Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba87132f-4139-3adb-873b-1d8c98e40c4f.roa
File:                     ba87132f-4139-3adb-873b-1d8c98e40c4f.roa (raw, json)
Hash identifier:          HNNsn1J4nkLDQhzJdK1c9fmV8JQRbVoy3fwr+jTAbbw=
Subject key identifier:   DF:A6:57:84:A7:7E:6D:55:06:B9:6E:15:E7:4C:F0:DA:DD:68:A6:E8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B5AD3FD1D6C9D67BB11C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba87132f-4139-3adb-873b-1d8c98e40c4f.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.18.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:5a:d3:fd:1d:6c:9d:67:bb:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=2720ef36-f040-4c3a-8948-d96e3b652511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5d:63:c4:39:3d:1c:fd:46:6e:0e:bd:45:45:
                    44:d3:5e:f2:f2:79:2f:67:b2:34:3e:72:71:f1:4c:
                    b7:44:be:bf:11:c1:82:c9:6f:7b:e0:78:28:4a:00:
                    b9:59:8a:69:9f:2f:85:40:3f:95:44:21:ee:15:31:
                    96:5d:9f:ad:ad:39:8d:1f:0f:76:21:fe:5a:b5:68:
                    fc:47:89:ff:76:24:9f:04:82:43:49:a6:da:0e:89:
                    b3:ec:e3:b2:64:44:1c:8e:7c:dd:e4:bf:b0:47:f7:
                    ba:15:69:9f:fa:d7:5e:ae:9b:b1:23:81:bb:6c:f7:
                    46:72:0c:c2:90:ec:8f:35:dc:2e:41:30:22:62:d4:
                    c9:5c:83:46:5f:4c:93:a9:07:ab:46:99:70:28:ac:
                    d7:05:9a:d3:31:41:41:01:ba:7e:32:07:e8:50:26:
                    6a:7c:87:42:f2:8f:49:63:ba:91:02:26:ac:0f:20:
                    94:ed:4d:c7:9d:b6:92:22:bf:f6:c1:8f:bd:9d:8d:
                    2b:d5:61:2c:fb:b0:b1:c9:58:d9:b1:6f:ae:16:0d:
                    23:f3:f8:80:ae:ac:5d:c0:c9:84:3b:01:83:eb:c6:
                    5b:be:44:0d:cd:e2:ac:6d:ce:6c:d1:a1:e6:73:1d:
                    9b:4a:48:77:f3:9f:14:27:0e:c9:5f:f2:46:c3:28:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A6:57:84:A7:7E:6D:55:06:B9:6E:15:E7:4C:F0:DA:DD:68:A6:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba87132f-4139-3adb-873b-1d8c98e40c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:42:76:45:4d:66:1a:df:9b:43:1f:e4:92:b6:3c:3f:be:7d:
         87:94:bd:e4:16:69:76:42:97:2d:e5:2f:c3:f6:6d:38:22:21:
         59:62:29:7f:b1:9f:1f:32:08:80:d6:25:c6:62:b8:43:75:1f:
         a7:ff:3c:3c:fd:96:5a:fe:5b:94:a1:9b:9a:4e:dd:03:bd:89:
         bc:aa:d8:59:db:de:92:c4:11:f6:62:c3:a7:00:f6:2f:8a:9b:
         71:f6:5b:5d:10:e6:94:62:b3:e2:59:34:5e:7f:cd:7f:20:92:
         0a:0b:86:b1:4a:d4:5c:95:44:16:9d:80:f0:25:ba:da:f4:e9:
         70:7f:a2:99:c9:75:b0:62:86:55:69:39:e9:6b:41:d6:02:74:
         ff:06:46:d6:32:a2:a8:dc:28:33:57:d7:0a:95:b9:57:7b:91:
         df:80:0f:1d:d4:cb:03:4e:4a:9e:b4:a3:85:dc:d0:71:e6:1a:
         7f:9e:3d:cd:d9:1a:bb:6e:44:e8:b6:2d:a3:36:76:94:d7:9d:
         2f:0d:0e:96:62:4a:a6:ea:4a:52:5e:6b:e6:22:e7:ff:4e:fa:
         b9:87:94:0b:60:e1:d6:a4:c0:65:09:29:0a:16:94:e6:c0:44:
         b4:86:0b:be:b7:23:2e:77:f2:f9:fe:98:43:6a:bb:69:bf:a9:
         25:0d:0c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:10:55 2025 by rpki-client