Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa
File:                     0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa (raw, json)
Hash identifier:          iS2w2ygg5VmWDwCnyjK63Q35NzqUmHWX53OKYAa3VPk=
Subject key identifier:   5D:0A:A5:C2:A8:4B:E3:A1:53:CA:04:E1:A8:19:A9:5A:91:77:2B:E3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A7E7B9F8FA750A9E8B9E27000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     7029
IP address blocks:        173.188.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:9f:8f:a7:50:a9:e8:b9:e2:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=e4a3e10f-20fa-4ac6-9636-f0b9bc57b00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:ba:12:09:46:fc:ec:dc:d2:fc:03:fb:32:
                    80:35:b9:d0:10:71:07:85:12:91:06:a7:87:a5:17:
                    7e:f1:fe:f8:7a:71:76:8a:62:7f:54:55:9f:65:2c:
                    9b:81:8a:27:6d:41:13:57:f0:72:04:ed:0a:8e:a6:
                    1b:4b:12:2c:e6:fa:f1:65:13:b9:89:f0:5e:6f:c3:
                    23:e3:05:03:83:ce:91:69:a0:91:72:0f:ff:86:ee:
                    a3:51:ae:0b:9f:75:05:5a:5e:32:6e:14:26:4a:3f:
                    80:88:fb:c3:36:da:4c:34:67:b3:a1:46:bf:87:80:
                    9a:94:09:ff:9e:59:53:80:14:3c:7b:93:61:51:db:
                    16:d0:8f:1f:b8:0d:08:3d:5f:ea:51:1f:87:04:6e:
                    cb:9c:45:b8:1f:56:3f:2d:d3:8d:86:83:ed:65:46:
                    90:6c:67:5c:55:a3:be:c9:da:43:62:08:27:2c:9f:
                    80:d1:81:86:7f:c3:7a:1d:f8:b4:c7:bd:d4:c2:fc:
                    e6:87:03:85:a0:5b:d9:db:b4:96:df:e1:d6:75:97:
                    2b:65:7b:dc:29:a6:5a:a0:77:ff:e0:4e:04:6b:97:
                    88:a5:60:21:7c:fc:1e:74:98:66:f2:58:23:61:ba:
                    19:16:cf:7f:a4:c4:20:59:6c:a7:12:f2:eb:78:93:
                    7f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0A:A5:C2:A8:4B:E3:A1:53:CA:04:E1:A8:19:A9:5A:91:77:2B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.188.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:68:e4:2b:23:3c:ec:02:0a:6d:a4:67:e3:9b:47:db:34:d7:
         e6:23:0e:d8:1d:a9:f9:b2:44:41:e9:87:77:a6:25:69:41:8f:
         39:f3:dc:5d:6d:9d:08:c1:5f:d6:6c:8f:b4:8f:07:97:32:62:
         f3:01:af:a9:0f:46:5e:a1:96:cd:05:fe:d2:af:88:ff:77:3e:
         bf:80:4d:c3:07:52:39:c6:4e:08:c6:23:19:31:69:0e:db:ef:
         f7:35:cb:f2:55:bc:01:11:43:1f:39:ae:b9:d4:3b:95:f8:f9:
         a6:e1:e2:bb:f6:d2:47:fd:02:06:ef:7f:71:20:19:ee:98:51:
         76:45:de:89:a2:ea:f0:92:61:b2:bd:2c:96:80:13:e9:40:08:
         33:b5:2e:67:e7:9e:a4:e5:f2:59:95:a0:87:5d:c3:3b:1b:64:
         c6:7b:2d:37:0f:d3:bf:34:73:03:05:cc:a8:c5:73:f8:ee:0d:
         b6:01:0f:bd:89:67:d4:fc:42:57:78:21:94:fb:67:66:02:ee:
         ee:f5:e9:09:8c:e3:08:05:4d:21:44:5b:2a:08:35:34:88:79:
         32:c3:d2:b8:f8:66:29:79:63:9b:32:29:aa:e4:12:d9:35:0f:
         fe:50:b2:bf:72:ca:c3:24:ed:49:5a:fe:18:5e:a1:b9:fb:2b:
         c3:8c:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:37 2025 by rpki-client