Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eb730230-66f3-343c-8288-1e04b7bdbdda.roa
File:                     eb730230-66f3-343c-8288-1e04b7bdbdda.roa (raw, json)
Hash identifier:          V21T4d/Bj+MqoIcDeNFfk/jifxNFC18rWBqEc0S09Cw=
Subject key identifier:   C0:BB:95:BE:59:66:EF:F1:DA:78:5C:7B:29:E7:A3:C7:53:77:3F:70
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584B5C6C76051D90D25A6C2B5B00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eb730230-66f3-343c-8288-1e04b7bdbdda.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     174
IP address blocks:        173.232.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:76:05:1d:90:d2:5a:6c:2b:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=d5308245-c432-463e-9a8b-da6307a3736f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3c:66:0d:28:22:6f:94:61:6c:45:29:c0:07:
                    86:33:63:fc:47:e0:25:53:63:ac:69:dc:a0:cf:7a:
                    39:e3:de:00:fd:ea:ad:46:f7:33:1b:6b:61:b7:0f:
                    5e:4c:3e:9f:07:ae:de:06:86:7c:27:6d:62:c9:78:
                    80:4e:b3:59:70:db:0e:74:5e:f5:b7:58:db:be:36:
                    79:cc:67:a6:b7:55:f2:30:11:93:5c:7e:e5:79:66:
                    f8:57:08:cd:31:81:b9:ef:07:8d:dc:38:70:2c:d6:
                    b6:ef:2e:b2:c6:c8:84:81:54:55:ac:dd:f7:4f:67:
                    e6:22:1e:bf:2f:ed:df:58:c7:71:b3:15:18:ac:e6:
                    2e:d2:ac:b8:27:5a:cf:3b:98:63:99:c6:12:ee:4b:
                    ee:14:b6:96:c5:3a:31:c3:85:81:c4:c8:a0:ad:c9:
                    38:b8:49:5e:32:aa:ee:b1:14:82:37:02:2f:f5:56:
                    d8:a2:f8:60:08:8f:24:25:df:fe:82:61:23:6e:8f:
                    74:b9:ca:24:f0:66:72:e0:07:7f:f3:b8:41:89:d1:
                    98:64:9e:93:0d:5e:19:c7:e4:3b:fc:b6:44:34:f8:
                    e1:53:d6:2b:46:26:88:59:9b:95:89:80:2d:b3:e8:
                    7e:9d:cb:f8:9a:26:2a:fc:6f:79:de:0a:e0:98:89:
                    9e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BB:95:BE:59:66:EF:F1:DA:78:5C:7B:29:E7:A3:C7:53:77:3F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eb730230-66f3-343c-8288-1e04b7bdbdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:94:0f:92:a6:6a:a4:c1:0d:25:bf:8a:fc:4e:c2:24:1f:2c:
         ed:ea:d3:5d:a9:cb:79:07:a8:8f:77:a8:b3:55:5e:69:4e:e2:
         e6:4e:3b:c1:98:9b:ec:a6:24:a8:56:b6:27:62:35:97:87:75:
         66:ac:99:f9:dd:f2:63:11:6b:59:8c:9f:8d:03:67:ad:d8:32:
         93:a4:9c:a3:01:61:5b:55:8b:db:51:dd:cb:9a:c0:55:a6:96:
         00:ce:87:91:95:9f:3b:f2:2e:f3:43:c3:7d:2a:04:51:10:68:
         74:94:3b:de:d5:3f:9b:35:fa:1d:0b:e1:a1:a0:eb:20:f0:0b:
         37:53:61:6a:61:f0:ad:45:b7:ef:3d:00:69:73:8f:83:6e:ef:
         b8:f7:e0:01:e4:c6:06:c3:bd:f3:5d:70:6d:89:84:c5:86:b2:
         0d:9c:96:55:40:85:e5:55:40:24:ba:a9:ff:f1:28:88:aa:d0:
         33:aa:49:87:41:5d:e6:0e:fb:6a:08:5e:ef:2a:8f:9e:d8:98:
         61:85:ea:e5:87:b4:64:6f:0f:7e:cb:79:3f:63:ac:a9:38:a6:
         17:bd:6d:af:d7:4a:70:7b:96:39:68:df:3b:66:c4:bc:44:da:
         87:53:66:41:5a:c4:bd:24:f0:36:45:43:d8:c2:de:14:34:c6:
         a6:75:99:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:39:32 2025 by rpki-client