Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/074aba1f-7c44-3fb4-9b9f-29f62176ee68.roa
File:                     074aba1f-7c44-3fb4-9b9f-29f62176ee68.roa (raw, json)
Hash identifier:          jO4AiGvMGVBkzi7sB+dx8/A3aKgVQWyqudQcw2tsnEY=
Subject key identifier:   F8:71:12:0A:46:3D:48:82:70:90:96:AC:AE:2E:D2:6F:3C:0E:23:91
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B475CE0FA0BE4D9F86DE4EE40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/074aba1f-7c44-3fb4-9b9f-29f62176ee68.roa
Signing time:             Mon 22 Sep 2025 11:57:14 +0000
ROA not before:           Mon 22 Sep 2025 11:57:14 +0000
ROA not after:            Sun 21 Dec 2025 12:57:14 +0000
asID:                     19905
IP address blocks:        173.29.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:5c:e0:fa:0b:e4:d9:f8:6d:e4:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 22 11:57:14 2025 GMT
            Not After : Dec 21 12:57:14 2025 GMT
        Subject: CN=ebcd1c91-438a-4a5d-8a28-c3c86bf0339b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:12:c1:5d:50:8c:8f:c5:bb:01:74:10:8b:
                    c1:03:72:e2:2b:95:d6:e3:0f:4b:f7:0a:f2:ef:31:
                    9f:e2:5e:df:99:7c:6d:6f:5e:6e:51:67:89:ba:3f:
                    fa:ad:e3:90:61:ce:47:17:a0:76:40:c8:c1:31:a1:
                    13:f2:f3:55:14:62:1f:b8:fc:16:62:e1:8e:ff:13:
                    d5:58:a5:ba:32:52:a8:81:67:35:74:71:80:4a:8d:
                    72:d8:71:09:b7:ec:58:13:4d:db:c5:1d:06:5e:b4:
                    52:30:c7:fe:b8:c6:52:e3:f4:7f:d2:cd:80:55:06:
                    25:40:09:45:3a:42:e3:6d:b5:08:dc:10:4c:bf:73:
                    a8:c8:43:d0:ce:5f:f3:8a:66:97:de:4b:2c:28:0e:
                    2f:09:2b:5e:f6:2e:26:17:7d:96:1a:7d:f4:34:41:
                    34:02:ca:64:2d:d3:de:86:4f:a1:84:07:ee:9a:38:
                    6a:97:4b:78:93:a3:79:55:26:35:f5:f2:7f:01:d5:
                    bd:98:21:fa:7d:68:88:87:ca:5a:4d:85:ef:4e:51:
                    5c:d9:c9:60:57:84:0b:c2:5e:76:99:4b:c6:c6:68:
                    fa:5e:96:f4:29:56:7b:c1:77:08:db:44:1b:4f:d1:
                    78:0f:c7:48:bc:b2:12:60:b2:7d:51:b6:6e:ad:be:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:71:12:0A:46:3D:48:82:70:90:96:AC:AE:2E:D2:6F:3C:0E:23:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/074aba1f-7c44-3fb4-9b9f-29f62176ee68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:99:d3:e2:f8:1e:3f:eb:3c:ef:58:ea:34:24:97:a9:60:e1:
         1c:1c:4e:d3:6c:c8:e2:45:f2:67:f2:8c:51:de:72:9d:a6:36:
         84:77:86:a8:fe:65:51:c0:4d:bc:db:e2:d4:2a:26:81:9e:5d:
         74:cd:39:f5:bb:fc:0f:a8:f6:1a:69:a7:3a:6b:cc:5f:f7:63:
         c1:e6:d4:f0:5d:2a:be:83:54:bc:80:61:5f:75:3a:4c:d8:08:
         20:03:81:e5:28:1e:fd:71:83:50:d1:49:80:0c:8d:d0:bc:b7:
         4d:18:3a:84:9f:74:52:7f:74:df:6e:4d:87:6a:c9:7c:49:2e:
         71:59:7e:88:e2:a4:20:0a:99:82:4c:d9:28:4c:91:24:78:ce:
         11:6d:72:c0:7f:82:67:3d:9a:e1:cc:e5:18:f5:9b:29:dc:f0:
         97:76:0e:ea:05:a1:90:08:b6:d5:20:c5:a2:c9:8c:43:ab:17:
         53:67:1a:9e:1c:39:3a:f0:24:13:1f:9a:9a:c1:89:0f:f3:9c:
         00:68:4c:67:93:9c:29:59:1a:a4:86:42:28:54:e5:84:ca:49:
         7f:66:7d:a7:cf:49:f8:4e:19:4a:14:3e:fb:a1:41:b2:3f:64:
         5e:f3:8e:3f:50:4e:c8:f7:69:7e:73:bb:da:7b:ac:3a:68:f3:
         ad:27:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:23 2025 by rpki-client