Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed8d2087-d864-3a44-aa65-6ac95d35a272.roa
File:                     ed8d2087-d864-3a44-aa65-6ac95d35a272.roa (raw, json)
Hash identifier:          /sEdYtkeDmOxBFiyUqYV5BnyGivNgUenSPgSc50DmzI=
Subject key identifier:   90:58:6F:2C:02:51:06:41:86:14:B1:B4:34:F1:D9:E1:5C:54:AC:FE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8412551C05183A9C8BFD24C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed8d2087-d864-3a44-aa65-6ac95d35a272.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.16.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:55:1c:05:18:3a:9c:8b:fd:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7cef186c-ce8d-4b1b-a2c0-e17b91399603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a6:ce:29:60:c0:d3:19:70:4d:51:a9:0b:4b:
                    87:7d:8c:bf:b4:e0:6b:17:9b:5d:95:d8:53:47:2d:
                    6c:f1:10:14:de:c6:8d:ac:14:7d:ac:14:8d:d3:47:
                    5b:bf:6e:78:28:1f:29:d7:76:01:8d:1a:0d:e0:9b:
                    e6:d1:57:c0:64:ac:a3:2d:30:42:9f:5b:7e:ab:53:
                    e4:84:85:ef:c7:67:d0:2c:7a:f0:59:83:11:49:85:
                    e1:5b:03:10:22:52:d3:2b:dc:73:d7:b7:29:8b:bf:
                    31:58:35:3c:ac:58:fd:56:38:9c:41:c6:41:83:02:
                    55:94:d6:5f:e3:a0:6c:e6:f4:b7:d7:fa:40:93:5f:
                    6c:19:ad:5d:64:cf:3f:20:2d:23:c5:c6:cd:b2:11:
                    40:5f:cc:6c:69:6c:2f:9c:47:ad:e8:7f:ce:16:49:
                    e4:da:88:e6:dc:a2:ad:ed:54:38:23:8d:63:50:c9:
                    8d:f6:a1:96:19:2d:1d:b1:95:8d:3e:61:b6:b5:e4:
                    84:e7:15:32:4d:46:0a:63:24:6f:fa:fb:7f:9b:85:
                    53:d5:65:4b:23:96:fb:2a:d3:18:84:94:33:da:6a:
                    55:37:25:bc:bf:76:d2:e3:3b:d5:81:2a:90:22:93:
                    e2:4f:e9:7f:07:64:87:f6:06:54:93:8b:d9:6f:1c:
                    9a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:58:6F:2C:02:51:06:41:86:14:B1:B4:34:F1:D9:E1:5C:54:AC:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed8d2087-d864-3a44-aa65-6ac95d35a272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:eb:52:ed:3a:51:cf:f2:61:ce:87:33:c1:55:ae:c1:54:2a:
         47:60:19:20:2a:eb:d3:7b:dd:da:c0:5f:41:72:b7:3b:92:09:
         6b:9f:f1:f2:2b:9a:f2:6a:8f:b6:ab:3f:ef:3f:b2:7b:c4:94:
         4e:df:a8:00:1c:8e:0c:b6:a1:ac:e9:8c:9f:cb:7c:bd:a1:c9:
         c9:2e:e9:eb:14:7b:7c:fc:ae:96:1a:45:8d:2d:4f:55:3f:d2:
         b5:0a:7e:38:96:03:ad:91:1b:5e:2f:19:c0:ee:69:46:e8:4c:
         05:a1:ed:f7:d0:fc:03:fd:12:85:94:fb:d8:4a:d2:21:f8:99:
         4b:18:c6:a2:77:75:7a:b4:90:b4:dc:38:9f:a9:a1:08:7d:cd:
         96:4d:e5:d0:e8:da:10:49:f2:47:dd:11:01:34:76:bb:80:bc:
         2d:4c:46:a8:c6:96:81:81:2c:fd:32:9d:d6:c2:d8:bb:40:61:
         28:5c:b6:bc:96:04:c9:96:bc:b8:70:38:59:32:ee:4a:92:b9:
         7e:0f:88:f9:7c:83:4d:0f:2c:2d:76:77:16:a2:4c:15:86:cd:
         19:99:22:68:f5:08:bc:a7:a5:d3:ea:71:6d:98:04:e8:4e:63:
         21:6c:eb:d3:aa:d9:ff:f4:79:9b:84:df:92:2d:8c:ac:54:f3:
         4a:b0:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:34 2025 by rpki-client