Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/959a8cc1-4b38-31a2-89a4-fe6a484542e4.roa
File:                     959a8cc1-4b38-31a2-89a4-fe6a484542e4.roa (raw, json)
Hash identifier:          gPZzbDQi1ZdfxrkP9OvEPnAgB8rs96eCLsVw02a9X/8=
Subject key identifier:   DA:E0:92:61:12:2E:CC:13:14:AD:63:13:6D:4D:07:D5:73:B2:33:D5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B62023284730A5CAC76CAC800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/959a8cc1-4b38-31a2-89a4-fe6a484542e4.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        173.29.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:32:84:73:0a:5c:ac:76:ca:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=7fe35f17-39f8-4d13-8050-d05cc0f05246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:25:24:3f:02:75:c1:a0:02:00:13:d9:e7:
                    be:6b:6a:f3:33:04:7c:d2:06:63:ef:b9:c9:27:91:
                    40:e0:10:21:df:42:90:fa:70:14:32:16:26:00:17:
                    1b:ee:48:a3:77:be:e7:1f:2a:d5:a7:00:27:4f:ec:
                    7c:df:31:5b:df:82:7e:4d:30:47:a4:91:a5:eb:32:
                    38:21:35:98:cb:e9:dc:b4:73:57:b8:99:1f:45:25:
                    47:28:6e:b9:69:cd:37:19:88:cb:cd:e2:0f:bb:cf:
                    c7:4f:04:0f:5c:c0:a8:ed:3b:96:4a:4f:0e:24:31:
                    cc:c1:f5:d0:75:8b:a3:a4:6d:a6:47:d8:e8:ea:85:
                    dc:de:07:36:d3:7d:00:60:4e:da:39:bf:1d:0b:c9:
                    86:5c:0c:66:a6:03:12:ed:15:20:8d:78:a2:ca:c9:
                    2c:1b:b1:17:aa:fa:5c:6a:6a:70:0b:d3:a7:43:e9:
                    2e:49:c4:43:ae:63:4f:0d:54:f2:2a:34:c8:e1:36:
                    87:60:22:79:84:a9:54:fb:f0:f8:da:1f:2e:dc:6d:
                    cd:71:c0:80:85:fb:ea:8a:3b:e5:a7:8d:52:88:3e:
                    7a:68:4a:d2:8f:24:f9:dc:11:eb:01:96:27:ac:bf:
                    c1:be:0f:52:13:5b:7c:ef:4b:f7:fb:9b:24:42:55:
                    a0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E0:92:61:12:2E:CC:13:14:AD:63:13:6D:4D:07:D5:73:B2:33:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/959a8cc1-4b38-31a2-89a4-fe6a484542e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b0:06:e8:b1:92:d2:e1:a5:63:29:7f:6f:17:91:52:9d:99:
         cc:f7:33:9f:17:8c:30:1b:bd:89:56:ab:77:b9:26:cd:3a:08:
         a0:c7:c9:e9:5b:7b:c3:a5:95:f3:58:ae:ca:71:b8:14:2a:e6:
         3d:59:98:88:fe:bf:af:53:6e:90:09:19:96:bf:d5:17:21:ee:
         38:42:a3:a3:17:42:07:92:2c:20:09:bb:4c:85:0c:19:14:62:
         9e:ac:68:f4:45:1d:bf:de:49:da:84:d8:9d:fa:5c:e2:30:20:
         47:68:c3:9e:ae:1b:c4:2b:5f:3c:c1:05:38:a3:bf:2b:9a:5a:
         bd:f8:95:e5:f5:74:1f:2c:c0:ea:bf:9b:5d:bd:58:6c:6d:4f:
         ae:d8:97:06:1f:9f:9e:2d:09:cd:72:31:84:22:4b:fb:c0:cb:
         56:e6:1f:1e:aa:8c:91:ed:da:df:f2:2e:de:33:02:6a:17:9a:
         98:d0:75:f4:e9:fe:bf:7b:75:21:b6:a5:16:d2:10:7b:d1:8a:
         cb:28:59:9e:35:ad:5b:1e:50:88:6f:ea:9b:ab:ee:8d:3b:2c:
         de:fc:ee:01:78:d6:4c:9c:bb:bd:4e:b0:4c:78:9f:c8:55:ef:
         80:f2:11:fa:65:79:37:55:d4:7a:4c:42:55:10:23:88:bc:e0:
         28:11:bb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:25 2025 by rpki-client