Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c15c3b7b-5f3e-3cf4-bf7c-02b96ec43573.roa
File:                     c15c3b7b-5f3e-3cf4-bf7c-02b96ec43573.roa (raw, json)
Hash identifier:          eYR6kbxElKN5tf6kOUMT/32mjCMBKrLDdU3cX6UEud8=
Subject key identifier:   CA:DB:20:D7:E2:40:ED:C6:23:81:FE:6E:F9:41:AC:1D:21:EC:6A:02
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B5A9264587A8682EBAF40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c15c3b7b-5f3e-3cf4-bf7c-02b96ec43573.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.25.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:5a:92:64:58:7a:86:82:eb:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=eb1563a9-3dbc-4125-bf90-5bf74e23c24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:07:29:53:4a:ef:dd:3a:b4:67:d3:79:e1:
                    0e:9f:36:51:30:90:b8:e0:54:8d:90:31:7f:b4:4b:
                    b1:2d:44:67:3b:0c:83:74:cf:e0:bd:cd:a6:1b:fb:
                    57:fb:aa:79:14:ce:71:a1:69:2e:32:19:64:56:93:
                    53:8e:e4:4c:56:03:31:7a:60:3b:b2:98:b8:92:f9:
                    8d:f3:b1:4e:dc:f1:6f:c3:71:c7:d2:a3:6c:e0:fc:
                    b0:8f:64:e7:17:ea:37:70:5b:51:9b:15:f4:65:38:
                    c7:c2:38:42:11:31:3f:49:24:28:c7:5a:57:4f:8f:
                    52:f0:8b:5b:14:bf:4f:ca:58:13:2e:01:e7:6d:39:
                    3c:2e:75:8a:5a:be:59:ba:c5:3d:c8:64:ae:16:6d:
                    67:54:c7:a5:71:22:69:db:be:e3:14:e8:e4:e0:a8:
                    0b:fe:21:ce:f9:0f:57:bc:31:69:28:d4:e9:81:15:
                    b1:98:2a:d5:49:5a:e8:a5:a3:7d:90:74:f6:9d:12:
                    12:ac:1b:0d:a4:3e:76:1d:72:6b:e5:68:8c:d4:83:
                    9e:9f:b5:21:bd:7f:3c:ad:c7:1d:45:76:be:7d:62:
                    e5:56:9f:b8:c4:76:81:da:77:1f:29:4b:27:43:5d:
                    65:7a:05:e7:a2:f5:84:e7:0a:2a:72:b0:0b:3e:54:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DB:20:D7:E2:40:ED:C6:23:81:FE:6E:F9:41:AC:1D:21:EC:6A:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c15c3b7b-5f3e-3cf4-bf7c-02b96ec43573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:81:e1:db:59:68:12:b2:84:1d:9d:10:b1:3e:28:1e:ed:ab:
         ce:ad:b3:28:96:62:df:0b:cb:49:74:9d:59:c7:ae:30:9b:eb:
         59:21:20:a0:ec:2c:11:4a:e3:91:5e:b3:89:14:d9:60:d5:ac:
         ab:ed:91:d7:38:74:fb:76:ca:9b:8c:e4:94:2b:64:23:7d:84:
         7a:68:a2:14:66:3d:4e:23:bc:c4:db:dc:d0:9a:5c:2f:6b:23:
         5a:51:9e:c5:2c:32:32:82:da:c3:8b:02:4f:c1:f0:cc:0c:a6:
         9a:dd:1b:80:02:82:e0:c6:e1:45:6e:a4:df:09:eb:52:1a:c7:
         2d:3b:f8:c6:ea:08:86:4f:fa:64:51:00:a2:88:05:ac:42:3b:
         f2:29:70:f6:9e:4f:40:26:63:08:34:91:79:75:a1:b3:90:5b:
         f3:e5:2e:9c:9a:2b:03:ac:9e:54:d4:68:2e:e1:15:f2:9c:ee:
         7d:6b:00:21:7d:1d:e9:3c:dd:fa:05:84:f4:13:98:b3:1c:df:
         70:42:ef:b4:34:3c:29:c1:1d:5b:5f:ee:cb:87:dd:b4:98:5d:
         c9:34:2c:a1:90:92:e1:96:fa:41:72:4c:79:5c:c2:7b:9c:b9:
         a8:69:9e:2e:89:59:41:9d:d3:fa:8d:d5:66:ac:62:74:18:86:
         e0:be:d8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:17:14 2025 by rpki-client