Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bebe5d07-5cc0-347e-aed7-3205d541fce1.roa
File:                     bebe5d07-5cc0-347e-aed7-3205d541fce1.roa (raw, json)
Hash identifier:          W/yfjPhmUrZFuXBe/92vVaQNzOM93+wFXtxCLXG92Vs=
Subject key identifier:   A5:7C:E6:BC:3E:C5:FB:FA:9F:13:B4:69:9E:83:B0:B6:95:3B:6F:EE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A90A0A8A384ECB87FA1CBBFC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bebe5d07-5cc0-347e-aed7-3205d541fce1.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        173.24.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:a8:a3:84:ec:b8:7f:a1:cb:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=602ace8a-ce17-46a8-81b0-5430918a398a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:df:23:c6:57:51:ea:86:c3:d0:89:aa:fe:c6:
                    77:b6:c6:24:13:79:f0:53:ec:65:ec:80:64:00:d5:
                    e5:13:87:37:8b:83:b8:ed:97:1c:da:2c:0f:7c:76:
                    aa:2a:43:98:f9:13:69:40:ef:40:14:9d:48:5f:74:
                    a8:2e:8d:9a:86:df:c2:d6:7c:4e:78:b7:0e:b2:73:
                    2d:ef:0b:4e:bb:a3:02:6d:36:6b:cd:d2:e6:b5:99:
                    13:c0:77:71:c8:93:17:f6:e2:87:bd:ac:e8:e1:a0:
                    a7:85:67:a3:2e:01:95:2a:ba:8e:7f:87:95:e9:27:
                    bc:55:81:60:e9:2e:24:07:4d:ae:4e:aa:b4:42:3a:
                    10:79:36:93:ad:aa:aa:73:5f:c8:af:cd:5a:bd:7b:
                    28:fc:9d:8c:0c:04:38:17:e8:a6:92:88:1e:36:2c:
                    a6:d9:2a:ac:51:24:69:f8:a1:06:cd:0b:45:e9:4c:
                    9f:77:08:65:9f:b7:40:12:a2:79:3b:8e:61:36:3d:
                    63:59:e5:ef:02:a8:e8:fc:79:e9:c1:43:2f:e9:2e:
                    d2:1b:6d:b4:dc:7f:93:a4:d6:7b:1f:3e:84:90:68:
                    24:e2:9c:ea:e9:56:7a:46:38:e5:0e:3a:e5:66:1e:
                    c9:b0:58:7f:82:ff:5c:7a:49:fe:35:17:12:46:30:
                    97:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7C:E6:BC:3E:C5:FB:FA:9F:13:B4:69:9E:83:B0:B6:95:3B:6F:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bebe5d07-5cc0-347e-aed7-3205d541fce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:05:23:71:0c:8a:23:d5:fd:2e:ea:bd:e9:47:c5:33:1f:8b:
         67:c5:7e:b2:07:4d:5b:9d:e8:6f:19:d2:33:85:6e:4d:f2:ef:
         8d:da:9b:0d:b6:8c:e4:4c:e5:f8:f1:76:1f:05:23:3d:6a:0a:
         f3:4c:91:e7:b4:11:24:e6:a8:84:ec:24:65:b1:a7:13:41:c5:
         1b:e3:1e:2d:26:fd:fa:0c:a0:0b:6b:ea:60:0c:85:97:e2:82:
         60:be:4d:ad:3e:85:50:ff:7a:75:4e:33:e1:f3:02:f1:f0:8b:
         1f:bf:0e:e8:fa:83:fe:5d:98:09:c8:33:bb:a0:e8:cc:84:39:
         e0:24:b7:bf:49:4a:dc:07:7a:ab:e7:cc:2a:9d:d8:72:94:ff:
         2d:d6:bc:7e:a3:0c:e8:4e:0e:a4:f7:23:16:69:3e:2f:a1:2b:
         cd:f6:2d:d0:65:ba:84:de:5e:82:bb:c1:70:e1:e4:fc:c4:23:
         30:c1:5a:5e:a8:1a:4d:b1:06:e0:88:d9:fa:8c:9f:d8:10:90:
         29:85:fa:f2:d2:c9:1c:cc:15:40:9f:f6:fc:02:2a:e9:bc:e0:
         8b:67:d6:0f:d6:75:c0:97:14:e3:0a:84:7b:76:16:cc:31:84:
         24:cd:81:ab:8f:81:65:aa:6c:52:a9:cf:6b:24:b6:36:6d:59:
         77:82:a5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:11:58 2025 by rpki-client