Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d923b5f1-5eeb-3469-b0f9-c48f33e2b93b.roa
File:                     d923b5f1-5eeb-3469-b0f9-c48f33e2b93b.roa (raw, json)
Hash identifier:          awCAB1tu6TkpbUunocPROb0P1sL4fnLTn1PEiZ6gmxY=
Subject key identifier:   2E:5B:20:D7:44:84:CE:19:76:93:4F:1D:DF:1A:9E:03:14:49:D7:E4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B76D296099013FDD35C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d923b5f1-5eeb-3469-b0f9-c48f33e2b93b.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.28.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:76:d2:96:09:90:13:fd:d3:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=632e5422-4dbb-4570-b8aa-b53ed20de4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:fc:c8:cb:da:63:2f:14:4e:0f:b7:ab:1c:
                    26:e1:38:f9:93:53:ab:26:2e:69:f2:ea:06:3c:28:
                    6e:59:d0:e0:f7:b5:8b:5a:8b:49:3e:59:be:7a:7c:
                    88:bf:fc:18:a5:2a:45:75:b8:f2:7d:19:f0:21:d1:
                    37:d8:af:cd:7f:f5:e7:53:1a:53:74:c6:d5:0f:bd:
                    82:99:0b:ed:f5:b0:df:fb:75:b3:83:1b:98:2c:fc:
                    8f:b5:20:a2:88:f6:ba:a6:54:00:73:c2:f1:2e:78:
                    3b:ba:77:56:0e:a0:b9:1a:1f:27:57:b5:8c:05:19:
                    e7:39:5e:c9:f7:f7:e9:0a:d3:ea:fe:57:46:ed:92:
                    29:b4:05:3f:39:fa:05:cf:8a:7e:3f:8e:e4:45:49:
                    fd:e0:7f:78:d4:c2:c3:7e:17:21:8f:e8:b9:82:04:
                    a6:be:22:00:e4:f4:6b:c0:a6:3a:e0:ba:9f:d8:22:
                    47:f0:30:32:8a:54:a7:b0:8c:eb:fc:e4:4c:18:62:
                    1c:75:56:e7:e9:1b:43:81:c5:5f:ca:e8:26:9c:fa:
                    c6:2c:3c:00:65:0e:6a:62:6e:0e:5a:1f:dc:44:81:
                    80:4d:35:f0:dc:8f:22:ed:e6:8d:07:fd:c7:09:3c:
                    0f:c2:c6:6e:53:15:60:67:e9:84:9b:7c:b6:be:97:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5B:20:D7:44:84:CE:19:76:93:4F:1D:DF:1A:9E:03:14:49:D7:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d923b5f1-5eeb-3469-b0f9-c48f33e2b93b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ba:17:76:db:88:cc:bd:02:89:c4:b6:0f:63:57:ab:47:98:
         5e:59:07:31:ce:5d:14:8a:18:28:5a:4d:3c:b2:db:f1:e2:a5:
         8e:32:a1:36:49:5d:b8:93:51:88:16:de:61:9b:1c:fc:fb:87:
         cf:25:ec:85:49:6b:c9:20:6f:5a:ca:57:3e:ad:54:b6:a0:5b:
         f7:61:d3:37:10:d2:48:50:b9:35:4c:fa:a3:ab:8e:7c:af:0e:
         3b:c9:79:a4:f5:5f:01:5d:38:85:f9:5f:89:57:e1:51:47:b3:
         17:96:73:0d:06:85:2c:84:d8:5e:23:2c:99:3a:92:99:b0:a4:
         02:3c:aa:2c:49:d1:c9:d4:bd:76:fc:1f:f7:5b:fd:f4:4c:4a:
         42:d9:11:78:56:1b:bc:16:44:c5:0a:de:b7:b5:c2:72:78:39:
         d2:1c:6e:9c:9c:cc:5d:fd:c0:cf:f1:71:93:f4:89:6d:d6:86:
         a5:ee:a6:75:c0:e1:f2:57:71:bf:3a:10:6d:b9:70:20:ab:e6:
         56:88:bc:a5:aa:77:01:a4:b3:26:23:15:ea:42:0c:97:78:5d:
         fe:f2:f2:66:c0:14:53:fd:85:21:84:63:c9:df:96:eb:6d:67:
         98:13:88:e7:81:5a:df:0a:49:2b:8d:ad:c7:ac:89:88:6f:b8:
         c5:d5:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:23:44 2025 by rpki-client