Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/286f0f4e-87f6-3e3c-a554-5ef33c1e934b.roa
File:                     286f0f4e-87f6-3e3c-a554-5ef33c1e934b.roa (raw, json)
Hash identifier:          rR839Zg4AybyfpjXItDNCH0fcDr0fbCi7Z7myhz6Wog=
Subject key identifier:   1F:13:13:3F:66:F4:A0:B0:6D:48:9C:20:40:94:6E:AD:23:32:23:F7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B475C341FF2C86DF5E586D700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/286f0f4e-87f6-3e3c-a554-5ef33c1e934b.roa
Signing time:             Mon 22 Sep 2025 11:55:52 +0000
ROA not before:           Mon 22 Sep 2025 11:55:52 +0000
ROA not after:            Sun 21 Dec 2025 12:55:52 +0000
asID:                     19905
IP address blocks:        173.25.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:5c:34:1f:f2:c8:6d:f5:e5:86:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 22 11:55:52 2025 GMT
            Not After : Dec 21 12:55:52 2025 GMT
        Subject: CN=1d274fc2-d84b-40ce-bec4-2c11fd92c798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f4:14:2b:6e:35:0e:5a:39:d4:eb:1f:fd:b4:
                    56:ca:34:cf:e9:28:ef:17:62:6f:cb:6f:bd:f2:2a:
                    1d:91:a4:fc:8d:ed:6e:b2:60:5e:43:63:e1:04:ad:
                    35:fc:43:a5:89:ef:a1:21:10:2e:19:d3:f6:f4:da:
                    d8:c4:f6:d1:1c:c2:54:55:e0:40:7e:f5:d9:18:80:
                    10:97:67:35:b8:af:4c:8f:69:79:f3:bc:fb:62:ce:
                    f4:cf:27:2e:64:13:7a:ba:a7:3e:e2:22:95:c2:b0:
                    db:6b:ec:be:5c:09:f2:fb:dc:7f:69:9c:3e:ce:c7:
                    66:e7:82:75:b2:cc:0c:0d:c9:91:69:7d:62:cb:c2:
                    59:78:e8:b8:59:fb:13:70:ef:dc:11:e5:f9:95:9e:
                    f0:fa:6a:01:3c:67:02:09:78:ab:d5:68:84:20:97:
                    3a:9f:a0:d3:a5:ef:1a:26:56:9d:33:21:f8:78:37:
                    8c:67:f5:c6:27:55:10:cb:e6:5b:ba:5d:81:e0:aa:
                    08:ca:6a:34:ce:f7:82:2d:29:64:94:80:af:fd:c7:
                    06:90:3b:a6:7c:6e:fe:92:c7:37:04:85:e9:96:9a:
                    74:77:a3:70:59:9a:f0:2e:7b:0d:45:ea:1f:b5:6c:
                    81:43:ee:fd:28:dc:30:ac:4c:a6:5d:06:af:7f:bd:
                    55:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:13:13:3F:66:F4:A0:B0:6D:48:9C:20:40:94:6E:AD:23:32:23:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/286f0f4e-87f6-3e3c-a554-5ef33c1e934b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f8:3b:65:ad:41:cd:cc:c9:c7:bf:74:dd:51:2b:4a:49:7e:
         f1:a2:ca:1a:10:bb:4c:6a:f4:75:08:cc:a3:2c:2c:50:37:ff:
         77:de:6b:d9:11:8d:b1:c1:f2:ae:15:ca:44:6f:87:0b:67:19:
         86:bc:65:67:7f:00:ee:f2:9f:30:26:2e:d6:5c:72:d0:ff:e1:
         22:f8:49:3c:aa:57:29:7d:84:1e:8b:62:4b:47:7c:de:56:87:
         fa:22:f9:07:c2:4f:11:51:3a:e0:b0:df:72:04:93:42:00:8a:
         e2:81:95:f6:32:34:dd:a8:2a:71:83:ba:25:5f:bc:9c:5a:48:
         3a:e9:c9:d0:1f:a2:82:7e:93:d8:ab:ff:84:f2:5a:7f:5a:81:
         8b:7a:de:5c:7b:73:c1:50:81:78:26:2d:7d:cb:d3:49:65:b6:
         d4:51:a5:e6:21:e2:07:23:dc:16:ad:71:d5:d9:f8:0d:16:4e:
         23:33:ce:0c:2f:47:64:f3:4a:63:8d:bf:05:92:ca:02:a9:41:
         2d:28:65:1d:c4:22:62:a6:ab:f8:ac:79:c6:90:b4:a8:6c:2e:
         9c:64:b3:16:16:03:cb:bf:c1:8e:b9:eb:b9:9f:ec:56:61:c8:
         ec:9f:6e:c3:84:ed:5e:1d:e9:40:39:cd:5a:29:dc:0c:9d:e9:
         9a:21:7b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:42 2025 by rpki-client