Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4e47809-b130-30c1-95ce-efc6bc728060.roa
File:                     d4e47809-b130-30c1-95ce-efc6bc728060.roa (raw, json)
Hash identifier:          LpB9Mv92lyNM+zwMhuN5UknEZSxCnJGawYz1tDLeQp0=
Subject key identifier:   0A:20:FB:49:51:E1:28:C2:8F:D9:62:2C:77:8E:95:01:0A:D6:4A:39
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DBFB35EB99C6C2C585B200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4e47809-b130-30c1-95ce-efc6bc728060.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.17.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:fb:35:eb:99:c6:c2:c5:85:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=d3638974-1e1d-4c99-951e-ab7dd9039e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:bd:03:4b:e9:57:9c:bb:b2:a7:bc:cd:c8:
                    2b:43:19:b2:b3:f7:0f:4c:7d:48:98:05:a2:a9:92:
                    6c:f0:5f:9c:b8:1a:52:b1:48:cd:e1:7d:b7:9d:4d:
                    5c:2f:81:db:96:f7:d8:79:8e:96:60:c3:77:0b:78:
                    46:37:4e:74:d2:aa:44:d3:e6:9f:b4:69:d0:24:a0:
                    34:b2:28:b5:92:3e:78:c8:39:9d:65:a6:27:9c:0c:
                    b0:fe:df:a2:f6:89:50:1d:16:27:41:d4:c8:17:32:
                    84:7f:f9:b9:d0:e2:84:98:47:8c:92:05:0e:fc:46:
                    09:00:ef:d4:fa:d4:62:ad:f7:1d:9a:41:0c:fe:7f:
                    37:0f:6e:b1:fd:c6:ac:cc:d1:95:ef:31:95:4d:3a:
                    e1:f5:4e:7d:e5:23:26:fc:88:41:a2:88:78:b7:20:
                    91:49:a8:b8:66:bb:e7:57:9e:e6:5f:08:84:78:69:
                    90:07:59:a3:6a:dd:41:87:93:71:6a:79:97:cc:16:
                    09:1a:d4:3c:8b:70:1b:5a:20:21:4a:3b:55:81:3d:
                    11:cc:9f:fc:46:73:fe:f9:ed:7b:48:24:b3:ff:92:
                    dc:93:22:82:53:42:07:3c:a2:5c:7d:3c:e1:e4:67:
                    34:1b:ce:a6:96:63:9f:81:8b:81:99:5b:36:e6:6f:
                    87:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:20:FB:49:51:E1:28:C2:8F:D9:62:2C:77:8E:95:01:0A:D6:4A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4e47809-b130-30c1-95ce-efc6bc728060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c2:53:f7:74:c1:e1:7b:ed:15:82:bb:29:fa:50:a5:d8:3c:
         55:44:5f:b1:d7:31:ce:d4:a8:da:a0:8b:7b:dd:0a:a1:23:6a:
         24:33:7b:8d:6f:35:fb:41:d0:e7:6f:1b:77:89:ea:39:8f:86:
         3f:fc:59:c8:7f:90:f8:65:fc:8a:00:b9:28:83:aa:b9:40:f2:
         fc:cd:ee:4b:96:e2:5b:54:fe:8f:db:80:5e:fe:cb:16:b1:97:
         94:04:cf:fd:c7:a8:5e:bf:e2:86:bb:74:dc:29:f5:31:e4:c1:
         06:63:f0:d8:15:e4:01:07:0b:9d:4d:1e:cf:68:ae:9b:16:32:
         69:9a:be:47:6e:62:92:59:bf:c9:89:db:61:13:69:cf:9f:5a:
         96:0a:6b:6e:91:e1:33:aa:08:62:a6:8f:cb:4d:d4:f7:0d:b5:
         dd:ba:d8:56:cc:12:f0:c7:2e:f2:2d:57:50:9b:2b:10:23:e8:
         1c:35:75:ff:c5:84:44:50:a4:18:31:25:c8:00:0d:84:bf:96:
         6c:38:cc:fe:4b:f0:4d:8e:81:b7:ee:4d:33:e8:9d:1e:ac:9a:
         3a:3c:60:a5:be:79:0d:99:27:70:a4:22:2b:a5:61:41:9b:9e:
         c1:19:83:ec:c0:cf:a7:9b:75:dc:22:33:99:08:49:5a:7c:c2:
         2e:fd:18:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:00 2025 by rpki-client