Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c43c01c-6469-3a83-9e10-dab70df62829.roa
File:                     6c43c01c-6469-3a83-9e10-dab70df62829.roa (raw, json)
Hash identifier:          xenn/d8Fqwg0tzYO/q9Me03V/9Uao3vZsjYmCRpeaAU=
Subject key identifier:   25:A3:10:67:D8:CB:D7:7B:DF:0A:AC:F9:7F:C3:69:E9:23:62:22:B4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B56D7284400CE0738B2C6D0C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c43c01c-6469-3a83-9e10-dab70df62829.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        173.24.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:28:44:00:ce:07:38:b2:c6:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=5d0f5d97-5870-454a-b9ae-4563248bac16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:36:a8:32:23:1a:4f:de:80:7d:d0:5f:d1:28:
                    aa:b6:b1:00:98:32:8b:26:b4:b8:96:3d:a7:2d:db:
                    9c:0f:00:25:38:ee:8b:31:47:88:41:0a:52:fd:46:
                    39:2b:3c:49:6e:02:7d:2c:4c:76:76:f2:ad:8a:b5:
                    f1:d6:ab:e8:bb:4e:f7:4d:b8:9d:11:12:a6:6d:ab:
                    f0:79:e4:17:f3:8a:1e:06:a0:c4:1f:b8:57:55:a1:
                    db:b7:fc:30:3b:80:88:e7:b1:27:92:0b:e0:26:44:
                    b3:96:59:4e:fe:3d:97:31:6b:15:b9:23:60:15:87:
                    aa:ac:f6:20:6d:af:b8:46:da:13:c8:78:58:ce:49:
                    63:24:93:65:74:c9:b5:ca:44:f2:a2:0d:54:d5:97:
                    9e:19:f9:b3:7b:66:f0:aa:df:b3:07:b6:bd:15:63:
                    36:a5:88:a6:0f:25:d0:79:a7:68:68:35:13:e7:70:
                    ed:c8:a0:f2:c4:21:18:0c:3b:cb:73:23:ac:20:45:
                    b1:98:88:93:37:67:2f:df:a5:3b:34:6b:1f:bc:44:
                    51:43:2d:84:e2:6f:41:dd:bf:6a:f3:65:54:82:51:
                    2b:6d:e6:05:23:be:9f:5f:a2:b2:b3:f7:0c:1b:38:
                    c4:95:fe:08:96:64:c6:01:32:81:f4:11:31:eb:90:
                    c9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A3:10:67:D8:CB:D7:7B:DF:0A:AC:F9:7F:C3:69:E9:23:62:22:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c43c01c-6469-3a83-9e10-dab70df62829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:11:cd:ab:06:a9:e3:e1:1c:65:d8:57:ad:96:77:4d:a2:83:
         e0:82:8e:c4:57:75:7a:50:d1:6c:93:f7:0d:cc:ba:ce:1a:77:
         7c:fc:10:d8:22:62:b5:43:48:ea:57:67:e8:d2:58:db:c5:86:
         cd:81:08:55:5c:03:8e:e7:47:c3:6c:6b:8f:8d:f5:c0:0c:3a:
         7c:d1:92:70:b8:8b:a0:e3:b3:10:4b:95:9f:bc:22:80:80:51:
         e2:ac:71:48:a0:c2:59:28:cb:c1:d7:f8:c2:86:88:d6:b8:06:
         8e:b6:ca:68:b2:8d:6b:f4:c5:61:40:eb:24:e4:23:14:83:27:
         64:49:86:13:be:5e:dd:2a:ce:9c:7f:d7:99:79:08:8f:7b:94:
         67:f9:9f:51:aa:57:c2:96:76:29:cb:e0:72:41:ad:35:91:84:
         f5:5c:81:00:f0:7c:46:a2:e3:09:8e:e8:6a:4b:bb:bb:86:3e:
         ca:f7:50:37:b6:12:27:39:1e:26:e8:8f:60:2d:a7:17:10:ac:
         8a:83:59:b7:8e:8f:1f:97:85:2c:c7:37:47:07:b2:dc:eb:21:
         70:e5:1f:5d:df:fe:6c:d7:ca:9d:41:87:d1:29:e1:30:cd:aa:
         d9:ff:de:22:13:4f:4e:0b:99:4d:a2:c6:3e:dd:82:b4:8d:53:
         24:83:01:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:42:47 2025 by rpki-client