Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff83281a-83c1-3750-b861-d81a976558bb.roa
File:                     ff83281a-83c1-3750-b861-d81a976558bb.roa (raw, json)
Hash identifier:          H6nUcyWSFMazyDz9P5GENHtup1hI1urFJsAnbClBtd8=
Subject key identifier:   1A:77:71:5E:C2:DA:19:87:29:A8:5F:0A:15:F7:F4:51:D5:F9:29:E0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE4D89CD57D50DB87B0880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff83281a-83c1-3750-b861-d81a976558bb.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.28.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:4d:89:cd:57:d5:0d:b8:7b:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=d9d181e3-ba3e-47bb-8b17-42d1a52afb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:8f:8d:4c:c5:b9:05:7c:d8:fe:34:91:81:
                    da:62:95:21:64:4b:5a:79:57:3a:05:22:f8:12:8d:
                    db:a5:09:e0:93:72:fb:cc:54:80:99:df:ad:f6:91:
                    cd:53:19:99:5e:e4:ed:3e:99:27:d4:f7:c6:16:1e:
                    b5:8f:88:e3:a0:39:e0:9a:bf:50:74:4a:fa:e4:09:
                    74:10:f0:2d:47:62:7e:fb:99:e6:d5:38:a0:a4:b1:
                    a9:08:c3:91:f4:9f:f4:ae:0f:fb:52:4d:e5:ef:61:
                    75:f3:c7:cc:ad:e9:9d:d7:83:4b:06:07:52:93:8c:
                    a8:98:26:a7:59:be:c4:8d:3a:c1:f5:f4:32:85:e0:
                    09:4d:f6:0c:71:ff:48:c5:8e:6d:5d:99:5c:4c:ec:
                    3b:09:d9:6a:d9:aa:92:26:02:d0:84:1c:bd:2f:36:
                    31:03:67:94:a5:e1:f2:84:9e:cc:35:2d:90:3c:81:
                    41:a4:a8:77:9f:3d:1b:3c:d3:d0:c5:27:7c:d1:ae:
                    78:cd:96:b8:26:54:58:85:57:af:aa:f4:d2:f5:18:
                    ac:8a:f1:62:13:45:14:65:29:8f:14:a4:ad:bf:ba:
                    59:3d:10:9c:dd:a6:9c:11:38:34:3e:2a:8c:ba:93:
                    de:c3:2e:aa:f2:86:c7:a1:41:3a:16:43:22:2e:d3:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:77:71:5E:C2:DA:19:87:29:A8:5F:0A:15:F7:F4:51:D5:F9:29:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff83281a-83c1-3750-b861-d81a976558bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:bc:c1:81:a1:40:90:23:ad:33:f5:2b:4b:36:82:ea:88:
         ce:dc:e8:f5:69:1e:5d:f4:4a:11:cd:2e:69:3c:8e:34:56:81:
         23:4b:87:7d:cf:bd:70:e6:2f:43:a3:4f:98:54:40:1f:2f:1d:
         71:8f:e3:2b:ee:76:bf:96:2b:c2:52:1d:3d:ae:ff:38:55:43:
         3c:a9:9e:5e:8f:b9:0c:90:e4:30:42:cc:f0:9b:09:eb:d4:36:
         d3:30:f4:7d:91:cb:39:b6:d0:c2:48:ab:e2:99:c7:d3:e3:d7:
         24:4d:ae:89:1d:4b:99:93:2b:96:8a:08:2f:f2:aa:ec:9c:e4:
         07:59:39:89:0b:62:04:60:45:00:2d:5a:fe:3c:2c:2a:bd:cf:
         cb:03:3e:27:a7:a3:67:de:f8:e5:99:36:13:4a:20:94:1e:12:
         8d:ed:5b:f3:be:5e:40:81:03:3b:32:f3:07:85:9c:06:77:af:
         e4:ed:4b:e7:c7:bf:95:60:c1:3d:ff:6f:f1:ba:2b:c9:f0:04:
         53:16:7f:77:cf:5b:f6:08:bf:1f:77:8d:65:3c:c7:46:67:b8:
         f0:dd:22:0c:c6:fa:bb:d8:dc:cb:59:bf:2e:db:f0:52:63:45:
         79:48:09:17:e4:40:dd:d9:8d:28:2b:9e:b3:1b:ec:d3:2d:63:
         90:74:c9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:51:49 2025 by rpki-client