Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c210c397-ff23-3af1-981e-1d7737900b8b.roa
File:                     c210c397-ff23-3af1-981e-1d7737900b8b.roa (raw, json)
Hash identifier:          766HZ3yubVrQYs/uptdYcioLyQlp1Y5oE5sXTU8lW/8=
Subject key identifier:   C5:68:50:67:6D:58:61:9C:34:CF:E8:F5:CA:85:68:08:A0:CD:97:1F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CCBA2BAE09A9F5C359A4C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c210c397-ff23-3af1-981e-1d7737900b8b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.24.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:ba:2b:ae:09:a9:f5:c3:59:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e68c12e5-4f2c-4e75-92a3-dd280d8c7ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:86:66:4a:8a:7e:ed:d0:da:ac:63:a4:21:75:
                    7f:9c:e2:4b:d5:48:2c:ab:93:2c:41:fb:35:72:3c:
                    53:84:9a:88:71:d4:1a:5a:c4:b7:a0:b2:f2:fb:24:
                    ce:92:8e:65:d6:f2:21:e3:ad:47:8d:38:7f:69:8b:
                    2e:5f:9e:92:3b:d7:04:36:bd:a4:20:b4:dc:e8:93:
                    1b:05:28:bf:9f:b3:2e:31:fc:2f:b3:03:e3:c5:08:
                    d2:31:69:30:2a:c0:7d:dd:bd:a2:20:bb:7f:27:07:
                    fc:dc:ff:32:67:3e:ed:b4:c1:e7:e2:7a:18:0b:eb:
                    50:1a:f2:ec:a4:48:31:ee:ad:33:77:8c:af:de:24:
                    55:b1:a9:12:06:6b:28:39:d5:28:1b:7f:00:07:9d:
                    58:0a:71:32:51:e8:ae:43:5f:c0:97:67:c1:dd:ff:
                    0d:94:ec:80:82:6f:0d:c5:ba:4b:51:e8:a2:23:92:
                    a5:2f:13:56:eb:1e:cd:2e:24:1d:b3:58:d3:de:2f:
                    ed:52:1a:90:6a:a7:f5:53:a2:20:68:7c:73:3d:94:
                    c1:90:30:f3:71:86:cb:86:d3:ff:f4:10:9e:77:1c:
                    b1:88:44:3c:c5:89:e6:9e:f5:d5:ba:7d:5f:fc:b7:
                    15:46:41:18:3f:ca:f7:80:bb:0b:53:84:ba:ac:0c:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:68:50:67:6D:58:61:9C:34:CF:E8:F5:CA:85:68:08:A0:CD:97:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c210c397-ff23-3af1-981e-1d7737900b8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c8:d8:1d:d1:66:f6:c7:4e:23:0e:59:f0:a7:c0:02:f7:81:
         58:1d:d0:77:44:ee:3d:41:00:02:c1:1e:68:2d:50:ea:38:ac:
         bb:00:e0:5e:6b:5d:07:75:2d:ee:22:7b:53:a2:5d:18:92:86:
         84:de:c3:48:49:0a:11:71:c2:ab:bc:fc:7f:c3:7e:35:c1:6b:
         ea:1c:3f:f3:b6:95:7e:2c:84:8a:ee:3a:a7:60:fe:5b:cc:a4:
         f4:4f:d0:e9:d8:04:53:43:46:57:d2:6e:73:4b:f0:be:a0:ca:
         b9:b4:0d:8a:33:62:89:1c:16:b1:0a:69:3b:e0:86:41:df:91:
         dd:4a:62:54:67:dd:d6:ab:dd:3c:1e:42:3a:be:2d:42:57:86:
         a3:6d:55:be:a5:01:e5:77:fc:a8:bb:ee:73:7b:2d:de:4a:4d:
         fe:81:f1:a8:2a:e2:0e:f7:6c:a7:a0:72:bd:d9:6d:e9:0a:e4:
         95:55:44:6c:e8:20:ba:6b:8f:3b:37:29:bf:3b:ab:0e:5c:a7:
         19:2b:8f:4a:7a:a3:4b:1f:c5:4c:f0:d4:40:ca:4b:13:b9:1b:
         e7:65:53:a0:59:b6:8c:09:49:cb:3c:f5:96:13:88:9b:91:41:
         d0:fa:7e:18:6e:71:b1:60:0d:f7:18:99:3d:2a:f1:df:ab:57:
         f6:e6:71:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:08 2025 by rpki-client