Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac24c0f0-923c-3fb3-8eec-170e5cdb0c5f.roa
File:                     ac24c0f0-923c-3fb3-8eec-170e5cdb0c5f.roa (raw, json)
Hash identifier:          9K7ViG5YPLU+gP6m5+1QT+PL2UVd9/k5rArMu10f13c=
Subject key identifier:   1C:E7:CE:1D:93:A5:D8:CB:5A:E3:9A:C0:99:2A:75:24:52:D0:D0:CC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410C8B5F18F7296FBE69120
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac24c0f0-923c-3fb3-8eec-170e5cdb0c5f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.18.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c8:b5:f1:8f:72:96:fb:e6:91:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ad8fe683-30d8-41f9-86de-5e5691654718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:8d:eb:7c:7e:c0:6d:c8:98:f6:ee:08:c0:
                    f2:02:de:0b:dc:0c:51:c0:19:c0:98:09:63:c7:71:
                    f4:fa:8a:6a:45:60:8f:a5:aa:21:f5:90:c4:6a:59:
                    7d:b1:6f:60:53:f2:76:aa:63:59:9a:48:d5:3d:d4:
                    32:49:5d:c7:34:08:15:2c:e0:ab:34:1e:b2:7b:16:
                    89:6f:14:c5:60:0e:fe:c5:e0:9d:dc:c2:5c:46:44:
                    d0:a1:24:90:f7:ce:11:73:58:ec:a6:91:a6:34:26:
                    c6:20:70:cf:da:fb:31:2e:05:cc:68:b5:54:f6:9f:
                    1c:db:74:21:17:d8:42:be:24:ee:3e:00:5a:5f:ec:
                    8d:47:34:4f:fe:6c:14:7f:b9:ec:94:11:b4:d2:14:
                    50:24:74:b4:20:2d:a1:f2:f2:79:8b:a9:ef:e4:55:
                    21:7f:d4:9b:80:15:13:b1:05:c8:20:9e:84:84:00:
                    8b:9a:6d:83:7b:6d:30:d4:e4:9d:59:4e:31:01:f2:
                    45:7e:e6:ce:f1:a9:c5:04:d4:7e:13:8b:59:87:ab:
                    ac:47:3a:36:39:20:1b:90:3b:8e:55:86:23:ba:e2:
                    bf:0c:73:65:01:5f:78:35:2f:da:c8:50:ab:2d:68:
                    fd:87:2a:18:7a:a4:ee:60:1d:29:11:c9:eb:df:47:
                    21:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E7:CE:1D:93:A5:D8:CB:5A:E3:9A:C0:99:2A:75:24:52:D0:D0:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac24c0f0-923c-3fb3-8eec-170e5cdb0c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:f9:c1:a7:5a:9d:d9:57:77:80:28:9b:79:86:83:d5:f2:
         18:01:b5:f4:67:d3:af:ec:48:ca:81:0c:c4:6e:aa:95:04:09:
         e4:28:01:03:60:8b:15:12:f7:86:fe:4b:12:d1:a8:de:ec:5c:
         66:dd:d6:5d:1f:85:6f:5e:8e:15:20:60:63:3e:65:13:75:dc:
         53:45:f5:dd:91:05:7e:5d:d0:49:b1:15:17:14:4c:69:dd:da:
         a7:c9:d7:75:fb:5c:1c:58:37:a1:b4:56:eb:49:de:e5:50:21:
         d5:92:ce:4f:f0:2b:ea:6d:f6:86:79:28:43:8a:d7:20:c9:7e:
         c6:b3:90:c0:71:ff:0e:2b:f2:1b:1f:12:67:15:78:2e:98:d1:
         b5:64:3a:54:f5:d5:b7:94:36:c9:41:aa:85:cf:d2:8f:cc:a6:
         42:3c:15:5f:71:bf:f7:c2:47:ad:73:4c:93:f0:b0:a1:de:e5:
         82:77:c2:be:fc:96:9c:a5:1f:6d:43:55:bc:84:b0:84:c9:d8:
         78:a0:fa:7b:4b:93:ea:4e:0d:ec:69:38:9f:63:dc:f0:ba:19:
         31:7a:77:59:a8:f6:0b:ab:4d:1f:54:86:d6:4b:c7:0b:fb:4b:
         98:64:08:42:f6:ab:8b:8c:ad:62:0c:68:22:d2:16:01:82:f8:
         f2:47:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:25 2025 by rpki-client