Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2ddb3a6-9b83-32cb-b837-ca6977fa57f9.roa
File:                     e2ddb3a6-9b83-32cb-b837-ca6977fa57f9.roa (raw, json)
Hash identifier:          LeIhwEMrC5pCeHRY++Q9TLzuhzhsLCd6Sxcdum6F9/A=
Subject key identifier:   03:D7:A2:57:3C:6D:33:A4:BD:E8:E5:1E:76:DF:29:26:F2:36:35:4F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B5C6CB3E4B80EF95064C53D88
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2ddb3a6-9b83-32cb-b837-ca6977fa57f9.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        173.16.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:b3:e4:b8:0e:f9:50:64:c5:3d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=b72408cc-c70f-4317-9595-524c3d525bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:98:25:72:58:14:d9:90:b1:da:a6:00:e2:
                    bd:b8:07:a9:fa:7c:dd:b7:02:d9:76:50:4f:e3:d4:
                    c4:0e:dc:1f:6c:dc:3c:e3:18:94:3f:a5:38:c8:02:
                    c6:3e:a0:59:60:56:20:5e:59:fe:15:40:f4:e8:7d:
                    7b:74:96:9a:ad:b0:97:4c:bf:bb:ad:da:e1:0a:89:
                    67:4c:db:57:c0:c0:fd:8f:b0:21:1a:99:9e:72:7e:
                    67:f7:cb:a5:b3:36:a7:e5:da:86:b9:04:03:b0:0c:
                    3d:58:00:74:ce:be:57:ad:41:10:3e:67:33:b5:aa:
                    0e:f2:bc:1a:98:0c:86:26:fb:88:dd:47:8b:c6:b1:
                    75:45:b0:dc:6e:43:cc:de:1d:17:ba:f2:17:53:e6:
                    04:03:ef:cd:52:86:95:12:eb:bb:ab:d4:a0:be:f9:
                    07:d0:5e:e8:17:35:ed:c0:d6:18:42:82:d1:29:80:
                    e4:68:e4:ae:09:93:61:21:1b:42:de:cf:a4:cf:27:
                    ec:a5:1b:7c:a6:3d:f1:d2:b1:89:05:68:bd:79:31:
                    ef:b2:d5:e3:6a:4a:e0:20:3b:9d:d3:78:4d:51:20:
                    e2:67:27:4f:d6:1c:5a:2b:c3:5f:56:73:9c:f0:df:
                    df:18:c0:b3:45:86:a8:c7:78:4c:f8:b5:8b:32:cc:
                    3d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D7:A2:57:3C:6D:33:A4:BD:E8:E5:1E:76:DF:29:26:F2:36:35:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2ddb3a6-9b83-32cb-b837-ca6977fa57f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a9:c7:94:2c:f1:7b:5a:89:9c:f4:8b:bc:80:56:3b:66:86:
         f1:a6:d0:b4:02:96:21:92:bd:35:b6:fe:ed:3d:dc:b0:a2:8d:
         20:e5:f7:6d:f2:4f:95:01:44:c3:81:8a:77:56:df:3c:fa:c9:
         5d:73:d0:4d:df:d4:da:ee:45:a9:57:75:d2:b3:c4:d6:44:f8:
         9b:8a:be:2b:91:ac:40:0b:2c:b6:80:af:cf:7d:9a:84:7f:50:
         4e:be:86:04:e9:2d:86:b2:72:aa:2f:35:0d:78:35:40:9a:51:
         7c:9a:e9:54:06:ad:93:fd:b3:0e:8f:d5:2e:e4:30:35:b0:f3:
         73:84:5d:79:da:ab:6b:bd:3b:82:cf:52:82:de:fe:6d:a6:b9:
         06:b2:ea:34:01:50:0a:44:a3:2f:b4:8d:ea:e3:2f:61:d0:95:
         77:c1:55:7a:df:fc:00:07:bf:94:93:cf:40:a0:a0:94:50:7f:
         6d:c9:e8:c0:e3:61:70:3a:eb:88:ad:f7:07:a3:b4:99:a4:7e:
         89:63:ef:f3:7d:18:01:55:1d:ab:20:3d:a5:8c:21:e3:12:8c:
         8f:1f:db:c3:7a:1b:7d:94:7e:6f:06:bb:eb:16:ae:0a:2e:95:
         67:b1:be:0d:2f:f6:99:d2:80:63:39:1f:68:6b:6e:c4:29:47:
         02:be:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:39 2025 by rpki-client