Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f915e32-f772-31e8-ad35-ec38fb3f4b58.roa
File:                     9f915e32-f772-31e8-ad35-ec38fb3f4b58.roa (raw, json)
Hash identifier:          kDxzNM6Puf/dVcgD2q5BlBkGlqwuwNBnEJBy4ctvgq8=
Subject key identifier:   24:41:54:68:46:39:9B:95:92:FF:CB:FB:7A:BA:E9:F8:C7:D4:96:F6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8412595D1A4F87EE4109FFA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f915e32-f772-31e8-ad35-ec38fb3f4b58.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.29.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:59:5d:1a:4f:87:ee:41:09:ff:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a670da2a-4c10-418e-8af4-b1c43a22721c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:c3:1f:a0:eb:2d:70:f2:cd:8e:47:22:4f:
                    32:87:88:4d:6f:f2:bf:1d:2a:be:70:37:52:9f:16:
                    04:1e:25:96:39:8d:97:e2:cd:6f:da:64:84:33:40:
                    e2:95:5a:b8:af:bd:be:8b:f4:b2:4d:b1:c8:2d:85:
                    9c:b7:d4:01:e4:93:e3:74:06:38:0c:a4:2b:20:48:
                    c3:35:00:1f:6d:73:cf:77:21:59:6d:77:04:4b:6c:
                    37:99:7d:4e:b6:58:33:88:be:ee:13:d2:dc:21:b6:
                    2e:d6:1f:b9:f2:76:d9:b4:48:e2:13:a6:e9:fb:fd:
                    bb:5f:ea:4e:33:33:f2:a3:37:98:42:72:ef:84:d0:
                    82:23:6e:c2:52:71:1a:6c:b5:22:15:90:06:88:20:
                    c3:f0:45:2e:20:4a:1e:66:73:c0:c9:1b:57:18:e6:
                    53:8e:06:3e:4c:c7:ea:d4:65:2a:9a:9a:28:12:5d:
                    c5:7a:ad:77:10:c7:41:07:e5:69:89:64:76:c5:18:
                    63:34:43:55:06:16:41:01:57:6e:c7:95:e6:1d:0f:
                    55:57:8d:58:9f:cd:85:43:2d:5a:e4:81:d6:f8:50:
                    66:b9:9e:64:01:02:ff:7f:5b:25:ac:55:3e:de:fb:
                    dc:8c:9e:98:33:c2:b0:01:cf:91:fb:e8:9a:93:70:
                    9b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:41:54:68:46:39:9B:95:92:FF:CB:FB:7A:BA:E9:F8:C7:D4:96:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f915e32-f772-31e8-ad35-ec38fb3f4b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:2d:94:c5:16:a2:21:70:9d:b1:06:68:fe:1c:51:3b:bc:8f:
         09:52:65:eb:9e:50:d1:cd:80:5e:70:5b:8e:6f:d2:e6:52:96:
         b8:4b:e9:26:7b:46:01:5c:fe:d8:e3:1e:0a:09:41:19:14:44:
         9a:94:ea:be:2e:95:cb:e8:7d:38:b8:3b:bf:6a:da:6b:b6:f1:
         ea:5e:da:bb:39:18:6e:19:20:4d:c0:af:a4:c3:43:16:25:f1:
         a9:bd:36:68:8f:d3:ee:85:57:59:8c:e8:2d:4e:e3:bb:10:4b:
         9c:62:ea:16:0d:bd:a4:45:d2:ed:2e:4e:90:8c:c1:f7:0c:a5:
         03:a7:eb:2b:28:e3:ac:8f:f6:ab:ee:70:53:b7:d9:5f:db:5b:
         b8:ed:ed:24:1f:34:85:99:44:58:fa:66:90:76:fb:b2:9b:b2:
         ea:24:89:91:99:12:6c:2f:16:47:a4:cb:80:5b:30:82:19:0e:
         ca:5b:6e:08:6e:91:e5:09:a1:2a:1e:7c:aa:54:db:b1:96:be:
         39:5c:99:9d:90:71:2c:22:59:e6:46:e6:c9:76:87:e8:af:4b:
         20:63:a6:20:6e:f9:69:35:e8:95:c9:75:90:c7:61:e5:0a:5a:
         7c:d8:23:1d:3d:42:46:7b:71:b1:e4:59:e7:61:79:f8:00:6d:
         de:1e:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:07:11 2025 by rpki-client