Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11910216-a7db-376f-8703-02673da4e267.roa
File:                     11910216-a7db-376f-8703-02673da4e267.roa (raw, json)
Hash identifier:          suB4T1komEwB6l++Dn5+w834EiSSLNC84SlupBEpwBA=
Subject key identifier:   FC:12:02:9A:55:E6:9F:C6:93:BE:D8:46:66:8E:CF:13:F1:69:FE:44
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE3C4E3607D140CE3CD200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11910216-a7db-376f-8703-02673da4e267.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.16.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:3c:4e:36:07:d1:40:ce:3c:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=af3f2981-e34e-45c4-acbe-17379db41bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:44:9b:18:55:69:28:f2:96:17:32:4f:93:
                    83:e4:ca:05:18:ee:05:fe:db:4c:84:23:4d:6a:59:
                    50:1d:71:7b:f6:77:c3:66:c4:01:c3:df:88:5d:3f:
                    ea:33:c8:0e:e5:44:d2:e8:36:c4:b9:db:79:48:8e:
                    80:8b:9a:ac:69:1f:04:bd:90:85:d4:e9:75:48:13:
                    83:11:9c:0e:d0:39:ac:e7:81:f9:c6:13:f9:0c:bd:
                    ca:04:5d:cc:66:db:f4:1c:6b:3b:7a:43:bd:f7:5e:
                    0c:fd:00:71:55:33:3d:ab:04:f9:57:62:7e:62:4a:
                    25:5e:64:48:cb:3b:6e:ca:df:56:80:d5:75:25:9d:
                    2f:0a:4b:43:cb:75:4e:8c:53:77:62:13:8a:07:e4:
                    3b:6d:e2:72:9c:c8:14:b4:95:2d:24:70:1e:db:5f:
                    54:24:df:4e:3c:4e:38:98:18:df:e4:64:81:ea:f9:
                    44:43:7d:49:d0:3a:97:90:34:27:de:05:3b:97:2d:
                    4e:cb:2e:6c:a4:dc:ed:22:8e:bd:1b:c4:8c:fc:b3:
                    d8:8e:df:61:bf:2d:03:b9:1f:e9:ad:1a:ae:96:a4:
                    01:25:92:fc:d8:ab:d8:7b:27:82:04:fd:db:c7:f2:
                    7f:e4:ae:5d:f4:c8:36:59:67:47:21:9a:00:5f:06:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:12:02:9A:55:E6:9F:C6:93:BE:D8:46:66:8E:CF:13:F1:69:FE:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11910216-a7db-376f-8703-02673da4e267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:03:04:e9:3c:14:8f:9b:3c:bf:ac:ca:4b:32:f1:46:63:dc:
         ca:a7:ad:be:44:59:09:37:5f:40:e4:0a:4f:b8:81:16:2c:bf:
         2e:35:93:ce:25:27:dc:e0:5f:3c:7c:b6:b0:c6:81:53:f0:fb:
         02:83:a4:a2:50:e9:3e:1f:25:58:8c:b4:81:62:75:e6:d2:3b:
         e5:17:4b:4b:82:54:02:00:da:28:6c:fc:4b:94:d9:63:e0:80:
         70:cb:71:9a:b0:09:57:ab:67:0a:c1:02:2b:4c:10:23:f6:ce:
         70:2c:51:73:6b:51:9b:e7:8b:4b:3c:20:38:06:3f:88:cf:31:
         cd:d1:d5:0c:85:d1:f8:9d:73:43:b0:3d:d4:5a:73:30:5d:54:
         17:62:94:88:f9:6e:e0:5e:62:8d:14:1d:f5:98:cf:94:00:cf:
         31:cd:24:ee:d1:e1:1a:3b:2d:40:93:90:11:2e:67:fd:1a:df:
         9b:37:e6:25:af:cf:8c:09:f4:e2:a1:5f:01:cd:49:46:fd:55:
         06:7b:ac:3d:96:f1:fc:f3:d6:51:1e:d4:b8:24:00:f1:e5:1f:
         4f:dd:48:4f:d3:bb:c4:1d:86:47:de:48:22:aa:cc:cb:76:85:
         42:b6:a5:97:21:12:d2:5b:e6:7d:0e:4a:c8:da:ad:c3:58:e6:
         3c:2b:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:19 2025 by rpki-client