Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b9ea3a7-6f63-3644-8b34-022f5ed87455.roa
File:                     9b9ea3a7-6f63-3644-8b34-022f5ed87455.roa (raw, json)
Hash identifier:          +1SDgN2Qa8+d0B/ELWx3taG8Oyckex8PEXvgXZO94K4=
Subject key identifier:   D1:F5:EC:7D:4F:92:B9:8F:AA:9B:81:9F:EA:47:F3:1A:38:C0:AA:3B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A814668A660642BB2345283C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b9ea3a7-6f63-3644-8b34-022f5ed87455.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.25.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:68:a6:60:64:2b:b2:34:52:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=87ce41b7-8139-41a1-b76c-3b5c34d5fc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:80:3d:80:35:c2:e1:79:3b:f6:8c:6d:95:
                    4f:46:de:57:c0:cd:a3:b3:fe:8e:d6:69:80:ab:d4:
                    14:83:1c:12:33:5d:07:cf:f8:a2:c9:7c:be:79:7e:
                    85:6c:32:c9:cb:11:d3:29:b8:4e:7a:4b:ed:63:2a:
                    58:9c:89:ac:32:d6:d9:00:27:de:c3:93:48:48:17:
                    1e:4a:84:a1:8a:3b:d1:80:22:91:29:fe:4b:2a:55:
                    cf:7a:c4:27:07:02:19:f3:c2:97:13:25:d1:57:6d:
                    aa:69:cb:07:48:c9:b0:d7:63:f1:70:bc:72:5b:43:
                    2f:2a:03:bb:ee:84:d8:74:e4:04:70:c0:1d:00:a4:
                    33:08:dc:60:5d:91:af:78:35:66:d8:7f:4f:bf:6e:
                    cd:01:e0:44:dd:4a:6f:34:8a:ad:de:b5:b1:52:41:
                    8b:ce:68:11:80:3a:57:00:b4:59:75:c0:f6:9b:0c:
                    55:11:7b:ba:c5:80:95:54:69:76:7d:c4:54:12:63:
                    55:5f:6b:03:b0:53:38:8d:15:8d:59:83:db:e4:c0:
                    c3:33:54:78:de:3f:39:ac:93:64:8e:51:0c:ff:f9:
                    f4:1c:25:7d:61:1b:9b:9b:88:50:cb:51:c1:69:f9:
                    e4:1a:22:74:85:26:2d:33:7c:a9:fc:54:9f:e7:b3:
                    d0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F5:EC:7D:4F:92:B9:8F:AA:9B:81:9F:EA:47:F3:1A:38:C0:AA:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b9ea3a7-6f63-3644-8b34-022f5ed87455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:cd:40:ef:52:e3:d7:7c:f3:a0:8c:c1:1d:df:a8:d3:46:5e:
         20:da:fe:cc:57:58:3c:81:2a:09:d1:7f:64:c0:1e:46:7f:94:
         28:15:1f:a4:29:27:40:9d:c2:52:a0:9e:5f:8d:3e:de:63:c0:
         95:7f:e3:f7:40:c2:2e:c4:6e:93:a4:9c:c0:f5:79:e9:b0:3f:
         00:27:cb:13:a9:61:0c:0b:71:62:f8:7b:97:73:0b:3f:33:e2:
         44:58:4e:d5:b2:a3:b4:7f:e8:c4:01:51:32:cf:be:d3:84:ec:
         0f:5b:cf:b5:37:81:20:57:79:f3:3a:43:b6:74:94:0f:48:d2:
         4f:ad:3a:12:ee:7f:ed:99:4e:7b:38:65:31:72:82:e3:c2:ec:
         be:a9:53:78:c2:8e:56:2c:c8:8d:a4:7c:3d:f1:d2:a2:ab:32:
         c6:3f:46:49:9f:14:75:d4:ce:42:5a:88:41:bc:41:78:6a:8e:
         81:fd:88:98:50:1e:34:64:1c:4c:20:ee:c4:e4:ad:d5:c8:4d:
         96:5e:5f:13:d2:0d:26:12:48:a4:32:91:5e:56:5b:34:83:5a:
         5a:9e:1c:bc:36:06:77:8f:74:aa:48:46:0b:fa:71:4f:19:fd:
         c8:01:1a:7f:0e:56:99:2e:f6:af:32:06:07:88:75:14:31:df:
         f7:95:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:14 2025 by rpki-client