Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/3a0f091a-389d-3b3e-9644-f38a94d40195.roa
File:                     3a0f091a-389d-3b3e-9644-f38a94d40195.roa (raw, json)
Hash identifier:          +Z1YxtmPblQOvF/3ujHTHuM5w772E8xV4zYJwY1+sY8=
Subject key identifier:   DC:AA:92:7D:4B:7C:4D:72:1F:26:53:73:72:1A:E8:6B:E5:34:AA:D5
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F4328584A5A30703BAC045AAF81DCFC4E
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/3a0f091a-389d-3b3e-9644-f38a94d40195.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     46562
IP address blocks:        173.0.73.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:70:3b:ac:04:5a:af:81:dc:fc:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=62c0914c-ba38-42b2-956b-abc58807e3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5f:ae:b7:08:00:bb:38:b1:d3:9f:6d:28:9f:
                    2b:e3:93:8f:d9:f3:0b:56:7b:a2:fb:b7:fe:2c:a3:
                    6f:ae:86:06:c8:06:7e:4e:ca:dc:0b:ec:85:5f:c3:
                    c8:52:b8:21:40:55:84:95:57:a4:af:f5:a5:32:d7:
                    91:da:d6:a9:10:b1:8c:9a:eb:0e:fd:91:d8:db:86:
                    f8:f8:6d:78:cf:48:6f:55:6e:d7:84:83:73:d9:dc:
                    f7:cd:24:b1:74:5e:14:ba:8b:8d:04:f7:5b:15:28:
                    e4:33:80:5e:40:5b:9d:87:ba:be:74:7d:b9:39:ae:
                    c9:96:23:14:38:ab:db:aa:2a:07:a6:88:b6:dd:87:
                    56:27:fc:c3:cf:54:d5:ba:d4:33:e9:dd:b2:cf:eb:
                    99:7c:66:d0:a5:1e:4c:52:18:96:a4:e7:73:b0:cd:
                    43:60:e8:47:a6:15:e0:29:6a:a9:64:26:40:e7:06:
                    1a:7e:6b:15:d9:6c:e8:e6:93:9f:8d:68:fb:45:99:
                    e9:23:35:43:67:17:58:82:61:1a:53:8f:40:cb:96:
                    31:f1:49:21:6d:91:cc:5d:d3:29:47:5c:8a:e6:1d:
                    33:bc:6e:06:5f:a2:46:7d:dc:53:94:e2:6c:b9:b1:
                    eb:fd:76:e3:7b:c0:6e:35:eb:50:ea:85:86:15:8b:
                    27:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AA:92:7D:4B:7C:4D:72:1F:26:53:73:72:1A:E8:6B:E5:34:AA:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/3a0f091a-389d-3b3e-9644-f38a94d40195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3e:b0:4b:e1:09:81:6c:fa:1b:0c:dd:00:30:a4:10:37:f4:
         ae:82:f0:36:86:50:4d:a3:be:ba:0e:07:ca:66:73:b0:ab:5b:
         f2:f3:87:29:cd:5b:f2:4d:03:30:7a:38:3b:41:b2:b9:90:5e:
         de:95:12:67:75:47:d7:50:53:42:fb:26:37:b9:0e:e2:18:3f:
         57:cb:ee:28:ca:d1:11:55:f0:ff:3c:7e:e8:5c:83:96:f1:e9:
         ee:26:88:ad:37:51:12:d4:94:09:8e:a8:62:c8:a2:09:27:74:
         e3:40:83:1e:28:5a:64:f1:12:74:da:75:43:25:4c:4c:56:be:
         20:1a:8c:83:61:3b:48:df:05:58:b7:45:aa:c3:df:8b:53:ac:
         d2:b1:d1:b2:e6:2e:ce:53:23:90:ef:16:57:cb:9b:00:9c:f5:
         46:de:60:34:e7:f4:41:eb:d8:7d:cd:82:cd:0a:5c:26:04:b9:
         7a:cd:95:70:03:fa:34:c1:ad:9e:e2:67:6f:40:53:5e:70:29:
         90:25:38:48:36:36:66:73:35:4f:e6:06:0d:f8:e4:35:a9:9d:
         81:79:4a:e2:52:c5:83:88:56:0d:30:fa:34:ae:78:d3:1f:82:
         60:a2:32:24:98:0b:1c:fb:a4:32:a8:16:ae:7c:c1:40:9d:d7:
         31:44:84:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 12:44:05 2025 by rpki-client