Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81d6a76c-02a5-3ec6-af93-78cb04b73af8.roa
File:                     81d6a76c-02a5-3ec6-af93-78cb04b73af8.roa (raw, json)
Hash identifier:          Oqt/I7tkHCVIzQfnX5u4c6eG1GZWFBS8V/3RU/xtL7Y=
Subject key identifier:   6C:F4:01:07:83:BD:4A:45:EB:84:94:F8:CE:67:03:C5:E4:8E:0D:CA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CCBC64534A47C66F18B930
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81d6a76c-02a5-3ec6-af93-78cb04b73af8.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.24.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:bc:64:53:4a:47:c6:6f:18:b9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c43439f8-5b70-4fd1-b774-a8d2298a9428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f7:79:47:e4:85:56:d0:f3:f9:e0:da:63:17:
                    ca:9c:b5:0e:89:60:1a:42:27:32:3f:0d:57:d0:29:
                    45:5a:a9:ca:c0:c1:12:21:04:c9:db:ff:84:b5:45:
                    f0:f9:81:20:38:62:72:ad:16:47:c2:62:4c:75:96:
                    98:cc:39:5b:78:bd:6c:47:2b:c6:7a:e7:af:bf:dd:
                    8a:0b:88:47:1e:53:04:a7:cb:d0:dd:4b:0c:c0:c9:
                    4f:39:6a:be:fa:f2:35:ce:87:0b:c8:a6:a0:9e:48:
                    b8:43:88:16:5e:7a:9c:42:56:e7:dd:56:2e:6d:7d:
                    f9:2e:9e:6c:a9:3f:c9:59:1f:ce:af:57:5f:07:ac:
                    44:dc:c4:41:64:58:ae:cd:d3:db:14:d2:d3:7a:2b:
                    75:3f:21:3d:e5:b3:ce:f9:3d:0e:0c:30:6d:3a:27:
                    55:3f:30:a7:31:e1:c1:28:db:26:3e:12:3e:c7:c1:
                    1f:da:cf:c8:53:ab:46:f2:d9:33:55:1e:d1:48:45:
                    92:35:fd:d7:db:63:29:c8:fa:05:f0:2a:4f:74:69:
                    ea:e0:09:fd:e3:21:87:ad:7a:5d:28:04:14:a8:1a:
                    d0:45:06:38:68:77:e8:47:2c:bd:57:47:25:a9:88:
                    2e:d0:a1:1c:72:6d:3e:1f:65:e7:ae:d8:c9:8a:c3:
                    dc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F4:01:07:83:BD:4A:45:EB:84:94:F8:CE:67:03:C5:E4:8E:0D:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81d6a76c-02a5-3ec6-af93-78cb04b73af8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:85:ad:a3:f0:74:e7:a5:48:33:be:ab:fd:e3:7f:a7:5e:27:
         41:72:b0:d5:46:7e:a8:00:86:a5:0c:79:2f:7a:1a:bc:77:4c:
         aa:4b:0a:81:32:ad:50:bb:3b:17:de:f6:02:be:5f:bb:dd:a5:
         4c:3e:dc:ac:65:17:48:0e:00:9d:f0:8b:b8:3e:a6:7a:3b:77:
         01:96:44:e5:ff:3a:66:cb:6c:2c:f4:81:0c:1d:1b:38:ac:57:
         5b:0e:ae:86:13:1f:ba:28:ef:97:52:55:f0:d8:e8:24:94:5c:
         0a:99:8d:c8:ae:63:be:fb:20:64:9d:d7:30:a9:77:d9:fa:3f:
         9b:75:0c:d3:4f:e3:04:ce:18:32:2d:95:91:57:e8:ac:a1:d0:
         5f:21:36:2d:54:11:10:78:81:25:47:14:9b:59:ba:d1:58:06:
         42:48:00:a9:e3:42:81:29:da:08:04:12:e1:8a:a1:55:25:62:
         2f:e8:e7:5d:5b:44:84:18:63:b3:d5:2e:6a:09:0d:0f:d8:ae:
         b2:9d:e8:8d:3f:53:23:c5:e0:c4:50:00:ff:b5:69:3e:8a:86:
         0d:cf:7f:45:74:d7:d1:f1:b5:21:46:66:b5:f3:c8:80:c8:b8:
         0d:28:ad:42:51:96:3f:a6:77:8d:03:6e:05:ea:ae:7e:80:b4:
         b3:5d:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:42:51 2025 by rpki-client