Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a94e888-7e7c-33ac-9383-b428e159a9cd.roa
File:                     4a94e888-7e7c-33ac-9383-b428e159a9cd.roa (raw, json)
Hash identifier:          0G99/Gt3QIlwcFLFY82I6IV/N2VPiUzy7QmrVgx5u7s=
Subject key identifier:   B5:F9:59:81:40:C4:CE:72:4E:4F:CF:03:90:C1:27:BD:AA:30:38:01
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6201FE2EECACD7CB229AA120
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a94e888-7e7c-33ac-9383-b428e159a9cd.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        173.16.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:fe:2e:ec:ac:d7:cb:22:9a:a1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=b3c440c2-7e99-4e1c-b1b3-d371dd6c826a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:db:4e:1d:85:4d:56:7e:a9:2c:11:78:44:
                    78:da:4b:34:57:95:3d:26:3c:92:3e:ae:cb:28:b8:
                    24:2e:21:19:a6:1a:6b:5a:85:13:d0:59:53:42:82:
                    f0:3b:d9:53:4f:73:3f:38:87:af:c5:47:c0:43:4e:
                    10:79:c4:69:bd:48:f8:bd:46:af:3c:9d:f3:4c:58:
                    1f:77:94:58:ec:07:b5:dd:8a:fd:7c:78:f0:74:f5:
                    ec:f2:cd:a5:47:01:46:ae:1e:67:4e:a0:aa:2e:4c:
                    60:77:72:93:6d:81:5c:fe:33:bf:52:72:00:5a:0c:
                    34:99:e9:25:05:5a:33:47:a9:8f:16:0f:3f:64:b3:
                    f0:77:c0:4a:09:96:0c:24:f3:f8:47:a5:4a:33:86:
                    3e:2e:ce:31:d5:29:67:92:db:95:1c:2e:ae:73:e5:
                    e4:85:23:fc:a4:13:2e:f3:04:68:d2:98:0a:35:a3:
                    c7:83:f5:02:69:5e:c4:e6:ab:d4:58:48:bc:0e:e8:
                    5e:a8:36:8d:e7:05:45:40:90:a2:70:78:b0:5b:36:
                    5b:82:11:25:94:d1:84:de:e3:33:23:8c:7f:6f:ce:
                    2a:e5:d9:29:3c:4c:06:cd:80:a3:16:2d:22:16:88:
                    e3:d8:b4:24:73:c0:0a:80:9f:8c:25:fb:f3:8f:3a:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F9:59:81:40:C4:CE:72:4E:4F:CF:03:90:C1:27:BD:AA:30:38:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a94e888-7e7c-33ac-9383-b428e159a9cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:80:94:3d:27:50:da:36:2c:eb:31:01:53:c1:53:66:b4:a4:
         43:15:72:18:3e:01:e1:b8:93:c3:b7:cf:c0:d5:74:e4:e9:1d:
         c9:97:d7:8b:a0:6b:47:e7:de:03:6b:de:39:38:64:38:21:b0:
         8b:a5:31:f9:47:8a:92:12:31:30:67:1d:8e:fc:ae:0c:d0:5c:
         7c:cb:fb:b8:2d:45:86:ab:63:cb:aa:18:75:d6:44:67:dc:79:
         89:11:c2:cb:1e:97:db:af:df:a6:04:08:a7:63:0a:38:d5:9d:
         40:04:77:2f:b0:1c:79:f8:f4:81:49:a9:39:62:00:b2:d6:15:
         f1:55:c1:a4:5c:7a:17:4c:64:6d:9f:26:e0:40:e7:ca:8f:c9:
         2b:88:27:b6:fa:b1:25:21:c3:93:aa:1c:ab:e9:9a:2e:0b:df:
         47:4c:4a:24:55:38:c3:73:37:73:12:04:4b:0c:f5:ca:1b:3d:
         74:02:51:f4:2c:34:46:cc:5a:47:37:5d:0e:1d:ac:9f:7f:29:
         ff:c4:00:a9:45:ce:c0:79:d3:06:ed:0a:af:da:f4:96:94:4c:
         84:d2:af:8a:b9:b7:7a:c3:c8:8e:20:d4:0d:5e:3d:45:22:67:
         4c:39:8b:dc:d0:53:c6:e1:ff:d0:bc:d9:61:70:91:7b:be:82:
         cc:d4:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:28 2025 by rpki-client