Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3cd6359-f339-393c-bf6c-d1d473b04ec1.roa
File:                     b3cd6359-f339-393c-bf6c-d1d473b04ec1.roa (raw, json)
Hash identifier:          zrav6fpaMzqsHqIkqwFexy6sf3/7F8xWXw/ZZKhI2tE=
Subject key identifier:   E5:8B:57:08:99:66:C0:1E:71:0B:1F:50:93:75:E3:16:24:B5:6B:AF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B66320970D90556360E6E0980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3cd6359-f339-393c-bf6c-d1d473b04ec1.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     30036
IP address blocks:        173.18.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:09:70:d9:05:56:36:0e:6e:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=8aae8315-a7fa-4e19-b0ac-2deb7c83561e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:84:24:58:dd:73:05:cd:fe:d6:fc:f4:99:
                    57:55:d4:36:d4:5e:74:fe:66:d6:af:8f:13:37:82:
                    38:d7:4c:26:b6:a1:5d:43:ab:1b:fb:c0:d1:c2:b2:
                    86:27:bf:2a:fb:49:36:bd:43:3d:7b:61:4d:86:91:
                    ae:31:5c:fa:3a:37:8c:df:43:49:fb:c5:f3:c5:52:
                    89:8f:84:fc:d3:2e:11:a5:d2:21:40:d4:82:7d:4b:
                    ea:56:71:77:d7:fc:e5:6a:a2:73:8f:b7:6e:ae:dd:
                    f4:59:6f:6d:f4:fc:aa:23:c8:25:1d:f3:36:9b:39:
                    cf:3c:0c:31:2d:15:1e:00:2c:67:c0:ab:a9:dd:91:
                    42:cb:22:09:b5:27:6f:91:8a:76:3a:a8:e4:82:dc:
                    f6:ed:8f:1c:01:08:b8:b8:45:55:da:cf:c7:d8:26:
                    cd:44:a0:87:f7:e3:ab:11:cd:62:8c:f1:ba:2f:8b:
                    c9:b7:2e:c9:46:d6:12:ba:e6:be:d8:40:60:bc:e4:
                    cc:02:f9:77:c7:6c:28:e9:99:89:14:1a:19:12:17:
                    23:af:f8:ad:a7:b5:97:3f:73:9a:db:65:7c:15:17:
                    67:39:af:f8:65:21:ab:fc:13:f6:d9:6f:ce:87:f6:
                    77:5e:8b:5e:ac:3c:75:47:9a:48:ce:50:f3:7c:26:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8B:57:08:99:66:C0:1E:71:0B:1F:50:93:75:E3:16:24:B5:6B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3cd6359-f339-393c-bf6c-d1d473b04ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:34:7f:60:4f:9f:e6:59:31:12:28:c2:62:e6:5e:f4:8a:95:
         40:57:83:cb:4c:03:d2:17:9c:8b:9b:42:50:4e:51:11:c9:d0:
         8b:47:16:c0:d5:dd:62:d3:77:46:3e:9a:b8:11:e9:e7:6f:18:
         75:df:d2:6b:e9:d5:1b:46:ac:3e:d6:81:be:e9:4d:4b:bf:6a:
         29:3d:a3:cf:f4:ff:ce:4d:3d:f2:41:25:13:86:7d:ba:c2:bf:
         26:6d:ad:53:d0:a6:5c:e0:54:6a:ea:ab:fd:62:3b:15:b6:c2:
         4f:60:ae:bf:95:2e:b3:b8:0c:87:81:ab:ef:40:13:22:4f:65:
         af:06:15:3a:ff:98:ba:82:e9:d7:f0:44:bf:5c:4a:d4:83:e3:
         18:26:02:43:04:e8:94:bf:1e:6f:72:b5:cc:84:bb:e0:1b:39:
         78:a9:f3:8c:c3:ed:9f:40:54:10:ee:29:4f:07:12:55:5d:e7:
         0d:15:7c:ce:17:9a:90:4d:06:a0:ec:5a:24:7e:96:a7:fb:92:
         5f:6b:df:a1:3a:b7:b9:ae:46:07:df:f6:2f:a5:59:8c:eb:b4:
         f5:a0:bb:bc:af:79:d1:da:48:ae:d2:d5:cf:d1:22:fa:ff:fd:
         b6:d3:72:12:7b:59:43:c2:97:41:28:5a:08:14:3f:9d:82:48:
         0c:08:9b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:44 2025 by rpki-client