Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84c32871-b2c3-3d5a-9d7c-cd932ded6ac4.roa
File:                     84c32871-b2c3-3d5a-9d7c-cd932ded6ac4.roa (raw, json)
Hash identifier:          B7Um5y6LRSUKSNPoNtAsR9h63qDjzG6eHJD/sqjda0s=
Subject key identifier:   47:B2:39:7D:A6:75:94:1F:8F:EF:5E:7D:72:C1:CA:17:52:A1:1D:BF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B79C9F432ED81D8D69E142220
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84c32871-b2c3-3d5a-9d7c-cd932ded6ac4.roa
Signing time:             Fri 10 Oct 2025 13:27:25 +0000
ROA not before:           Fri 10 Oct 2025 13:27:25 +0000
ROA not after:            Thu 08 Jan 2026 14:27:25 +0000
asID:                     19905
IP address blocks:        173.16.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:c9:f4:32:ed:81:d8:d6:9e:14:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 10 13:27:25 2025 GMT
            Not After : Jan  8 14:27:25 2026 GMT
        Subject: CN=d13a1e39-a527-4be7-abcb-931015653196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:77:32:53:b0:6c:57:86:ae:28:01:2e:f9:
                    b2:c8:23:52:87:fe:2e:50:d5:56:32:20:dd:88:a8:
                    6d:f2:42:6a:f5:94:7e:39:b5:d1:66:5f:c5:c5:f1:
                    31:a8:04:e6:24:6b:4d:81:8e:2d:9a:b6:0a:d9:11:
                    af:53:2b:34:19:0e:30:7c:af:55:c5:18:94:bf:3b:
                    c7:2e:2d:03:ef:60:ea:ec:a7:e4:11:89:e7:43:91:
                    e7:2e:fb:7a:4b:61:3c:94:be:e9:8d:8e:c3:42:59:
                    cb:40:ef:ac:01:d5:16:0c:dc:a4:6b:eb:b0:a4:16:
                    ec:2d:60:8e:44:42:80:30:e7:13:d2:b4:40:5c:0f:
                    30:bb:74:cf:c4:5c:51:53:6d:90:f0:5a:4e:ef:b8:
                    b6:02:0a:4d:4b:17:43:69:8a:13:e3:29:8d:40:ee:
                    bb:d4:5d:7e:23:a2:48:f7:f2:06:2b:f6:d1:a4:f9:
                    c4:20:77:b5:92:e4:4a:27:47:c5:7d:52:fa:7c:bc:
                    d7:5c:f5:63:92:78:d1:78:d3:ee:21:d8:4f:39:62:
                    d6:a5:58:d9:21:27:78:bd:fb:6d:1f:4f:88:05:94:
                    51:69:e0:d2:8a:48:62:14:71:b3:7c:23:c0:4a:16:
                    38:bb:47:a1:42:a4:7a:7b:2d:dc:8c:7b:90:a5:9e:
                    ac:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B2:39:7D:A6:75:94:1F:8F:EF:5E:7D:72:C1:CA:17:52:A1:1D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84c32871-b2c3-3d5a-9d7c-cd932ded6ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:57:ed:aa:4c:62:a7:06:9d:71:1a:ad:7d:84:e8:48:61:42:
         70:d2:b5:1a:f3:ea:00:f2:ee:b8:ff:c3:52:05:26:08:78:f1:
         79:6f:5d:e0:e8:20:2f:20:7c:cf:5f:51:33:2e:e7:89:1f:82:
         d1:d4:60:d4:15:01:c2:2a:18:fd:42:59:fc:e8:00:ee:85:44:
         74:ba:f5:44:25:88:5f:dc:d3:ab:d2:ae:40:70:d0:80:05:61:
         0a:7d:10:3c:d3:16:21:9b:26:1f:ec:d7:00:d9:8b:9a:86:de:
         0b:44:ab:b5:13:e1:3e:2c:c7:25:19:a0:73:f6:30:1f:ac:3f:
         16:b5:f9:96:54:94:ff:45:28:19:d4:b5:67:50:e7:fd:df:b4:
         25:02:50:45:d9:75:f7:05:ef:3a:be:98:54:8c:18:2a:ef:c3:
         ab:c5:b2:5f:20:d3:d4:68:0f:42:03:ad:6a:d2:66:19:07:bc:
         53:de:d3:da:53:f0:9c:37:75:55:db:18:62:0b:ca:52:18:22:
         56:df:f9:ce:28:63:34:63:98:84:aa:9f:c7:71:56:31:83:68:
         f5:6d:c9:20:8b:a0:cf:d2:5e:7e:57:ef:78:d5:7c:ad:ff:68:
         5a:a9:30:04:59:ee:a2:fd:02:c9:fb:bf:05:46:6d:9e:7a:2f:
         14:45:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:37 2025 by rpki-client