Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e235207-7275-3cf8-b236-8ad69a4e04a7.roa
File:                     8e235207-7275-3cf8-b236-8ad69a4e04a7.roa (raw, json)
Hash identifier:          aNjqBQ6uoePxUL8hDM/Cv/nnUaKur9rcICVIsti/Yfw=
Subject key identifier:   2B:A0:79:82:5C:3A:2D:82:5F:51:A1:28:C3:81:16:A8:C4:23:6B:7C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81463937E07A736C2CE45580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e235207-7275-3cf8-b236-8ad69a4e04a7.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.17.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:39:37:e0:7a:73:6c:2c:e4:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=6137dafb-c3c2-4af3-9d98-b776842ab982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:7a:6a:f6:90:f5:aa:40:ee:1f:06:e2:32:
                    90:ef:2b:11:aa:08:b3:dc:30:85:97:08:cb:55:18:
                    da:35:c4:d1:1c:0b:3a:b7:b9:34:e2:99:c2:b0:10:
                    26:9a:72:82:e4:c0:7a:89:4d:1e:4b:e3:a0:6f:56:
                    7b:3c:17:e9:0c:0a:f5:4e:80:d0:97:f7:26:b3:3d:
                    9b:4c:62:b7:b2:ad:fd:e4:d3:43:ad:17:37:87:c2:
                    7b:6c:e1:18:39:11:9f:45:b3:ef:79:94:38:86:1a:
                    6a:a6:0a:2d:19:94:cb:de:96:8e:58:e3:b3:74:8a:
                    69:6e:a5:c7:76:c6:06:41:34:79:01:49:48:27:b9:
                    ed:70:fc:cc:57:76:35:20:6d:2b:39:3d:d9:eb:3b:
                    18:11:2b:73:15:2b:27:50:ce:7b:7f:4c:48:a4:4d:
                    fc:6f:6e:8c:64:a0:4b:29:4e:ca:d1:70:5c:fc:3c:
                    f2:c6:0b:33:9f:9a:13:78:7a:14:18:5a:58:0d:c3:
                    99:59:cf:7c:02:48:25:49:a0:95:d2:9e:e4:5d:be:
                    b6:fe:8f:8f:9c:64:4e:d6:f2:8d:bb:ea:7e:63:c1:
                    91:83:6c:c4:fc:c9:2c:46:41:96:d0:1e:03:bc:46:
                    6d:31:be:f6:ff:be:f7:5d:63:43:d7:8a:62:bc:1f:
                    24:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A0:79:82:5C:3A:2D:82:5F:51:A1:28:C3:81:16:A8:C4:23:6B:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e235207-7275-3cf8-b236-8ad69a4e04a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:55:53:78:3d:e5:71:61:84:ee:c8:34:db:e9:1e:8f:a6:
         c6:21:4b:56:be:8c:ca:78:12:98:9b:4a:3e:3a:9b:77:3c:d2:
         ec:31:57:f9:1d:b9:12:e4:fb:96:27:ac:66:50:ce:33:63:f7:
         fe:86:45:1d:15:a4:66:0e:d8:b7:d0:6b:91:0f:35:6e:cc:fe:
         ff:0b:45:4b:9a:ff:fc:74:d9:b6:80:75:2e:b6:70:61:32:6e:
         bc:94:0b:ee:b5:ca:98:4c:44:8c:f7:79:1e:e6:14:cc:c1:ab:
         6f:f4:56:02:86:95:e0:3d:24:39:99:98:3e:52:fb:b4:fa:cc:
         42:ee:08:b1:cb:54:14:6f:47:8f:19:10:63:b1:0f:08:7b:e5:
         41:e5:e3:1b:7e:71:d4:05:47:f3:2e:ea:29:0b:c4:00:94:21:
         79:18:59:50:28:22:8f:ed:30:3d:fe:97:9b:92:0f:6e:bd:ce:
         d7:15:30:bb:ba:f7:4b:86:59:a1:cf:e6:bb:59:1b:d5:f5:7c:
         3b:b4:2e:c9:aa:71:d0:92:3d:13:cf:c4:f4:69:5e:64:11:2a:
         1f:ae:64:e2:0d:e7:d5:50:23:4c:53:ae:ad:54:a6:cd:16:43:
         8c:1f:4b:6f:6f:05:72:2c:59:a5:87:63:d0:dd:07:a7:88:d7:
         46:c2:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:54 2025 by rpki-client