Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d06ecd26-d0f1-3eec-9051-1d3ae6d4cfc4.roa
File:                     d06ecd26-d0f1-3eec-9051-1d3ae6d4cfc4.roa (raw, json)
Hash identifier:          KrcOe9Q7tUx83cY210A5fFSQxgrRU90YHrIfvZL4KJA=
Subject key identifier:   16:29:96:FE:9E:30:F8:B6:D6:37:2E:07:EC:25:3B:EF:87:91:16:41
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6797F421771B1A3940618E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d06ecd26-d0f1-3eec-9051-1d3ae6d4cfc4.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        173.27.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:f4:21:77:1b:1a:39:40:61:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=16cae4fc-2e4b-4ef4-a1d1-f5f4be82a1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8a:a8:17:87:1f:ab:ac:e6:8c:cd:7b:d4:eb:
                    9b:82:96:71:f6:0b:71:a0:ba:a5:34:5e:7b:68:af:
                    59:2f:9b:38:4f:a0:e4:4b:72:d6:34:a3:ef:d2:1b:
                    da:0a:95:b0:0c:7e:7f:5b:3d:12:d4:67:b0:a6:30:
                    96:f4:6a:93:ac:75:e0:34:1b:1e:01:f1:93:89:e6:
                    af:51:e1:4c:4a:d7:b5:03:d3:6b:c9:79:c8:e4:b2:
                    a3:f9:df:ff:16:e6:82:15:84:a5:dc:7b:4b:91:8e:
                    eb:3d:8b:88:da:27:17:54:7d:46:e3:3c:a8:ec:b2:
                    88:ed:4f:c8:3a:d9:1c:fe:6a:0c:1b:11:8f:88:ed:
                    c8:31:40:86:2c:6c:4a:31:60:48:3d:f7:20:97:50:
                    8e:a3:63:b6:27:a3:60:e1:84:88:de:2d:8e:4f:5b:
                    2a:bf:05:33:b9:cd:e4:91:f8:a1:13:4b:6c:a9:11:
                    5d:df:da:83:3c:84:28:b9:e9:d4:34:64:db:da:b3:
                    ce:c4:31:be:50:98:01:c6:3b:8a:f7:1b:6f:f0:f4:
                    b2:cd:dc:56:ca:4c:f6:7b:37:3d:b3:65:55:54:f7:
                    db:d1:70:c7:2f:cd:ad:01:1f:11:fd:64:55:38:e9:
                    c6:b4:e9:33:d9:8d:b1:f0:3c:ce:be:82:79:0b:e7:
                    d3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:29:96:FE:9E:30:F8:B6:D6:37:2E:07:EC:25:3B:EF:87:91:16:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d06ecd26-d0f1-3eec-9051-1d3ae6d4cfc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:20:fe:1b:04:55:aa:17:51:e0:6f:8f:ef:80:11:6b:3b:10:
         02:a2:ee:bc:96:88:3a:e8:df:78:37:65:0e:57:ec:c7:29:22:
         c2:d8:5c:d9:fa:80:89:c5:ba:22:9f:5b:41:09:b8:5b:3b:da:
         21:ab:b9:1f:e9:84:70:84:e0:ac:20:74:6e:11:06:c2:b5:10:
         f9:18:f5:a8:ee:89:e5:da:dc:7b:3a:17:a1:42:70:a3:4c:9a:
         ed:bf:e3:f4:27:c2:f3:d8:cc:d7:af:f9:11:5d:cd:c3:28:e6:
         d3:b4:78:b8:36:c0:11:6d:c9:95:b0:be:82:4f:65:4f:ec:68:
         77:f3:03:c3:b0:6d:b1:87:8e:d9:43:24:f4:40:36:d3:d7:c7:
         cb:76:4a:f2:ab:4f:50:d7:fb:f2:5e:2b:b8:95:2b:0d:df:6f:
         19:63:c5:b2:ac:f6:f7:66:da:62:20:95:f5:77:7c:7c:dd:b8:
         e3:43:d4:cd:40:5d:ca:ae:7d:a6:e4:7c:d1:da:a7:d2:0a:5d:
         78:6a:d9:7e:c3:22:25:78:ca:6a:50:3b:39:d2:ed:a5:42:9d:
         13:62:9d:41:ab:e2:f6:7c:da:e0:42:9b:78:3d:68:7c:13:78:
         00:07:9f:df:2f:11:1a:73:11:d4:4f:06:9e:10:13:dd:a7:03:
         08:42:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:59:12 2025 by rpki-client