Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa
File:                     088057c9-ae1d-339e-a8fd-ce606d190c40.roa (raw, json)
Hash identifier:          qWFmSD48m1QqPV2aDc3NPOs8DIkxWbD7BOEu/9UQFhY=
Subject key identifier:   6F:4C:5D:51:09:AC:F9:75:CC:5B:AC:4B:A7:C2:D1:C7:29:8A:DA:42
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B6EE129CA3BBA53E23800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.17.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:6e:e1:29:ca:3b:ba:53:e2:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=7f01d904-390c-4873-9f1e-f83a2254f78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:c5:6e:9c:ad:76:8e:ae:5e:9d:32:81:8b:
                    74:de:15:9c:19:f3:f9:fc:c0:8b:28:d9:df:3c:05:
                    62:83:56:76:3e:16:1c:ef:ff:c1:05:6d:c8:1f:c7:
                    a2:a4:c8:2e:56:80:f1:77:ea:d3:f8:bd:13:0e:16:
                    0d:06:6d:05:ba:76:51:67:61:04:62:2d:00:8b:b1:
                    ef:9e:2c:15:9e:76:7f:76:7d:4c:e0:31:24:a0:59:
                    d8:85:53:37:0f:31:ef:41:d5:46:6f:41:e0:50:62:
                    15:30:c1:87:5a:47:b7:69:45:db:5f:08:90:11:ca:
                    39:6e:ac:9e:76:23:58:92:72:fa:21:fd:49:3d:8a:
                    d6:ad:8e:89:28:5a:ce:56:7f:c8:36:87:a5:fb:63:
                    e7:a4:d9:d5:d3:42:a8:54:65:51:08:18:16:8a:30:
                    c5:57:4c:4b:8e:30:9a:af:38:29:35:d9:0c:70:8f:
                    75:b8:cb:f2:7c:71:76:23:ae:f5:7a:81:0a:56:74:
                    d0:d6:73:98:b0:8d:db:11:76:b3:04:43:33:17:f6:
                    d3:47:b9:56:97:43:7e:8c:e9:8c:2e:a0:2c:9b:44:
                    92:95:7b:f3:dc:b6:da:98:dd:50:bd:f3:72:d1:24:
                    01:4e:f6:21:f9:87:e5:03:93:d6:2d:28:75:f2:e8:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4C:5D:51:09:AC:F9:75:CC:5B:AC:4B:A7:C2:D1:C7:29:8A:DA:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:e2:cf:87:bd:8b:68:22:a8:4f:ce:ab:92:b5:4e:fa:b2:
         9f:58:e7:4e:56:53:72:f6:19:b6:ce:99:2f:44:28:ed:89:c0:
         a9:cc:2e:54:c4:fd:eb:24:a6:58:d2:8c:e1:65:fd:a4:a3:3a:
         a6:43:d1:8c:21:da:0f:90:4e:d5:f5:0f:98:63:51:61:c3:a8:
         ef:27:06:05:62:f6:54:37:d0:0c:36:ca:16:77:85:37:01:05:
         4a:aa:8e:f2:76:fc:94:87:e8:6c:30:49:a3:2b:70:94:f8:e6:
         32:ac:fa:8b:35:6c:e2:e7:71:95:0d:78:6b:cf:51:5a:64:e9:
         cc:a0:53:1b:3f:0d:74:f5:a3:52:e6:d5:99:4d:b2:82:5b:ea:
         d3:6b:64:9d:12:40:93:18:da:82:12:3f:2e:de:5d:ea:d7:31:
         98:1c:ee:e6:2d:8c:60:4a:9e:23:14:63:8b:7a:22:7f:8a:02:
         04:12:28:6b:a0:54:f8:f3:99:95:9f:44:18:bb:9f:ff:90:ca:
         8c:67:fb:06:bc:25:4b:07:3f:dd:9e:d5:43:a5:87:3c:38:ff:
         f4:45:78:8d:2b:5b:9b:d8:71:6b:5a:67:90:81:d3:25:37:33:
         49:27:33:f1:ce:f2:99:b9:22:a0:96:cd:2a:03:82:9f:bf:0c:
         a0:5b:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:07:31 2025 by rpki-client