Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f48f7d0-f512-3a80-a750-9efbad2c2024.roa
File:                     5f48f7d0-f512-3a80-a750-9efbad2c2024.roa (raw, json)
Hash identifier:          kDrIq4H+jpcZAitL13VTM4xLjSy5Q3wLky7xz9Utv84=
Subject key identifier:   B4:13:91:A5:B1:1C:BE:63:AC:15:17:05:30:0F:84:79:B3:8F:A7:3B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B5C6C7590846F382ECEAD2010
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f48f7d0-f512-3a80-a750-9efbad2c2024.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        173.25.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:75:90:84:6f:38:2e:ce:ad:20:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=f89de4e7-a69c-40cc-8031-eb84ee527d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0c:89:cd:28:21:26:53:6c:cb:3f:7b:d8:37:
                    ae:50:ca:9d:04:94:a9:ae:2b:73:0c:5a:fd:df:a4:
                    43:ed:5d:44:f1:01:c3:40:6b:66:17:43:9b:3b:da:
                    1c:fc:54:d5:85:68:23:ba:70:ee:9a:bd:12:d1:98:
                    69:0e:61:12:16:21:0c:62:58:91:6d:52:2c:60:c0:
                    7a:42:55:f6:61:45:93:91:f2:81:95:46:98:76:75:
                    ba:0b:fa:ba:af:a1:8f:53:ef:11:67:5a:67:08:f6:
                    c7:4f:c4:4e:7c:93:a9:42:e7:e6:5d:64:fe:b4:e9:
                    af:20:78:28:97:f5:03:7e:fc:ef:59:d0:f1:7e:9c:
                    cb:2a:1c:02:84:f8:f9:f9:5e:8d:7c:c4:01:ef:cd:
                    d8:ca:15:d4:23:eb:19:54:7b:91:96:8d:ec:a9:c5:
                    f6:3d:17:75:b0:80:c5:66:a3:30:9f:a7:d5:f2:78:
                    69:1c:e8:c8:05:94:5c:73:b6:4e:a1:40:0e:df:71:
                    e1:aa:68:ae:68:c5:0a:8b:4b:47:de:6d:ad:28:f2:
                    e6:83:13:28:d4:b8:d2:e7:82:66:8b:4a:33:21:45:
                    85:46:f4:32:40:40:01:21:ba:ad:b3:7f:02:d0:73:
                    86:6f:ed:65:00:e3:42:19:87:49:ff:9e:92:7b:2c:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:13:91:A5:B1:1C:BE:63:AC:15:17:05:30:0F:84:79:B3:8F:A7:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f48f7d0-f512-3a80-a750-9efbad2c2024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:39:9e:0d:f1:c4:56:29:ba:23:93:3c:21:cc:96:78:e8:6c:
         28:bb:6e:c3:b6:57:b5:22:5d:17:6b:2e:8b:37:87:03:4c:47:
         63:37:86:34:b7:39:d2:2c:36:0a:46:b6:8c:4e:92:bf:1e:ca:
         b5:6f:cc:e8:a3:88:27:d5:66:ee:cb:17:f7:66:b6:3d:b3:b9:
         dd:fc:cb:1f:ef:7d:2d:4e:b8:49:d2:46:3f:ec:f4:1b:65:df:
         6b:d7:ff:85:ee:5d:86:23:9a:06:3e:cc:86:0a:8d:70:a4:a7:
         44:3f:7c:87:a5:32:7f:5a:15:a7:5d:ec:13:a2:57:b8:e3:c5:
         7f:ff:05:27:de:0f:87:c1:9d:c5:ec:ff:15:5d:a7:0b:87:33:
         19:4c:e6:03:15:36:d8:fd:60:36:c0:25:23:6d:ad:87:38:b5:
         28:1b:eb:c6:26:f3:fe:99:51:f5:e4:8b:8f:5f:22:29:f2:8d:
         10:78:54:b4:e6:31:be:6d:c2:59:f9:1c:32:6e:47:02:2b:e8:
         55:41:c2:a6:eb:f8:46:20:96:bb:15:df:bd:86:e7:1e:0c:ff:
         d2:3a:8e:ff:54:e7:b5:44:cb:a3:b0:9f:61:14:c3:ce:95:fc:
         21:08:ec:d7:93:b6:d5:5e:38:1c:95:46:4f:cf:b5:d7:93:8d:
         0b:7c:07:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:35 2025 by rpki-client