Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19168360-17fc-367c-a950-aab8079c7ef0.roa
File:                     19168360-17fc-367c-a950-aab8079c7ef0.roa (raw, json)
Hash identifier:          RksHGMlXN7nmF0mqQfWoXoQbwrrSDQAkvp8tFffPaYA=
Subject key identifier:   98:AA:5F:69:5F:B6:B4:E4:EC:E0:70:88:F7:02:FD:29:14:9E:0C:41
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE52374DA0B6437E322240
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19168360-17fc-367c-a950-aab8079c7ef0.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        150.195.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:52:37:4d:a0:b6:43:7e:32:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=4aa30abf-2eb9-4b67-8e0b-ec6228a0a79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a2:41:06:a2:41:f5:95:67:6f:7d:21:b0:0e:
                    e7:85:37:98:ad:2d:a5:16:32:8f:f8:53:ba:77:70:
                    0f:f9:e1:09:90:e9:82:bc:7a:85:c0:01:b1:68:6c:
                    47:c8:a5:98:8f:48:45:5e:5b:cc:ec:97:59:26:a7:
                    71:fb:b2:e5:93:ee:19:48:3b:c4:bf:01:d3:80:51:
                    aa:89:24:1e:29:66:5f:2a:bb:a7:35:7f:dc:ae:03:
                    70:e4:4e:c5:a3:5f:93:19:bf:8d:29:50:91:56:fb:
                    ab:8e:90:ca:89:60:f4:2a:7e:de:ea:5b:cf:15:0c:
                    c1:13:77:f6:f0:21:81:80:6b:0b:e1:22:95:01:4a:
                    3a:7f:92:de:1e:fa:5c:bf:e0:db:ba:f9:e3:57:42:
                    1d:a7:b8:05:db:8a:e7:61:8c:52:d9:ec:cf:18:66:
                    be:42:53:65:76:09:73:09:1e:f0:87:8e:1b:91:e9:
                    d5:53:71:bc:96:b9:31:14:f5:2e:e8:24:62:0e:8d:
                    7d:5d:85:32:03:a1:a2:d7:09:6c:4a:ac:33:78:13:
                    0c:d9:50:c9:fb:03:da:6b:0a:72:ee:ff:de:35:29:
                    c2:df:99:4b:f7:f7:28:9a:0c:2c:61:4c:b2:d1:33:
                    53:b1:b3:3c:50:02:03:12:5a:d3:ab:0b:4c:75:f6:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AA:5F:69:5F:B6:B4:E4:EC:E0:70:88:F7:02:FD:29:14:9E:0C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19168360-17fc-367c-a950-aab8079c7ef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:bd:29:f4:0c:a5:74:c5:e0:cd:a9:ef:a5:46:43:13:fc:4b:
         13:a0:a1:6a:e0:ee:79:7b:d1:47:6a:94:7d:66:70:51:7f:2e:
         04:56:63:23:d8:a5:e9:71:fc:53:52:9a:91:bf:f1:4f:d8:eb:
         aa:7e:bf:d5:8a:d4:ca:04:1f:f6:8b:73:c0:03:25:e6:7a:23:
         f8:08:cc:e0:49:93:be:7c:83:f7:a1:95:71:2f:06:66:d4:8a:
         a4:47:a0:7e:a4:62:da:d7:fb:11:3c:f7:5f:44:dd:c0:25:a8:
         4d:82:20:8b:c7:ad:40:d8:a1:de:70:fb:21:cd:9d:9a:f6:06:
         c3:93:01:32:f4:21:89:41:15:fa:97:4e:4c:36:a0:33:1f:e9:
         bb:e9:48:8a:49:98:38:1c:0f:fa:b7:67:47:98:39:5b:7b:df:
         c8:48:d9:fe:2b:f3:7b:8c:b3:89:e1:cb:4a:0f:4c:cd:c5:32:
         44:cc:f2:51:07:73:bf:06:81:88:2f:48:ef:00:1e:54:6b:78:
         cc:09:e7:b2:ef:5e:7f:ae:ea:03:cf:bc:d1:38:43:09:8c:18:
         ec:d3:36:7d:80:7c:30:da:7f:59:e5:af:7b:95:72:03:ca:ec:
         7c:a7:f6:19:bd:77:8a:c2:0c:9b:2c:82:36:2d:f6:2c:17:f9:
         e4:f3:70:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:59:04 2025 by rpki-client