Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa
File:                     ad35f282-4358-39cf-a530-e512a7b2efe6.roa (raw, json)
Hash identifier:          TCxLu0Fqp1kCw6oSzCpHfgVV/rhfkqRSqIIODGeIAQA=
Subject key identifier:   B2:A9:91:6E:DD:D7:08:3E:FF:7C:8E:80:11:97:F8:13:E1:1E:C2:15
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8412440660DFA6844B6F4B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.21.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:44:06:60:df:a6:84:4b:6f:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=86f3863f-9fff-4c94-bb38-6216c71c9ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:49:d0:8e:73:47:c0:0d:d3:4d:f5:82:fd:
                    4a:1b:1a:12:6e:03:6b:eb:00:1e:28:42:2a:cf:99:
                    61:b6:2d:d1:ce:bb:aa:66:39:be:e2:6f:d4:41:7a:
                    37:36:87:ff:05:a0:5a:83:cf:fb:6c:a1:fc:05:be:
                    37:55:ca:ef:9a:80:b0:70:42:ce:fe:d0:94:f9:dd:
                    0f:94:4f:c0:7b:35:c1:b3:de:16:ed:0b:47:57:ed:
                    8d:81:59:ac:66:47:af:e8:73:5a:89:57:7a:b3:e6:
                    f7:3a:de:ff:80:d8:b8:e6:0d:a7:42:94:d9:c9:52:
                    ae:99:27:73:ec:60:76:c1:51:f9:43:ae:12:44:7d:
                    6b:e2:65:69:b2:b1:c6:27:3e:b1:a4:0e:f5:1d:47:
                    bc:01:82:a2:be:3b:44:43:5e:de:9c:5f:cf:2a:cc:
                    a4:a8:3d:a4:2b:5e:27:7f:c6:ac:97:e5:9e:1d:ce:
                    ef:bc:9b:63:78:bf:6c:fb:af:9a:44:a0:8a:1c:e4:
                    08:7b:23:f4:8c:02:fc:a8:7c:6a:44:d7:cd:77:32:
                    25:a2:07:ed:69:a6:91:56:c5:df:8b:c1:6c:2b:b8:
                    09:c0:ed:85:19:f0:ac:00:98:ec:fc:a4:79:fe:d2:
                    8a:8e:66:d7:65:0c:93:6b:77:41:e7:db:83:1f:b7:
                    46:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A9:91:6E:DD:D7:08:3E:FF:7C:8E:80:11:97:F8:13:E1:1E:C2:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:53:39:e3:67:07:99:4e:36:9a:a7:d5:63:10:31:19:f8:90:
         7a:78:62:ad:8e:01:ab:47:ba:e9:13:f6:97:8c:c4:cc:27:bc:
         85:41:3d:aa:a6:18:8f:36:af:50:59:fa:89:e9:4e:98:d5:a4:
         8a:1a:a2:83:a7:f2:a8:8e:38:82:6c:65:b7:43:f3:df:e2:06:
         41:b4:21:70:94:63:c9:ac:fb:cf:60:d8:b1:26:b1:34:51:81:
         0f:72:3d:2d:77:86:c4:2f:35:6a:90:80:c0:98:5c:9d:16:67:
         8b:d4:ba:16:32:bb:f4:12:be:fe:6e:ca:e8:4f:03:9b:56:ae:
         b7:b0:e1:39:e0:cf:9c:ed:c8:3d:29:27:70:85:9d:62:9f:0c:
         ec:a6:e5:45:51:39:b5:43:e1:ea:b5:15:78:e0:d0:85:43:2a:
         90:b5:16:aa:43:76:98:7a:92:8b:c6:0d:ef:d9:ad:21:46:cb:
         b6:28:11:07:27:4c:89:0e:47:4b:70:07:f0:58:e3:8c:35:f5:
         ad:92:b1:52:ac:06:66:75:8e:fd:e0:40:6e:8a:16:0b:ef:bc:
         ff:5c:e9:03:96:96:03:bb:09:3b:06:88:25:c2:f2:21:67:3f:
         ff:a6:ac:f6:7d:31:96:f5:48:ac:fc:e6:bf:3f:37:ed:aa:d7:
         65:10:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:14:32 2025 by rpki-client