Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab5739f5-4bc6-3727-9050-d12717d4c9b1.roa
File:                     ab5739f5-4bc6-3727-9050-d12717d4c9b1.roa (raw, json)
Hash identifier:          AXWIDuV63Ib8xT5N8ftn1G15Rw2Eajs/bJBFvX94hdw=
Subject key identifier:   4B:63:B8:D3:56:F9:C1:D2:6D:F0:4E:CD:12:55:0F:D2:53:5A:B7:86
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410D5933CEC446505442D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab5739f5-4bc6-3727-9050-d12717d4c9b1.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.18.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:d5:93:3c:ec:44:65:05:44:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a667ae94-1193-4e3b-93b3-c92434091ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:50:8e:96:27:05:c9:a6:5e:08:fd:1b:56:cd:
                    e9:9d:3f:df:19:c5:44:6f:ea:0d:f2:57:c4:1a:4b:
                    54:5d:f0:64:bd:0b:ac:cb:4f:df:9a:bf:88:f0:64:
                    45:28:04:f1:25:75:fa:41:22:8a:af:f8:3c:43:f7:
                    a9:e7:be:fc:17:74:5b:12:32:3e:45:ff:d3:95:eb:
                    6d:11:81:af:5c:50:0e:ef:c1:48:da:10:b0:ab:22:
                    5a:bc:b6:72:05:db:da:3a:85:ca:46:44:98:94:a5:
                    0b:71:cb:f4:c3:89:13:00:f7:f8:45:6f:96:08:20:
                    a0:ae:1a:2b:97:df:b5:bc:ca:6b:7b:d8:bd:05:85:
                    a6:18:41:1e:f7:b7:cf:16:38:7e:8c:d6:2b:cf:01:
                    3f:53:43:eb:0f:91:fd:9f:58:5b:80:e1:1e:e2:bb:
                    e2:8a:80:aa:02:cc:c1:80:80:86:92:dc:f2:f3:a9:
                    cb:94:be:f8:b1:55:02:ab:a3:27:82:29:80:82:36:
                    96:c4:09:38:dd:11:37:18:cf:5f:bb:92:3f:00:36:
                    93:9b:f9:0e:24:91:ea:fb:fb:88:3e:95:23:54:b1:
                    c2:f9:1e:ce:ea:ba:43:bc:cc:60:01:37:72:53:70:
                    26:83:25:9c:13:fd:ba:4e:23:ce:b3:6b:6f:c4:00:
                    c6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:63:B8:D3:56:F9:C1:D2:6D:F0:4E:CD:12:55:0F:D2:53:5A:B7:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab5739f5-4bc6-3727-9050-d12717d4c9b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:cd:4a:98:ff:af:d9:0e:7a:2d:f1:52:bd:48:be:10:04:bf:
         9e:cf:27:11:05:d6:a0:cc:2b:86:d3:f0:9f:0f:69:0f:f4:e7:
         9a:56:00:f7:bb:47:05:2f:63:a6:72:c7:ee:57:7e:75:3b:43:
         f8:20:b2:03:95:47:ca:21:6e:21:63:a0:f0:dd:af:6b:78:c1:
         f5:33:2a:05:8d:ec:c2:95:e6:58:76:b6:80:d4:67:82:33:3f:
         82:25:9e:60:f3:8a:a7:a2:4a:98:16:ee:a0:5f:6d:8b:d2:a9:
         ff:7c:7e:3f:91:1b:7f:61:cc:5a:36:27:a6:0d:ca:14:86:86:
         7f:1b:51:12:61:66:0e:88:d4:65:21:5d:2b:3f:54:2c:9f:8d:
         57:a6:7a:32:53:55:d8:d5:da:fd:7a:81:a6:a7:c6:90:33:4b:
         bb:15:1f:e3:8f:48:9b:42:95:5e:aa:fc:d2:37:f2:5e:fa:83:
         fd:47:e1:4f:b7:cd:fb:9c:52:9f:01:47:8a:1a:14:ed:5a:48:
         7e:9f:1b:9a:9d:f8:f2:95:20:70:d8:fe:d1:46:a8:db:61:ca:
         ac:ab:9e:2a:35:1b:74:38:79:54:45:5c:b3:d6:b2:4d:f4:0e:
         f1:46:c1:b5:ab:e9:67:18:e2:36:44:d5:5c:f9:74:6d:e7:5d:
         5f:80:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:05:33 2025 by rpki-client