Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d52a954d-b39c-3fe6-9453-3b555b922a45.roa
File:                     d52a954d-b39c-3fe6-9453-3b555b922a45.roa (raw, json)
Hash identifier:          RAUVLKvlDbIH/JtuOA7YyxNekiqcErTCEQGru5OHmiU=
Subject key identifier:   AD:78:0C:C2:DC:41:B1:C0:AF:A7:E5:F7:56:A7:5D:13:6E:FA:F0:61
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B61818C37D9C31BA67740B500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d52a954d-b39c-3fe6-9453-3b555b922a45.roa
Signing time:             Wed 01 Oct 2025 20:42:08 +0000
ROA not before:           Wed 01 Oct 2025 20:42:08 +0000
ROA not after:            Tue 30 Dec 2025 21:42:08 +0000
asID:                     30036
IP address blocks:        173.27.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:81:8c:37:d9:c3:1b:a6:77:40:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  1 20:42:08 2025 GMT
            Not After : Dec 30 21:42:08 2025 GMT
        Subject: CN=fccda4e0-13ba-4e0a-8f9d-f7472ec3fc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1f:d0:d6:b5:7e:3b:0d:2b:cf:80:74:f8:fd:
                    75:f7:c5:3f:00:0f:b2:3b:44:f7:99:0f:5e:f0:68:
                    88:17:17:f9:a0:74:07:7d:de:99:41:fb:90:db:08:
                    b4:35:9c:8c:83:29:20:99:47:c8:6b:85:ce:1b:96:
                    c5:24:c3:a9:ff:12:76:7d:98:68:c2:b9:42:0d:a1:
                    65:bc:3d:3a:58:6d:87:1a:d2:1d:c1:b6:05:83:f7:
                    92:d2:91:9e:fb:84:8d:62:a7:5f:fb:3c:9c:86:54:
                    60:f3:66:d6:c9:1c:0d:0d:2f:40:74:df:51:6c:d2:
                    dc:d8:91:6c:f2:0e:72:53:c5:e6:a5:20:f6:fb:0d:
                    79:c7:5b:b9:fc:52:3d:bb:5b:b0:5e:00:ae:97:f1:
                    06:b5:ee:33:e8:66:4a:a5:dd:3f:4c:98:e3:e1:b2:
                    48:b1:a9:44:6a:2d:9a:b2:76:ef:a6:b1:35:70:b1:
                    60:e6:f8:e4:88:17:77:44:52:89:90:07:d2:cd:1c:
                    78:4c:b3:0f:1d:6d:63:d6:cb:80:f0:51:b6:23:51:
                    43:3c:4f:90:e2:2e:fc:20:2c:2e:7c:fd:5c:ea:a4:
                    b3:5f:7e:f0:0b:79:46:3e:51:a2:79:c0:5b:96:a5:
                    8f:12:1c:63:96:82:65:15:d2:f9:00:0c:2c:f8:a3:
                    8d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:78:0C:C2:DC:41:B1:C0:AF:A7:E5:F7:56:A7:5D:13:6E:FA:F0:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d52a954d-b39c-3fe6-9453-3b555b922a45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:32:b9:cb:d4:9f:69:e5:ba:11:36:46:89:ef:38:d1:e0:39:
         e8:91:cd:70:d7:91:2c:3b:5d:90:65:e4:e4:d7:52:14:d2:b9:
         fd:0f:48:e6:cb:e8:59:68:3f:35:f3:35:bd:ba:b6:95:9b:a9:
         4e:6a:53:50:d2:30:b9:aa:73:d7:35:80:22:e2:ef:8c:f2:78:
         ec:30:4e:e3:dc:32:82:71:78:ed:af:85:05:8d:0e:97:ac:c2:
         9b:df:eb:08:e5:95:ee:0d:fa:3c:24:5a:5e:19:ef:31:9e:94:
         0b:31:bc:06:20:23:18:b0:c0:c2:cc:a5:cf:a2:00:58:21:42:
         9c:2c:7c:7b:6e:86:fe:20:05:02:83:75:1d:34:bc:5b:24:b6:
         c2:2f:5d:a8:ed:c4:15:da:41:35:84:02:92:b4:54:8e:42:ac:
         86:e6:13:da:9f:36:aa:5c:e6:3b:5d:7c:4a:45:c6:00:4a:7e:
         61:8d:66:85:d0:98:e8:f4:a9:5e:19:24:61:94:7b:4c:af:8f:
         7b:b5:91:91:2d:46:b3:15:19:74:79:bb:d2:3d:ef:29:bf:af:
         10:33:fa:17:e9:a6:cd:a1:7d:32:e9:10:44:fa:0a:f1:52:22:
         ca:1b:38:ec:e9:b1:dd:d6:96:be:b7:ca:c6:3f:e7:06:0e:56:
         d0:c1:00:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:41 2025 by rpki-client