Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c05725de-9fb7-3dcd-98df-6e6b5ddaaceb.roa
File:                     c05725de-9fb7-3dcd-98df-6e6b5ddaaceb.roa (raw, json)
Hash identifier:          2HOc+napO7Mldfj4jpxNDJvNe1khwo5JOvG42qTmvmY=
Subject key identifier:   4E:D2:E9:BF:54:A7:46:7C:AB:0F:63:C2:5A:BB:FF:AD:C2:F3:32:EC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B3C7453980EAF99A6D3711900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c05725de-9fb7-3dcd-98df-6e6b5ddaaceb.roa
Signing time:             Thu 18 Sep 2025 14:10:35 +0000
ROA not before:           Thu 18 Sep 2025 14:10:35 +0000
ROA not after:            Wed 17 Dec 2025 15:10:35 +0000
asID:                     19905
IP address blocks:        173.18.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:74:53:98:0e:af:99:a6:d3:71:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 18 14:10:35 2025 GMT
            Not After : Dec 17 15:10:35 2025 GMT
        Subject: CN=5e60c362-ef82-46e4-a387-228aa5115837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:dd:3a:9e:78:63:26:6d:23:95:0f:33:ff:
                    88:4a:ff:eb:14:77:d2:17:3b:b9:4d:c1:96:38:f3:
                    b1:07:8d:20:68:50:fc:80:5b:e1:fd:63:62:7d:95:
                    12:03:6a:7e:41:02:e4:64:f4:2a:e1:8e:6b:8d:d5:
                    b6:cd:06:20:66:f0:c1:bd:f7:ef:a9:55:37:b0:ee:
                    b2:94:63:e1:25:63:b9:78:75:e3:d5:7e:29:98:ab:
                    09:da:15:a6:3a:f6:5d:33:a7:39:9e:e6:58:98:9e:
                    fb:77:4e:97:cc:b8:9f:7a:fb:36:e6:6a:a7:13:63:
                    09:d4:f0:fe:be:a1:27:8e:d8:1f:56:88:6a:5b:a1:
                    f3:e4:6f:ab:19:5d:20:76:d2:55:63:2a:1c:07:38:
                    cf:4d:8e:d7:4f:fb:cf:68:51:9b:b3:59:e6:ac:19:
                    f4:2e:f4:19:e3:ec:df:08:df:3e:97:06:05:dd:e5:
                    a0:bd:c6:ec:0d:02:7b:29:8d:90:6c:95:0e:fe:73:
                    ff:13:34:09:05:94:24:57:53:33:92:73:ca:d0:4e:
                    31:84:8b:d3:ed:b8:c3:19:98:cb:23:f0:0b:95:ad:
                    30:fd:a4:21:7a:2c:48:a2:91:d1:74:a4:fb:08:e5:
                    55:03:5d:8d:64:ad:47:67:a1:e7:58:b8:04:f4:0e:
                    fe:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D2:E9:BF:54:A7:46:7C:AB:0F:63:C2:5A:BB:FF:AD:C2:F3:32:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c05725de-9fb7-3dcd-98df-6e6b5ddaaceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e1:bd:a2:a4:a0:9a:37:82:0b:af:95:ec:26:d7:8b:fa:b2:
         d0:42:aa:c5:6e:8a:d9:13:c0:45:a4:52:13:92:39:94:63:fa:
         e3:06:03:f9:bb:b3:29:75:2c:15:b1:78:44:dc:f6:a3:09:ca:
         25:81:33:74:d6:b4:f3:d5:29:26:cf:6b:1b:8f:4f:1c:70:24:
         cb:19:20:6a:ca:dd:3e:aa:f9:1e:6c:39:e8:0c:85:32:ce:e5:
         38:12:44:53:32:63:f8:63:41:b1:57:3d:8a:ff:47:dd:37:3c:
         19:0f:c4:70:9c:36:a0:bf:7a:99:3c:c7:ce:74:bc:75:7e:85:
         35:b0:bb:34:fe:9f:ee:62:30:0e:10:9f:f2:c8:60:2c:f3:a9:
         39:f5:4b:a7:66:68:c1:fe:b4:20:d7:6b:60:28:92:fb:4f:01:
         82:43:69:57:d3:a8:39:82:df:b5:fa:4b:98:10:9d:0a:d5:7c:
         1a:7d:1f:e8:d3:c3:06:86:c3:96:6e:f3:26:1e:84:9f:16:d6:
         a1:2d:8e:9e:c6:01:57:e9:a5:13:83:bb:7d:c4:a0:95:bb:39:
         27:01:08:d3:61:7a:9e:02:72:56:c7:26:7a:d0:3b:cf:a9:b9:
         0c:c5:fa:61:67:6e:1e:fb:2b:b4:72:b9:ea:15:77:86:78:00:
         68:e0:50:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:31 2025 by rpki-client