Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e22eb7b-f3be-3af0-9b46-6e2820760074.roa
File:                     7e22eb7b-f3be-3af0-9b46-6e2820760074.roa (raw, json)
Hash identifier:          bn3hSYjpmu5JOduIbZbiqTdzJ8iQ3ukgM0/p8BxP6Sw=
Subject key identifier:   B3:71:D8:40:3A:42:EE:FF:3A:F7:44:62:92:84:0A:D4:58:1E:BF:DA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A841258810A5751D23256B700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e22eb7b-f3be-3af0-9b46-6e2820760074.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.25.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:58:81:0a:57:51:d2:32:56:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2ddf65f2-343e-4943-8075-b3879e2359ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:27:04:b0:f0:9e:3b:9d:df:96:5c:dc:b0:c3:
                    d8:e6:73:b0:7f:62:23:6c:82:a5:7a:d0:e2:2e:aa:
                    f7:4c:26:ef:22:c3:3a:b6:73:9b:69:30:e9:36:e3:
                    f9:67:e3:4d:e9:56:94:12:f5:49:e0:86:b7:7d:71:
                    09:6a:31:74:eb:a9:4e:d8:91:ae:cd:81:74:e9:29:
                    22:1e:2a:bd:2d:ea:3f:bf:5c:0e:65:c2:4c:3c:25:
                    87:f3:e6:10:13:79:7a:f9:45:3a:bd:27:17:81:50:
                    f4:a7:28:75:3a:d8:6b:bc:1d:c5:a7:c6:45:2c:d7:
                    e4:39:64:fd:9b:37:41:ee:c1:5c:33:7a:a8:87:55:
                    2f:89:46:7b:48:f6:75:06:5b:53:d5:9a:ad:1d:cb:
                    10:50:f0:3f:ae:96:f1:b6:51:92:61:3a:25:23:d2:
                    49:c1:77:d8:8e:db:78:27:0f:e2:55:10:f0:03:fa:
                    e2:c7:9f:b1:2a:16:44:f8:a2:db:0d:71:eb:f5:8f:
                    be:56:2f:92:bc:d7:b8:ab:0c:04:03:89:38:12:8a:
                    2c:c8:71:4d:1c:cd:45:c0:da:fc:2e:a7:5f:a7:81:
                    eb:6c:17:bd:ce:c6:1f:18:3d:43:57:4d:8b:f6:2d:
                    a4:57:ad:06:24:7c:93:48:d9:60:19:a5:98:e6:00:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:71:D8:40:3A:42:EE:FF:3A:F7:44:62:92:84:0A:D4:58:1E:BF:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e22eb7b-f3be-3af0-9b46-6e2820760074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:aa:6c:89:7e:1e:f8:3b:74:20:4f:e7:1d:f0:e8:aa:96:0d:
         76:ea:f6:3a:0a:d4:5a:55:b3:3d:42:24:db:0b:37:b3:9b:8e:
         8a:3c:fe:be:04:f3:91:1e:8c:0b:60:fa:49:d6:6c:b9:d0:ef:
         bd:c9:ce:51:0d:d3:5d:04:b3:74:88:14:12:ab:89:54:e8:31:
         7a:67:ae:30:ca:f0:16:72:26:c4:43:b0:38:72:d0:c7:55:36:
         bf:c6:b8:c7:7c:5c:36:2c:b6:2d:bd:5e:80:a2:3e:08:64:94:
         5c:29:f7:40:38:66:ce:fc:78:62:83:72:c3:51:76:95:ad:e3:
         70:aa:24:eb:2f:eb:42:4c:d4:db:7c:67:2c:d9:96:65:96:4c:
         f1:fc:4b:d7:1a:13:89:b5:48:bc:59:00:10:89:e9:2d:2c:46:
         c3:a2:b9:5f:73:3c:6f:bf:84:99:3b:cd:75:a9:23:73:14:91:
         90:a4:1e:46:48:bd:13:f2:95:4b:48:91:53:d1:92:a2:29:0a:
         32:91:f5:7e:dc:18:2b:13:2b:f8:b3:0e:2a:a4:08:b8:8e:5e:
         a8:4c:ef:9d:31:1b:71:bb:d1:65:93:d3:e7:bc:1c:ba:56:f8:
         07:8f:bc:6b:c6:fb:1e:cf:64:d8:f7:d0:63:30:f8:0c:47:1b:
         53:4d:b9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:14:38 2025 by rpki-client