:25:85:15:40:f2:66:
                    ec:f8:4c:67:cd:80:27:b1:9f:e7:c6:89:e2:d2:be:
                    9c:3d:b4:9e:dd:e1:08:09:9d:50:86:46:48:6f:96:
                    7d:10:55:86:67:9c:65:ab:d2:21:ed:79:0d:f2:1d:
                    02:9e:52:48:c1:0a:ab:95:1a:0a:b3:4e:e8:b7:22:
                    94:36:35:c8:c8:06:79:ee:8b:33:09:d3:af:02:83:
                    2e:ff:b8:14:a8:bb:71:41:80:ba:f8:4d:6f:8a:30:
                    4a:fe:f4:5a:a4:dc:b4:c5:63:16:a6:c9:de:28:27:
                    83:cb:79:29:8a:99:8c:e8:c2:5b:74:bb:23:f2:33:
                    c6:7c:84:53:df:e1:48:c8:ea:80:73:e7:8e:10:15:
                    ac:b9:7c:de:87:a3:fa:b2:67:a1:dd:ee:d0:a8:ff:
                    19:75:44:92:e4:3f:fe:31:7e:32:e9:d7:85:69:75:
                    27:82:7e:e5:03:75:9a:1e:5c:e4:15:de:68:db:94:
                    1a:fd:c4:87:e1:da:c6:30:cb:23:a1:8f:c7:79:30:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8B:01:7B:E5:CC:B2:44:4E:3C:90:7F:59:64:A2:0E:D5:C5:CB:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74239240-ed25-3023-8dcc-4791eb681f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:25:59:78:c4:f1:4a:d5:7d:a3:05:5d:e4:14:7b:04:97:af:
         68:8b:97:6f:18:f2:12:e2:33:96:d2:10:62:2e:cc:31:d7:21:
         f2:bf:54:b9:23:bf:93:00:f1:b1:78:fa:15:73:eb:96:bd:ce:
         ae:56:94:86:b9:e6:4c:9e:b0:e2:4e:e9:d5:a1:ec:92:62:0e:
         be:ec:c0:05:0b:78:66:51:98:b3:13:4e:82:5d:12:df:5d:c6:
         7e:ac:58:e4:81:d9:4f:d1:eb:c8:21:7c:ef:db:0e:21:04:0c:
         90:ba:c4:44:e7:cd:5c:e3:c3:03:a0:ac:0e:63:f2:3a:73:31:
         b7:3c:11:cf:76:a4:12:52:2f:9a:83:17:db:12:71:bf:b5:7a:
         e2:72:23:fe:eb:87:f8:db:09:9b:90:ac:68:b4:e8:57:e5:6a:
         52:70:b7:a8:1f:02:d6:58:aa:8a:73:df:aa:1d:23:d5:3f:25:
         e2:61:35:d5:0e:94:ab:db:a1:68:be:cd:fb:d6:89:8d:cc:61:
         31:e1:6c:fc:8a:ec:2f:92:f5:73:46:5b:22:fd:d6:53:23:6f:
         4a:52:30:0c:b3:a9:a0:52:05:71:b7:f5:70:22:90:70:13:c2:
         a4:2e:2b:a1:56:e8:04:f4:0e:d8:5f:38:8f:a9:00:24:03:44:
         83:d6:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:13:34 2025 by rpki-client