Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4733d408-47e0-3d55-83ee-05527bf37771.roa
File:                     4733d408-47e0-3d55-83ee-05527bf37771.roa (raw, json)
Hash identifier:          K6GNiwycg+qL1wrMGbB38xfNHTexuCRDlSfXCU3z7vk=
Subject key identifier:   19:C9:10:39:ED:CC:FD:17:70:5C:D0:D7:EF:0F:D4:A3:9E:C2:50:37
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B62023A00C23090B1BBDEEC80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4733d408-47e0-3d55-83ee-05527bf37771.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        173.19.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:3a:00:c2:30:90:b1:bb:de:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=67faab4e-1d16-497d-852c-447e1a5a2dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e7:61:0b:22:e3:e1:3c:d6:a2:34:33:5f:fc:
                    7e:0f:b3:9f:f0:29:0b:14:f8:9d:c6:a5:ae:2c:0f:
                    74:08:28:00:bf:9e:df:4e:1a:a5:53:fb:3a:e2:12:
                    6d:46:1f:48:3f:53:71:09:ff:dd:ad:a5:6a:d8:29:
                    ed:e2:d8:03:a2:35:87:62:6e:cc:13:1c:8d:52:be:
                    08:63:08:a0:4e:a1:8d:4e:f8:41:fa:22:d8:ab:1e:
                    99:16:6e:8b:87:f5:c0:bb:80:75:62:7c:f6:f1:ad:
                    c0:31:b0:bc:b0:c7:32:9c:80:5c:5b:60:cf:6b:db:
                    01:39:78:ae:a6:7c:6a:a7:c3:a2:92:95:88:44:2c:
                    2f:4b:2e:d0:0e:c3:90:fb:1a:2d:ae:1e:49:bb:83:
                    af:df:6f:13:0b:b4:8b:85:2c:40:f9:71:b9:29:65:
                    b6:23:ea:bd:57:e2:b7:bc:86:a1:e1:e0:e5:87:4c:
                    91:be:d3:74:68:8d:da:16:62:e9:ee:3d:d4:0b:24:
                    4b:fc:41:3f:9a:10:31:9c:0b:fa:65:af:71:7d:85:
                    d0:4c:4b:68:ac:8b:fd:8e:40:92:d2:f6:87:e2:d5:
                    9f:b2:5d:02:ac:f5:20:24:f7:f8:f6:33:dd:47:8f:
                    4d:76:1f:e6:b1:f2:21:dd:dc:dc:a6:91:b3:d2:23:
                    c3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C9:10:39:ED:CC:FD:17:70:5C:D0:D7:EF:0F:D4:A3:9E:C2:50:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4733d408-47e0-3d55-83ee-05527bf37771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d4:f7:26:25:be:63:96:44:e4:61:7c:06:05:53:62:1a:46:
         bc:8e:f5:c6:ec:1d:91:96:44:8e:e7:df:31:3d:b1:bc:70:18:
         e7:58:8c:4b:1b:e6:09:29:d6:50:85:7c:90:a0:8f:dd:31:59:
         cb:1c:96:0d:1b:64:4b:0b:c9:bd:f0:16:49:d0:97:75:c1:91:
         41:f1:09:44:ac:6e:23:49:56:bf:66:bc:a4:17:12:4e:62:85:
         4f:19:29:c0:e3:09:af:79:56:f7:d3:4e:d6:1d:e8:9f:32:b4:
         24:4a:7b:e9:2e:64:94:62:46:10:0c:01:db:73:69:b0:d2:ee:
         ea:3f:4e:a6:1b:5a:0d:ea:fd:85:c1:ad:d5:52:2b:9c:a8:fc:
         70:6d:67:a2:e4:cb:7f:d4:5a:12:f7:db:e6:4f:99:21:5e:5e:
         7b:94:cb:31:6f:51:df:ee:d7:6c:50:71:ec:cd:17:a5:63:c3:
         ba:f1:a4:eb:0d:74:c6:1c:18:5e:7c:85:42:f0:2b:cf:ca:13:
         32:8d:39:41:e5:c1:54:ef:54:ca:8d:d9:4b:be:04:7b:30:ea:
         63:f3:06:09:45:55:71:ef:f3:7f:9e:49:c4:e5:fb:78:58:85:
         a8:59:7b:ac:51:27:7a:82:d7:00:14:37:aa:54:07:82:0e:d5:
         f6:2c:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:56:25 2025 by rpki-client