Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa
File:                     1af58f65-539a-35e4-8e11-237912be598c.roa (raw, json)
Hash identifier:          Bm4edg010LD43rvP9OA56scrDZrGI6LQa/Q9P6rZH28=
Subject key identifier:   F3:A5:27:D0:70:23:87:F4:3F:B1:77:9D:F6:F4:A5:21:83:50:AB:96
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CCADF10AC92687D2BEDF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.18.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:ad:f1:0a:c9:26:87:d2:be:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0babf933-0b61-4dd3-8916-02ce84c457ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:88:0d:9f:d5:33:8a:5e:f5:3f:52:7d:f0:f9:
                    e7:23:99:dd:20:aa:c4:28:69:58:6c:da:6e:e7:c6:
                    1c:17:b8:1f:88:87:cb:ad:2a:91:4f:21:77:bb:89:
                    69:e0:96:d3:38:49:b9:47:16:82:9c:4d:24:80:46:
                    70:79:42:cc:dc:13:de:52:07:22:df:c5:a0:1f:22:
                    f5:49:ac:c6:8f:36:3c:ac:38:09:39:60:67:b3:45:
                    19:bf:d7:9a:42:4f:04:b0:ed:6c:97:8b:a9:ed:6c:
                    05:11:44:5c:b1:7f:9e:06:8b:35:37:02:f5:74:db:
                    76:03:2f:82:e0:f3:a7:62:da:aa:3d:80:a2:cd:01:
                    94:75:67:bc:77:68:da:94:04:cf:1e:22:62:b4:55:
                    db:01:8c:44:31:61:5c:ba:0f:b9:b1:85:a3:3f:c1:
                    ec:22:48:29:d2:74:7a:2d:fd:e4:db:e6:ef:8f:19:
                    08:fb:63:00:7f:17:41:c7:ca:db:af:2b:70:b2:02:
                    da:8b:d9:77:07:e1:05:e2:bb:c9:12:92:34:8a:d4:
                    7f:05:0b:81:f7:a4:54:3f:3a:9e:a5:16:21:3c:1b:
                    0f:bf:64:e7:6c:b2:2b:80:ce:5d:ed:f6:93:a7:4b:
                    37:c4:62:2e:6b:64:11:91:a0:fe:bf:f3:4a:79:95:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A5:27:D0:70:23:87:F4:3F:B1:77:9D:F6:F4:A5:21:83:50:AB:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:fc:2f:b5:49:05:66:bd:1a:35:53:4e:ae:0b:6b:6f:7f:6c:
         07:6e:cc:3b:99:a9:0f:39:8e:2a:7a:6f:24:22:30:27:32:7a:
         36:c9:36:a3:c8:3f:42:98:96:9b:3e:d8:de:ce:e3:8d:59:1a:
         16:4e:d7:73:8e:2b:55:5f:9c:be:c8:da:cb:1d:84:08:a1:9b:
         33:cc:cb:9b:16:2b:ce:a2:1c:11:2a:85:33:10:f7:c3:44:11:
         ce:93:79:94:81:a2:0a:ab:33:54:7c:3f:a9:7b:20:73:b8:02:
         3b:3f:fd:ae:a1:ee:f5:bf:6b:0c:b3:52:a8:77:84:6a:00:18:
         b5:70:3e:33:ed:73:41:4b:14:dc:c4:9f:c8:24:fd:d3:02:03:
         4f:aa:4f:04:b1:9c:f0:84:5c:3f:26:82:dd:83:c5:1b:35:3c:
         1a:a0:26:3f:dd:84:0a:10:39:fe:f4:8d:c8:5d:08:be:24:09:
         d6:82:3e:48:60:1b:04:90:e5:b0:4d:6f:1d:c0:a6:dc:f5:e0:
         f8:bd:73:70:70:5a:57:b8:0b:cd:b1:db:8a:3f:c2:aa:19:38:
         a5:51:48:c5:1e:00:f7:da:18:8b:63:ee:69:9a:ff:e5:fd:ca:
         47:bc:a8:0b:52:3a:f3:d5:bb:22:ac:4b:da:27:25:b7:a1:5b:
         27:89:0f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:51:50 2025 by rpki-client