Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9de043b-ac25-3bdd-8daa-fa73c48ab2c9.roa
File:                     a9de043b-ac25-3bdd-8daa-fa73c48ab2c9.roa (raw, json)
Hash identifier:          tN/wA3kYVlyYr++KyaZnOMF53uXqi+KEE6AR8jg6kqM=
Subject key identifier:   61:ED:6B:CE:20:DF:6A:A7:E4:04:5A:3F:C9:98:4C:68:9A:3B:41:5D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CC9A0C8A5991766B8013C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9de043b-ac25-3bdd-8daa-fa73c48ab2c9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.23.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:9a:0c:8a:59:91:76:6b:80:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=dc099387-be4d-45e9-818e-2c71be249777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:ac:65:ba:e5:cc:ac:ad:ca:52:c8:fb:26:
                    a5:b7:4f:79:4f:b9:6c:f2:b3:f7:82:eb:15:89:fb:
                    f7:fa:4b:b4:7f:93:9a:d5:5b:5a:ec:4a:91:fd:ec:
                    8d:b9:8f:0a:d0:7d:d0:27:84:ba:1b:7b:23:99:ca:
                    7d:36:4d:1a:22:3a:16:40:a1:47:b9:cc:dd:25:ff:
                    b1:b3:d7:dc:63:fd:73:7a:d3:d2:24:16:bc:9f:0d:
                    fe:87:1f:a2:46:09:7a:a6:4f:51:9e:af:2f:2d:9a:
                    c5:ba:3b:3b:61:04:62:48:d3:bb:ed:bb:95:7f:d1:
                    e0:e1:47:67:3d:e3:20:00:c0:7b:da:43:10:72:bf:
                    8f:ea:ef:33:e1:e9:80:aa:7f:95:3e:b4:94:ce:09:
                    85:69:09:4d:84:6f:7b:34:25:c5:15:1f:88:db:16:
                    bc:08:9e:df:54:22:7c:ef:e2:62:d7:65:60:75:0f:
                    ad:79:c7:ec:02:5e:17:7c:c3:bd:94:a9:45:68:f2:
                    52:1d:00:16:a0:23:95:46:1c:fc:1f:2a:4e:e8:95:
                    38:7d:63:82:08:11:31:77:6f:47:c9:9b:d3:02:4a:
                    76:b6:b2:5a:20:f1:f7:ac:be:04:55:6c:0a:3a:d9:
                    f6:d1:63:f3:82:e4:6a:ff:42:f6:1c:d6:37:a5:03:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:ED:6B:CE:20:DF:6A:A7:E4:04:5A:3F:C9:98:4C:68:9A:3B:41:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9de043b-ac25-3bdd-8daa-fa73c48ab2c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:1b:5f:84:80:16:2a:7a:ae:04:8c:16:60:5b:57:13:e7:
         ba:a2:ee:49:3d:4a:5c:48:ac:29:17:2b:b0:2b:80:fc:fe:1c:
         37:da:93:ac:8f:b7:aa:30:bb:c9:f9:f7:37:d4:36:6e:fb:7d:
         be:4f:fe:48:7c:ab:74:29:4d:a4:b7:af:43:20:cf:c1:24:7a:
         73:38:8e:b0:b2:16:bc:1d:8a:30:23:ea:31:44:ce:df:7b:1e:
         ba:67:22:d2:cd:0e:7c:01:c1:79:75:bb:f6:91:15:ba:3f:79:
         85:2a:b2:29:fc:94:5e:1b:c0:66:ce:61:f5:9f:b6:8a:9a:d6:
         99:aa:ff:e2:c8:3b:bf:8a:0e:0a:53:c8:63:a9:8e:bd:85:28:
         10:08:50:7e:6c:aa:5f:24:62:ea:c2:72:b6:fb:2c:b4:90:69:
         6e:80:6b:ab:df:20:6c:bb:30:c9:1c:42:1d:99:7b:29:02:d4:
         37:2b:66:d8:f7:49:c0:f1:10:a4:4b:a5:cc:46:c1:16:68:c2:
         95:27:3b:6a:e2:c4:b9:10:e8:dd:0b:8b:35:da:5e:28:ba:72:
         ba:9e:94:b4:9a:40:8b:af:94:1b:c4:88:72:25:ab:b2:9a:51:
         78:09:b0:a6:44:1b:0e:6d:e4:a7:0d:7c:28:9a:1b:3d:ba:67:
         08:de:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:42:49 2025 by rpki-client