Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e293c280-b23d-336c-a9cc-83619f4584ea.roa
File:                     e293c280-b23d-336c-a9cc-83619f4584ea.roa (raw, json)
Hash identifier:          WphgYQ2Naee7UtUAnQQ8RvUZ0ENJRxt63HhEsJBU6/I=
Subject key identifier:   BC:B7:91:82:4D:8C:BA:F7:96:80:1B:08:89:3A:A9:63:8A:87:9A:59
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81464D543091F6BC17F6FCC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e293c280-b23d-336c-a9cc-83619f4584ea.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.17.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:4d:54:30:91:f6:bc:17:f6:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=30714e0b-9638-4fd1-8775-362648f45820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:51:30:7b:93:3f:b8:5e:0a:e2:97:f1:1b:
                    0c:53:3a:4e:82:a2:09:ca:e0:09:ec:bd:0c:b6:1a:
                    13:b9:1a:f8:fd:53:43:f3:52:a8:5b:40:e8:25:5b:
                    9d:63:3a:c0:8a:c0:42:cd:d6:c5:24:d4:61:fa:a1:
                    54:63:e4:d9:ab:4c:ec:89:c0:ca:20:61:f3:6f:28:
                    c3:70:85:93:78:63:90:7c:56:90:68:da:f5:60:bf:
                    e8:06:51:28:7d:eb:6c:ca:5a:62:6f:12:d7:00:95:
                    25:18:25:4d:b6:e5:a5:1b:05:60:ac:2a:fe:7d:5e:
                    23:35:77:02:af:21:dd:dc:46:e8:4d:55:7b:57:41:
                    9a:35:48:4c:93:ab:34:4d:dd:29:62:c4:2a:9c:4d:
                    92:5f:d4:35:43:1d:5a:33:b3:ac:6b:63:d7:69:f5:
                    3a:12:50:fb:eb:8d:cb:22:ac:c8:8f:37:46:32:86:
                    69:0b:08:69:80:0d:bb:0a:bb:e1:52:74:2c:ba:90:
                    4e:10:5a:48:f2:02:fb:dc:18:04:36:e1:8f:a6:5e:
                    da:80:eb:5f:d0:2f:75:21:1f:b9:0f:8c:68:97:c5:
                    f6:f8:36:24:a9:83:c8:22:bd:42:aa:0a:94:ca:b8:
                    b9:d8:9e:3f:23:77:8a:22:72:d7:44:d0:e9:85:3a:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B7:91:82:4D:8C:BA:F7:96:80:1B:08:89:3A:A9:63:8A:87:9A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e293c280-b23d-336c-a9cc-83619f4584ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:61:ff:31:c9:1a:2c:2f:01:6d:24:56:26:6e:f1:6f:5d:1b:
         4d:0c:86:9e:9b:19:e0:fa:a3:f3:56:ba:43:67:2f:1d:56:24:
         44:19:1d:ef:78:96:8d:b4:0d:6c:ef:fe:ad:cc:ea:45:84:d4:
         39:7a:31:b3:44:6b:89:f6:86:e5:60:f8:b4:19:e8:44:05:a3:
         a1:9f:07:06:b3:af:4c:42:83:72:89:9d:0c:0e:1d:10:f0:3a:
         04:e1:56:c0:41:27:d8:f0:d8:79:41:93:da:7f:3b:bd:c7:0b:
         56:27:dd:6a:7a:d2:6d:13:34:41:95:9e:e3:07:f3:15:e3:09:
         f4:ea:fe:45:9d:25:70:fd:f2:f7:0b:d4:31:bd:ad:3f:15:18:
         20:4c:c5:6a:29:2c:3c:bf:9d:e2:89:b6:78:eb:5e:e2:b1:d8:
         7f:58:0d:d1:bf:fc:97:1c:e4:d0:27:82:89:8d:ff:29:3f:b0:
         a3:23:9f:4e:fe:93:f5:78:ab:5e:cf:cc:97:04:17:1d:2f:6d:
         6a:41:88:1e:67:35:56:8a:c2:e3:f7:bd:45:4f:2c:82:33:bf:
         78:3e:31:6d:96:37:1d:02:aa:a2:0f:98:87:6e:77:17:41:52:
         d8:0f:41:d1:44:57:1a:f1:da:c9:84:89:27:13:94:d5:ae:36:
         ab:b4:d1:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRk1UMJH2vBf2/MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
MzA3MTRlMGItOTYzOC00ZmQxLTg3NzUtMzYyNjQ4ZjQ1ODIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqctRMHuTP7heCuKX8RsMUzpOgqIJyuAJ7L0M
thoTuRr4/VND81KoW0DoJVudYzrAisBCzdbFJNRh+qFUY+TZq0zsicDKIGHzbyjD
cIWTeGOQfFaQaNr1YL/oBlEofetsylpibxLXAJUlGCVNtuWlGwVgrCr+fV4jNXcC
ryHd3EboTVV7V0GaNUhMk6s0Td0pYsQqnE2SX9Q1Qx1aM7Osa2PXafU6ElD7643L
IqzIjzdGMoZpCwhpgA27CrvhUnQsupBOEFpI8gL73BgENuGPpl7agOtf0C91IR+5
D4xol8X2+DYkqYPIIr1CqgqUyri52J4/I3eKInLXRNDphTolJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLy3kYJNjLr3loAbCIk6qWOKh5pZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTI5M2MyODAtYjIzZC0z
MzZjLWE5Y2MtODM2MTlmNDU4NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAth/zHJGiwvAW0kViZu8W9dG00Mhp6bGeD6o/NWukNnLx1WJEQZHe94
lo20DWzv/q3M6kWE1Dl6MbNEa4n2huVg+LQZ6EQFo6GfBwazr0xCg3KJnQwOHRDw
OgThVsBBJ9jw2HlBk9p/O73HC1Yn3Wp60m0TNEGVnuMH8xXjCfTq/kWdJXD98vcL
1DG9rT8VGCBMxWopLDy/neKJtnjrXuKx2H9YDdG//Jcc5NAngomN/yk/sKMjn07+
k/V4q17PzJcEFx0vbWpBiB5nNVaKwuP3vUVPLIIzv3g+MW2WNx0CqqIPmIdudxdB
UtgPQdFEVxrx2smEiScTlNWuNqu00ZU=
-----END CERTIFICATE-----
Generated at Wed Aug 6 03:57:11 2025 by rpki-client