Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2bed913e-ceaa-33a5-9f1b-8d89f95ea31a.roa
File:                     2bed913e-ceaa-33a5-9f1b-8d89f95ea31a.roa (raw, json)
Hash identifier:          pNgrKiFz45wv1nDGxGHuDOsEBEFQY5qML7STjh/vJh8=
Subject key identifier:   16:7C:36:E4:04:20:02:61:4D:36:21:43:AB:E9:44:8F:8F:6E:D9:0E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE4760D462300B4E173200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2bed913e-ceaa-33a5-9f1b-8d89f95ea31a.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.30.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:47:60:d4:62:30:0b:4e:17:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=56cfa130-1335-4d2c-a6a5-46d22e584eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:74:b4:ad:60:6f:e4:f5:64:1a:b3:b3:f1:26:
                    71:8c:cf:9e:07:1b:3c:6e:50:3a:2c:47:cc:45:4f:
                    08:a8:9c:5b:82:5f:a2:e5:ec:c0:da:aa:85:ec:92:
                    26:60:f9:8a:61:b8:e7:c3:2e:38:4a:a2:28:f6:66:
                    0e:34:6b:3b:3c:7c:32:7c:c6:c7:c8:54:4e:a4:df:
                    56:e7:4c:4f:e1:e3:11:5a:53:06:38:70:3c:b8:a9:
                    80:ea:fe:f9:ba:8b:4a:04:db:53:49:cb:95:16:28:
                    70:6f:f4:de:cb:1e:5e:e4:f8:83:38:a5:b1:7b:ff:
                    b6:d0:33:09:fb:c3:97:dc:ab:4e:0e:a0:10:c3:fb:
                    f5:fd:2b:d0:62:6d:83:4b:da:7e:cb:8f:a4:2e:4d:
                    ff:0f:0f:0b:e5:58:cc:5f:9d:6e:f7:0b:8d:af:95:
                    16:e8:ad:22:9a:5e:5d:5f:c4:5c:4b:d4:fc:f6:78:
                    8f:7b:8d:b1:79:62:29:d7:d5:b6:af:ea:2a:44:77:
                    bc:f9:40:05:ff:a2:3c:2f:f1:2d:c8:f9:91:d6:38:
                    73:08:bd:60:63:d5:5c:cd:00:cf:51:77:e6:4b:ef:
                    46:7e:62:11:e7:f4:54:95:98:34:30:91:84:bc:34:
                    88:30:d7:3b:8b:92:cf:7e:bd:f1:ad:13:c7:6b:80:
                    1b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7C:36:E4:04:20:02:61:4D:36:21:43:AB:E9:44:8F:8F:6E:D9:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2bed913e-ceaa-33a5-9f1b-8d89f95ea31a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f1:dc:3c:79:b3:f2:e0:ae:d5:09:8a:78:62:c0:bb:82:9f:
         7a:e2:56:f1:86:80:d3:e2:76:95:38:e4:9f:3e:2a:bb:6d:db:
         36:3d:b5:4f:22:27:fd:bc:e5:67:71:12:ed:14:cd:97:87:eb:
         91:fb:15:37:79:cc:33:54:d0:6c:92:9e:e4:14:b1:92:0f:08:
         d2:53:3e:09:df:47:9b:d1:10:71:89:b8:21:54:7b:26:70:90:
         22:a7:dc:53:a6:06:5c:67:6b:59:75:16:db:4c:16:39:83:76:
         2d:c9:59:37:e7:62:49:52:1d:29:6c:ae:28:72:e3:08:c8:e7:
         c9:45:65:68:e9:51:e1:ae:3c:76:b7:98:71:3b:4c:23:44:0d:
         25:8e:b3:8f:2f:9d:3f:ae:71:8b:d8:1b:98:10:e1:95:82:2c:
         0a:9c:ef:1e:06:24:8c:1b:80:ee:44:0c:17:64:e6:f4:89:d9:
         a7:e3:30:29:da:48:26:43:6a:11:06:18:58:94:1e:d3:bd:8d:
         37:8c:e3:91:c6:fe:e6:38:50:17:50:60:a2:41:de:9e:b9:cb:
         58:4f:57:3b:ed:c2:fa:cc:6b:12:16:d7:7a:56:0f:34:dd:01:
         63:ff:b8:e9:69:d6:43:87:2e:1f:68:4b:83:18:4d:b5:9d:1c:
         d5:8d:96:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:35 2025 by rpki-client