Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/930bd0f1-07aa-3653-a2d7-afb612c9ae3d.roa
File:                     930bd0f1-07aa-3653-a2d7-afb612c9ae3d.roa (raw, json)
Hash identifier:          WfNKPHflWO+lolzaQfUHeNlBEx/rwIOBtyKEd5+YTlQ=
Subject key identifier:   B4:A0:32:21:C4:72:A4:8B:04:FF:95:62:89:17:ED:8B:32:B1:41:CA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DB10B11B0697A1BBA9C6B0700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/930bd0f1-07aa-3653-a2d7-afb612c9ae3d.roa
Signing time:             Fri 01 May 2026 18:01:57 +0000
ROA not before:           Fri 01 May 2026 18:01:57 +0000
ROA not after:            Thu 30 Jul 2026 18:01:57 +0000
asID:                     19905
IP address blocks:        173.25.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:0b:11:b0:69:7a:1b:ba:9c:6b:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  1 18:01:57 2026 GMT
            Not After : Jul 30 18:01:57 2026 GMT
        Subject: CN=9b4302ca-6304-408f-9bd1-ea9d854a0479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f1:05:46:9e:bc:77:9f:29:b9:e4:80:3f:6c:
                    1a:ec:5f:81:cd:22:b7:2a:a1:d6:5f:33:6a:e6:98:
                    0b:49:9e:dd:b2:1c:ba:03:25:21:14:73:2d:9a:7a:
                    10:a0:b3:47:1a:06:1f:1d:e2:68:b9:12:3c:a2:df:
                    55:bd:d2:81:4c:e8:03:ba:9f:7f:8a:d2:29:85:66:
                    77:c7:46:bb:22:5b:ad:62:61:d6:61:17:4c:cf:22:
                    cd:ca:6c:7f:bb:5f:cf:7e:38:11:21:b7:ae:2e:86:
                    c9:08:37:38:de:7b:b6:14:a4:0f:52:37:a7:d2:0e:
                    d5:1f:6f:45:06:2b:8e:95:ee:09:fc:45:26:4a:1b:
                    70:5c:36:2a:19:85:6d:7e:20:90:a8:06:a3:f2:25:
                    f9:8f:c1:2d:31:35:31:41:8a:de:25:57:86:a9:f0:
                    07:77:2a:a9:d3:79:80:56:c9:02:2c:ab:d6:6b:b4:
                    37:26:88:30:41:69:5e:2b:f0:27:d5:03:86:c5:03:
                    15:28:2a:f3:18:e1:9f:42:89:98:84:5c:dd:12:7a:
                    81:7f:d9:cc:f5:63:f2:25:30:6f:0a:eb:04:a1:c3:
                    68:fd:b5:10:10:49:0d:d3:e6:00:08:65:62:bf:a5:
                    b2:34:a1:54:e0:07:3f:ee:39:b5:39:f2:57:28:0f:
                    d1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A0:32:21:C4:72:A4:8B:04:FF:95:62:89:17:ED:8B:32:B1:41:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/930bd0f1-07aa-3653-a2d7-afb612c9ae3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8e:d6:5a:31:e3:38:3e:53:1f:d8:58:5f:e0:2d:2c:2e:e0:
         7f:19:10:62:00:96:cb:e3:24:ce:26:b7:f2:8a:30:86:03:cb:
         19:36:24:21:ea:92:39:94:67:bb:61:a3:0c:b4:28:12:43:89:
         51:bc:d4:4d:bd:d1:b7:50:6e:47:b7:49:fa:ac:1d:aa:c4:67:
         5b:d7:d6:b8:c3:8b:9b:5b:6d:2d:92:bd:c5:a1:fe:88:72:54:
         d2:90:33:08:1a:8d:85:5a:43:65:0b:97:fa:10:88:8d:1a:38:
         b5:d9:7b:fa:6e:0a:57:fe:2c:48:27:31:4e:b2:44:5c:bd:51:
         1e:3b:17:da:53:b4:9a:6f:a1:07:c8:73:d4:24:9d:b5:c9:e8:
         bc:52:c3:63:00:b8:ef:9f:07:02:38:17:cb:ab:73:5b:4d:b4:
         02:e3:82:fa:0e:77:8c:4e:e9:0f:b3:26:f8:0e:a8:67:55:f6:
         8c:15:0c:ef:6d:19:a9:e5:0c:c7:28:29:cd:20:a3:66:7f:8d:
         02:1b:ff:37:88:1a:ae:41:f9:8f:df:2b:c9:51:c2:41:ae:59:
         da:82:c7:a9:8f:3f:b8:e0:38:a3:f9:b4:91:2a:d5:c2:0f:11:
         69:21:89:0c:d4:2c:ae:7b:e2:02:1f:87:4d:cf:9c:37:a0:8d:
         39:9f:62:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2xCxGwaXobupxrBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUwMTE4MDE1N1oXDTI2MDczMDE4MDE1N1owLzEtMCsGA1UEAxMk
OWI0MzAyY2EtNjMwNC00MDhmLTliZDEtZWE5ZDg1NGEwNDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfEFRp68d58pueSAP2wa7F+BzSK3KqHWXzNq
5pgLSZ7dshy6AyUhFHMtmnoQoLNHGgYfHeJouRI8ot9VvdKBTOgDup9/itIphWZ3
x0a7IlutYmHWYRdMzyLNymx/u1/PfjgRIbeuLobJCDc43nu2FKQPUjen0g7VH29F
BiuOle4J/EUmShtwXDYqGYVtfiCQqAaj8iX5j8EtMTUxQYreJVeGqfAHdyqp03mA
VskCLKvWa7Q3JogwQWleK/An1QOGxQMVKCrzGOGfQomYhFzdEnqBf9nM9WPyJTBv
CusEocNo/bUQEEkN0+YACGViv6WyNKFU4Ac/7jm1OfJXKA/RgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLSgMiHEcqSLBP+VYokX7YsysUHKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTMwYmQwZjEtMDdhYS0z
NjUzLWEyZDctYWZiNjEyYzlhZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRmsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuO1lox4zg+Ux/YWF/gLSwu4H8ZEGIAlsvjJM4mt/KKMIYDyxk2JCHq
kjmUZ7thowy0KBJDiVG81E290bdQbke3SfqsHarEZ1vX1rjDi5tbbS2SvcWh/ohy
VNKQMwgajYVaQ2ULl/oQiI0aOLXZe/puClf+LEgnMU6yRFy9UR47F9pTtJpvoQfI
c9QknbXJ6LxSw2MAuO+fBwI4F8urc1tNtALjgvoOd4xO6Q+zJvgOqGdV9owVDO9t
GanlDMcoKc0go2Z/jQIb/zeIGq5B+Y/fK8lRwkGuWdqCx6mPP7jgOKP5tJEq1cIP
EWkhiQzULK574gIfh03PnDegjTmfYrI=
-----END CERTIFICATE-----
Generated at Fri May 8 20:26:05 2026 by rpki-client