Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa
File:                     25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa (raw, json)
Hash identifier:          TNq5nMShTYeb/5SlOpYz9c1d2CoNghIMO+i0O2SV4mA=
Subject key identifier:   98:C7:3C:28:0F:0F:59:99:FF:D3:50:81:C2:5A:AF:16:EA:37:3C:BC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE56F84F837211876CEAE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.23.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:56:f8:4f:83:72:11:87:6c:ea:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=8ff597d1-be54-44ca-97e8-012e8727445f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:3a:89:2d:ef:b1:53:55:3d:8a:74:f7:b0:
                    59:8b:90:07:d2:be:b3:2f:b3:bf:12:4f:4c:80:2d:
                    8d:f7:25:c3:af:f5:43:4e:d4:9c:3b:4b:28:b0:15:
                    f3:5d:a8:70:cd:af:7f:ec:12:e2:04:33:56:74:02:
                    70:92:a7:6b:42:e1:a4:b0:7a:ab:de:d3:ec:06:4e:
                    17:8e:91:9d:cd:4e:13:90:2d:a1:91:59:80:56:50:
                    b9:74:51:23:37:58:b4:e2:f1:49:4c:48:46:27:85:
                    ea:d5:a0:a4:a2:2f:b1:df:57:19:a3:03:e5:c4:84:
                    90:31:62:48:ae:47:db:49:16:93:e9:44:16:5e:78:
                    31:a4:81:51:bc:6a:34:9c:75:c1:74:3c:89:d4:9c:
                    d9:7b:9e:8e:9c:04:fd:a2:97:f4:97:43:46:cf:d1:
                    7a:0b:e0:d8:b0:5d:37:90:b9:5c:8a:6c:a4:97:d9:
                    ec:b3:92:90:fa:8a:30:b6:d3:64:90:ae:73:72:07:
                    ae:fe:e7:40:e3:a3:11:2b:27:d5:48:68:0d:d2:72:
                    84:92:5d:f2:2b:5d:07:9a:e8:dd:1b:8a:71:6c:df:
                    aa:3a:cb:a8:c6:0d:f1:b3:59:fd:a8:37:de:75:d2:
                    c0:ec:72:a5:a4:d6:47:6d:91:14:ed:1d:4d:4a:a5:
                    08:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C7:3C:28:0F:0F:59:99:FF:D3:50:81:C2:5A:AF:16:EA:37:3C:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25a17b9b-c0ae-379d-86db-95e1d9cfc02d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:df:9e:30:54:00:dd:68:e6:97:8b:fe:79:14:55:54:c9:
         10:b3:38:92:f4:89:2b:22:de:a1:64:e1:21:4a:f0:be:9d:4b:
         7d:c9:89:dd:2c:c7:ed:5a:f9:a7:76:3a:2b:c0:63:b1:65:7b:
         c6:59:a8:a7:d7:1e:fa:e6:43:a8:54:40:54:1c:30:af:12:b6:
         34:bb:83:37:b3:34:ec:56:e4:8c:25:b4:6f:dc:b6:db:d1:7f:
         4f:8c:4c:8c:73:45:82:d7:e5:1c:9a:c6:c5:e9:6f:dd:e1:ce:
         47:5d:6f:58:ca:f6:65:3c:fa:c5:70:58:9f:8e:26:56:9e:c4:
         f8:c8:4b:08:df:1d:ef:be:66:d5:12:5f:96:f7:7f:16:96:8c:
         46:22:01:fb:34:33:26:d9:04:94:20:73:b5:99:1f:00:38:93:
         c9:50:5f:09:58:c0:a6:12:82:e9:0b:6c:82:3f:b1:ab:ca:d0:
         bb:e8:46:09:3f:0b:5d:b8:c7:1d:ec:d0:38:0d:8e:44:14:78:
         9a:90:1f:9c:cc:1f:7c:c8:d4:c7:0e:f3:b9:33:80:9d:64:b1:
         a0:21:ee:56:48:f5:a5:6f:3f:e8:8a:23:63:aa:d7:d3:0d:a9:
         4f:78:23:02:ea:fd:78:bc:72:94:ad:00:fe:32:8b:ba:f1:8a:
         96:3f:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:18 2025 by rpki-client