Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0d0c5b6-8540-3936-b484-7dce6aa31080.roa
File:                     b0d0c5b6-8540-3936-b484-7dce6aa31080.roa (raw, json)
Hash identifier:          5cRYrF8nXbQ5nshXAy04yJX8OiLL+iW0mL8sKUNF6XI=
Subject key identifier:   DB:85:D9:82:F1:72:6B:0C:47:38:60:01:93:84:9A:99:F6:E6:A6:76
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AAE87EA3CC4D2707A8236D960
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0d0c5b6-8540-3936-b484-7dce6aa31080.roa
Signing time:             Tue 29 Jul 2025 18:05:16 +0000
ROA not before:           Tue 29 Jul 2025 18:05:16 +0000
ROA not after:            Mon 27 Oct 2025 18:05:16 +0000
asID:                     30036
IP address blocks:        173.25.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:87:ea:3c:c4:d2:70:7a:82:36:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 18:05:16 2025 GMT
            Not After : Oct 27 18:05:16 2025 GMT
        Subject: CN=9671fb0f-e7de-4bac-8999-48031b215b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3b:73:c6:be:fa:da:cd:00:e9:cc:3d:a3:24:
                    22:60:19:3a:c0:4b:6f:78:a4:79:a9:27:a4:01:81:
                    76:d8:4e:7c:85:a1:06:48:97:89:27:1a:fd:08:c5:
                    d1:6b:e6:62:d7:c1:b9:f5:f7:2b:ec:57:bf:a6:af:
                    e9:f1:9f:54:af:91:49:30:77:9c:51:56:5f:5a:f9:
                    7e:e7:1a:11:68:8d:6f:dd:54:19:10:57:97:93:03:
                    f8:6f:42:97:1f:7a:0f:3c:a8:7c:4b:7b:ab:e3:36:
                    aa:a5:a0:2d:54:b1:13:49:34:0e:f6:73:98:3d:91:
                    c3:2d:f8:7f:da:cc:70:3a:2d:eb:b9:ab:44:9a:7e:
                    e4:f7:41:b5:7e:14:35:6c:ba:f9:f5:72:da:b9:31:
                    c7:85:65:95:b7:8e:52:52:57:df:e0:f6:d4:89:52:
                    c9:03:f5:61:3e:c3:d7:52:f7:d0:4a:5a:9f:63:e3:
                    3f:9e:48:13:a4:6d:0b:b8:7b:6e:f9:5a:05:a1:69:
                    0a:39:92:5c:08:e7:74:63:d8:1e:84:df:5e:2a:56:
                    92:ab:3a:a1:94:6d:d3:5c:54:ab:71:54:a6:2c:a4:
                    8f:a8:01:a6:31:36:bb:d5:09:64:4d:d5:0d:1f:38:
                    35:56:da:56:28:7b:0d:e6:7d:70:cc:9d:9e:e8:07:
                    ea:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:85:D9:82:F1:72:6B:0C:47:38:60:01:93:84:9A:99:F6:E6:A6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0d0c5b6-8540-3936-b484-7dce6aa31080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:37:eb:8d:e4:03:24:23:20:4a:68:52:f1:74:f8:8a:0a:c7:
         c8:cc:96:49:56:85:b5:49:fa:a2:c8:36:8f:eb:2c:a8:f2:fd:
         3a:08:3e:d2:64:f2:2f:30:c0:8d:84:ca:e5:ef:77:f7:0a:0e:
         46:46:13:1d:56:44:db:73:07:fc:d2:ce:57:bc:8f:f1:01:be:
         15:29:be:5f:8b:51:10:e8:81:e6:25:db:70:12:72:f0:b7:9d:
         31:06:b4:a8:1b:69:b1:9a:ac:b9:ed:f2:af:34:1c:3c:84:11:
         af:a4:70:51:00:66:7b:cd:56:f2:f4:97:f4:78:2d:9d:f8:ef:
         1f:38:88:33:83:a3:72:1a:7a:87:eb:c4:cd:f6:93:5f:2e:19:
         1f:03:93:0a:eb:ba:5d:23:fc:db:ce:34:82:d6:fd:3a:94:db:
         01:bf:78:50:b3:3c:46:99:0e:e4:c9:25:70:36:b4:de:57:7f:
         bf:34:30:77:98:74:54:9a:0d:4b:0a:f0:c0:44:f3:72:13:5f:
         e9:04:33:41:1a:05:eb:66:8b:3f:44:fa:84:ba:e1:b4:bd:eb:
         be:69:85:c4:cd:d0:82:d2:9e:eb:09:a8:f0:4e:3f:6b:17:cd:
         e2:00:49:39:10:fd:12:02:ef:d6:d1:dd:9b:80:e9:ac:ed:89:
         e2:27:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:03:23 2025 by rpki-client