Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b15424d3-ec1c-340c-a268-61f5c6ba2813.roa
File:                     b15424d3-ec1c-340c-a268-61f5c6ba2813.roa (raw, json)
Hash identifier:          fm39OpIvwtsNgXHxchv8ruOuUSmpk7PmzdJ61B76ds4=
Subject key identifier:   53:C8:65:C6:66:70:F1:D2:ED:9D:46:68:36:0E:5A:BD:53:92:7F:B8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8412505962BD7427A2B1ACC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b15424d3-ec1c-340c-a268-61f5c6ba2813.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.29.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:50:59:62:bd:74:27:a2:b1:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=1c241f3c-a075-49c8-bf91-f868bb04c4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8c:9a:de:57:dd:17:4a:47:3d:d3:66:6a:1a:
                    0c:ee:76:0c:26:b9:d4:cf:e6:bd:5b:81:01:19:b8:
                    b3:d2:d8:f6:16:41:43:98:39:79:68:45:86:59:0e:
                    c4:7c:7b:03:69:89:1c:e7:76:16:d7:07:5f:d3:81:
                    a9:2d:2f:75:74:b2:4a:8f:43:77:53:32:09:b9:04:
                    54:c1:df:36:32:88:9d:5a:d2:66:6f:cf:a1:15:d9:
                    ee:b3:9f:dc:4d:50:9c:f3:67:26:42:af:c6:e6:4c:
                    a8:dc:1b:c1:fc:08:93:89:34:74:24:22:2a:d1:95:
                    ea:5e:5d:bd:82:23:c3:03:ea:15:eb:9d:28:cf:f8:
                    b2:53:72:81:88:fb:7d:0f:63:9e:b2:aa:15:a0:9c:
                    c2:82:b0:c6:da:e8:f0:7a:01:22:eb:63:db:f9:d1:
                    b9:6b:5e:5d:cb:c2:be:8e:a4:14:f7:57:fd:8d:cf:
                    00:24:7a:29:8c:7d:5b:29:6d:87:e8:75:40:82:50:
                    e5:5e:e1:4e:ae:4d:da:4a:fd:e5:a5:76:38:a5:b1:
                    b1:e2:e2:d9:97:4f:10:4e:00:0b:3d:f6:c7:1a:8e:
                    1f:4d:5d:9b:79:6e:9e:30:10:94:42:7a:f0:d4:9f:
                    c9:e7:f8:aa:d4:33:7b:d4:1f:6c:9c:d5:76:2b:b4:
                    a6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C8:65:C6:66:70:F1:D2:ED:9D:46:68:36:0E:5A:BD:53:92:7F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b15424d3-ec1c-340c-a268-61f5c6ba2813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:db:60:70:15:7f:ab:c3:f1:e6:a5:3d:9b:1b:a4:8b:55:b8:
         84:87:ec:fd:16:99:50:31:c8:39:73:be:fc:59:22:99:af:f2:
         ea:5e:69:45:99:e2:d0:92:25:e0:37:82:09:60:8d:61:2c:85:
         5d:c5:c7:c5:6e:3c:a5:b9:fb:6d:ce:7d:07:ef:1c:f4:08:37:
         d0:b0:31:8b:50:1d:e4:e2:1f:79:7a:3d:45:5c:03:85:e3:a6:
         d0:9c:af:8c:18:80:40:d4:60:3a:58:52:e6:52:36:a0:27:ef:
         25:58:1c:99:61:e2:51:f4:a1:22:d6:fd:7d:ae:4b:55:fd:5d:
         68:72:fb:47:56:b4:a7:2e:45:22:5d:60:24:a8:1b:74:8a:93:
         99:68:22:43:58:b4:f5:dd:7c:74:5e:60:ce:da:e3:15:cd:6f:
         2f:25:39:9f:d5:a3:37:d6:41:19:c5:55:73:c7:0c:94:cb:db:
         b4:6a:4e:b6:02:38:4e:43:92:d7:79:e4:e7:ec:dc:71:66:6a:
         fe:fc:c0:5a:42:b9:19:15:14:61:83:9b:b0:09:63:74:ae:73:
         0f:87:48:f2:82:43:bb:2b:0f:f3:c7:7b:05:e6:7c:0c:cb:4d:
         d6:df:d4:e5:2a:78:69:5e:d6:de:f3:ad:34:e6:66:b3:60:84:
         0b:18:d2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:07 2025 by rpki-client