Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89014442-49fb-37f7-8025-f1b2ce9c7d37.roa
File:                     89014442-49fb-37f7-8025-f1b2ce9c7d37.roa (raw, json)
Hash identifier:          frV2S1NJM4s4TgUmYgxaIhM4SkQ2jBJ3hLL2ARWjNqM=
Subject key identifier:   F1:A0:F8:9F:9B:A1:BF:F3:7D:43:E8:19:9A:59:EE:64:9F:D0:3F:C3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CCBBB64FF9BA31A8B32500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89014442-49fb-37f7-8025-f1b2ce9c7d37.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.28.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:bb:b6:4f:f9:ba:31:a8:b3:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a1def7ab-f715-4828-aab8-abbb413a9d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e8:9b:8c:18:8f:56:4f:17:ff:cd:07:3b:2f:
                    cf:71:49:35:ef:81:10:a9:a0:e9:5e:90:77:5e:05:
                    28:f5:26:20:58:eb:2a:48:1e:bb:7d:93:1f:1e:1a:
                    59:ac:23:2d:76:a0:cd:95:c5:09:c4:55:e3:06:1e:
                    fb:29:a5:6d:93:f2:ad:3c:24:4d:aa:fb:db:df:a5:
                    4e:58:08:2c:51:c9:53:49:d9:2f:2e:77:07:31:9f:
                    74:1b:04:c6:95:bd:ee:6a:41:50:53:69:29:5c:b3:
                    8d:59:35:87:2b:01:82:25:80:6e:79:c3:94:20:b8:
                    3f:ed:5e:67:4b:9c:ff:4f:2b:09:69:14:ef:b9:59:
                    72:be:c0:3d:da:40:7d:84:55:9a:40:00:0a:8f:3b:
                    97:32:e4:28:bb:85:0f:ba:80:00:ce:aa:c5:ca:13:
                    21:74:07:0f:32:f1:32:fc:5d:5a:f7:ac:4a:fc:26:
                    ef:21:ac:e8:3e:43:05:5f:70:2e:90:40:5c:ed:39:
                    e0:04:8d:7b:ad:38:75:ab:6b:0a:44:2a:ec:ec:4b:
                    40:46:b6:a3:77:57:cb:5a:07:6b:f9:0c:e8:a3:b0:
                    a6:d4:7c:74:6d:db:24:4f:21:da:7e:ae:61:42:96:
                    a6:e8:4d:e4:02:35:69:41:b6:19:76:f5:7a:3d:d8:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A0:F8:9F:9B:A1:BF:F3:7D:43:E8:19:9A:59:EE:64:9F:D0:3F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89014442-49fb-37f7-8025-f1b2ce9c7d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:37:b2:2e:69:fb:e8:e1:c3:a7:d4:68:d6:8e:6c:f9:7f:d9:
         47:67:e1:d5:3a:8e:7f:31:5d:ae:d2:93:29:0f:a5:16:e5:f0:
         24:01:a3:06:57:80:e5:16:c0:13:f6:2e:b4:be:0e:da:b2:14:
         6c:90:a7:49:3c:1e:be:d9:b5:92:bf:eb:47:3b:55:f9:a0:d4:
         8d:0d:00:71:43:0a:ef:8e:cd:ef:b3:2b:38:b0:10:f0:a8:2c:
         c1:3b:a4:35:a3:38:2e:1d:47:62:60:ee:de:f9:f4:14:72:67:
         2e:7f:7d:04:d9:b8:18:88:b0:82:1d:22:be:04:28:45:30:5f:
         84:e0:cf:9b:27:3d:8d:c0:73:86:79:d0:6c:1b:a7:2b:a0:dc:
         79:98:3b:c6:a6:eb:18:39:d1:ee:04:d1:94:18:bf:67:70:89:
         cb:7e:3f:af:46:64:0f:8a:19:2b:bc:e7:27:f4:7f:76:d8:8e:
         22:4c:96:81:ff:82:07:73:b5:9a:f6:c8:8d:e4:3d:0d:5e:ce:
         2b:00:15:8f:5a:c5:19:fc:8e:e1:2c:e4:dc:56:26:ce:d1:53:
         ce:94:06:8b:47:28:d4:6e:26:16:ca:77:b3:e2:3f:cb:07:20:
         74:b7:e9:cd:1d:9a:5c:ed:e2:81:4c:83:a0:8e:6d:5f:7f:35:
         65:37:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:16 2025 by rpki-client