Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35d93c4a-0501-3baf-b877-149435f20d06.roa
File:                     35d93c4a-0501-3baf-b877-149435f20d06.roa (raw, json)
Hash identifier:          gED+ZMyTYZ/jufXeMIG8bCEHyg3PZcrffj2wEqULQN0=
Subject key identifier:   66:60:F2:96:0B:A6:84:67:EC:A9:E7:BB:52:29:D2:7C:C4:40:3B:9E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B475CCC7744FE009429F20F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35d93c4a-0501-3baf-b877-149435f20d06.roa
Signing time:             Mon 22 Sep 2025 11:57:04 +0000
ROA not before:           Mon 22 Sep 2025 11:57:04 +0000
ROA not after:            Sun 21 Dec 2025 12:57:04 +0000
asID:                     19905
IP address blocks:        173.25.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:5c:cc:77:44:fe:00:94:29:f2:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 22 11:57:04 2025 GMT
            Not After : Dec 21 12:57:04 2025 GMT
        Subject: CN=64de1044-06e6-4a6e-8cb0-09694062a43f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3d:ce:b9:9f:4b:fa:32:35:25:00:de:c8:7e:
                    d6:16:04:c1:c4:df:27:c5:31:c9:9d:bc:39:37:ca:
                    1e:00:b7:94:70:eb:ab:21:0b:ee:0b:24:82:2f:1c:
                    9b:42:d6:5a:c2:94:f0:9e:e4:25:fc:fc:e6:44:7e:
                    f2:f0:93:b0:c5:5f:9f:5f:93:9a:da:a9:50:1e:d3:
                    8c:4c:5f:cd:6e:36:89:37:13:3a:1d:e2:a1:c7:40:
                    cf:9b:c9:6f:27:d2:19:16:61:ec:0e:aa:07:1a:71:
                    2c:82:5b:61:0c:ea:d6:9f:98:9f:a0:01:60:03:d7:
                    1a:24:6d:d4:3d:68:48:e4:ea:03:ad:85:2e:49:7b:
                    b6:38:01:d8:22:b0:db:cd:93:b8:ad:fa:89:da:60:
                    03:bd:29:fe:d6:1f:2b:c1:01:0f:ee:7d:35:06:f8:
                    55:c9:60:7e:b2:a9:de:5a:ea:50:1f:91:df:c0:17:
                    8e:ed:9c:3f:ab:51:d8:ec:e2:6f:e7:05:25:7b:de:
                    18:d0:fc:1c:b1:27:64:4c:7c:5b:17:2c:2e:d5:e6:
                    f3:2d:ce:35:73:4e:48:ae:4b:ff:2f:81:70:6e:29:
                    9c:cd:aa:65:c7:70:a7:3f:4f:db:bc:5a:bc:f1:ef:
                    75:40:a3:76:bf:50:5b:b1:6b:86:fc:a6:e6:eb:b8:
                    79:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:60:F2:96:0B:A6:84:67:EC:A9:E7:BB:52:29:D2:7C:C4:40:3B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35d93c4a-0501-3baf-b877-149435f20d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d8:69:f9:36:df:a2:33:8e:af:be:0d:b8:f9:7b:05:92:8e:
         f0:58:88:38:75:e0:db:87:46:74:b9:75:9b:e0:de:5f:7b:80:
         55:0d:52:43:a7:f6:d8:0b:76:bc:bc:2e:c8:73:9e:bb:51:d4:
         4d:b6:fc:5d:13:bd:42:85:b0:ab:a0:5a:6b:91:8c:a4:da:2c:
         36:f2:a8:56:1b:41:95:99:70:f0:3f:8b:a4:56:c7:fd:10:fc:
         53:8b:34:e8:70:b8:59:e5:78:58:67:d0:cf:81:44:04:94:ec:
         c1:31:7d:f5:60:7b:cd:bc:8b:9a:08:c5:92:a6:f3:fa:2f:c0:
         5c:1b:10:41:e8:74:7c:d3:3e:7d:de:e7:91:07:a5:66:fa:c4:
         ad:32:70:af:c8:f1:d4:47:94:c0:9e:d8:ca:ab:e2:67:6e:1e:
         88:ce:60:0c:a8:f7:78:10:33:a1:d3:8b:8c:97:8f:6e:2c:73:
         88:d9:83:98:0d:24:3a:af:72:e2:0b:89:8d:2d:f4:c4:69:f8:
         78:49:99:39:c5:69:f4:48:ed:47:19:c9:de:e1:55:20:fc:f7:
         31:71:72:d0:3e:1b:24:e6:77:b9:5c:79:41:e0:3b:9d:c4:f2:
         33:ea:3c:0a:5d:d4:d9:5b:a3:89:45:d0:07:9c:b1:c5:8a:a7:
         0e:99:01:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:34 2025 by rpki-client