Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbdca0a7-1840-3b09-af78-020e0c4c5768.roa
File:                     fbdca0a7-1840-3b09-af78-020e0c4c5768.roa (raw, json)
Hash identifier:          OpFm4rslIW19Jsa2SMz8rVamyAeM8YrV0MWvOKlRkcg=
Subject key identifier:   09:20:AA:D2:42:7C:CC:A2:6F:99:60:DD:C9:28:DA:AD:EA:57:07:3A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE61C1C9350D807F4D6300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbdca0a7-1840-3b09-af78-020e0c4c5768.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.31.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:61:c1:c9:35:0d:80:7f:4d:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=fb50a2e7-87ea-42ff-9759-5f9b28e2a797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:ab:3c:3c:4d:a0:7e:0a:93:9e:d2:5e:53:
                    7e:d3:a0:d6:2e:5b:c6:e2:f0:c1:9e:49:a2:44:0b:
                    7e:1c:14:44:b3:9e:91:30:9c:3e:e1:5a:e9:ad:08:
                    f7:11:6a:b0:8b:3a:71:b4:b5:b6:be:13:ce:50:49:
                    09:c2:88:90:6b:84:eb:c8:5b:22:3c:10:ef:4b:6c:
                    9b:39:9f:44:22:91:8c:31:91:8e:b4:0c:50:45:4c:
                    05:55:1f:35:7b:81:01:e0:84:ab:98:2f:f4:35:8f:
                    f2:d2:1a:54:b4:90:02:71:77:8e:76:47:86:a9:a4:
                    2d:94:ed:cb:18:29:f8:dc:4d:db:07:b2:a9:74:4e:
                    af:05:c4:4c:f8:12:83:29:6f:ff:85:28:f0:f6:09:
                    1b:13:8e:b8:f3:87:5d:2d:be:dc:fc:a2:d3:43:a1:
                    2e:d2:7e:bc:2d:dc:98:ec:da:79:8f:a2:9e:43:15:
                    4f:5e:61:23:f4:1b:0f:26:70:ec:1f:d6:9b:ed:7e:
                    07:4f:9e:52:2c:95:c3:56:73:4a:e4:7d:28:87:26:
                    4b:2d:24:5a:cf:25:1e:5e:f0:2c:45:12:90:68:4f:
                    bb:ff:a9:a1:c3:07:be:09:41:0a:dd:9e:53:3c:e4:
                    ae:ed:c2:0c:4e:7a:c7:e9:69:4d:14:7e:60:3e:ab:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:20:AA:D2:42:7C:CC:A2:6F:99:60:DD:C9:28:DA:AD:EA:57:07:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbdca0a7-1840-3b09-af78-020e0c4c5768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:fd:2a:96:2b:09:99:d1:ee:4b:42:52:93:1d:33:17:0b:70:
         d7:a5:f5:f2:2d:64:d0:f0:54:e8:2c:41:f7:41:9d:3e:ef:66:
         85:ab:77:d1:89:7a:da:dd:ea:ad:e3:dc:16:c6:9b:00:ff:0d:
         83:dd:8f:cd:4d:d4:da:17:da:fb:8b:33:ce:a5:ca:64:8d:0d:
         3d:3d:6c:56:57:7e:ff:0c:b4:53:98:d5:6d:16:27:57:96:3e:
         89:9d:1f:9f:89:55:15:a2:f7:86:ec:db:54:96:7b:b8:d3:0b:
         44:c2:fd:6c:fd:c0:32:f3:61:16:29:a5:82:18:9e:8f:a9:45:
         88:7a:24:24:76:05:e7:7f:2f:5d:7e:e5:d7:d5:ba:3d:d1:c9:
         74:e7:ed:3e:93:97:86:02:fc:4b:27:8b:56:ba:4e:2f:58:2d:
         80:6e:5c:7a:37:7f:4b:3a:4c:b9:bc:84:73:71:d8:d8:79:19:
         4c:c5:9c:8c:c4:30:f8:cb:67:6f:5e:ac:34:43:2a:32:66:63:
         43:bb:06:fc:ff:e9:ae:d3:e9:66:78:d5:5c:a7:ea:ff:a4:6c:
         63:40:9a:35:e8:a2:9d:5e:2c:b3:ed:e2:69:2a:d5:32:59:07:
         af:1a:d0:78:76:b0:a2:ab:31:68:42:a1:88:0d:fe:24:b6:09:
         ef:30:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:56 2025 by rpki-client