Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8f15a50b-7fa0-36a8-a927-5270cdd2e812.roa
File:                     8f15a50b-7fa0-36a8-a927-5270cdd2e812.roa (raw, json)
Hash identifier:          +v4r+qtUDLYXqYhQh7ghiRXnqrRpJ4fH1eRBK3Ip8CA=
Subject key identifier:   23:44:08:F9:E1:1B:B2:03:18:DA:AD:E2:D9:43:AD:98:40:55:90:4D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584ADDEEA3220928E8E4940FEF10
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8f15a50b-7fa0-36a8-a927-5270cdd2e812.roa
Signing time:             Fri 15 Aug 2025 17:35:14 +0000
ROA not before:           Fri 15 Aug 2025 17:35:14 +0000
ROA not after:            Thu 13 Nov 2025 18:35:14 +0000
asID:                     19905
IP address blocks:        173.27.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:ee:a3:22:09:28:e8:e4:94:0f:ef:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 15 17:35:14 2025 GMT
            Not After : Nov 13 18:35:14 2025 GMT
        Subject: CN=8c15d8d2-c498-4c8c-829d-9f9a63028ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:63:2b:bc:97:07:e8:15:03:cd:c2:50:0e:
                    d3:6a:a7:67:c8:a3:4f:89:79:07:39:d9:56:76:dd:
                    d5:22:c7:44:73:54:c6:5d:bd:a1:6a:ce:35:a0:67:
                    9a:3d:bf:76:15:ef:d0:45:5f:30:99:a2:dc:84:ce:
                    02:2f:e8:70:6c:7a:ce:88:9a:fb:58:89:64:ef:9f:
                    46:52:6f:e5:a0:21:eb:96:fe:9c:fb:fd:e3:c2:1d:
                    44:20:59:e0:6e:24:86:fc:31:21:0b:da:f1:3c:63:
                    a4:d8:b7:bc:19:02:92:de:d1:8c:da:a0:2c:e7:a1:
                    bf:17:14:05:8b:d5:ce:d2:cb:47:b3:39:e1:6e:1b:
                    43:bf:61:2c:37:ac:35:3b:3f:7d:8f:dd:55:08:dd:
                    d8:15:b4:f8:90:19:c3:dd:94:1f:49:d9:52:60:a0:
                    10:40:e1:eb:ed:31:a1:04:b4:49:58:78:f6:54:b0:
                    f0:fb:46:3f:b5:2f:02:7d:e0:31:62:6a:fc:d5:e1:
                    06:39:91:36:d7:d2:2f:78:05:41:32:6e:d6:4f:4c:
                    f0:82:c1:bc:fc:f8:82:b5:55:3d:51:ac:90:e3:71:
                    92:3d:79:37:11:e2:4b:0c:be:33:2a:a4:96:db:80:
                    f7:c5:bc:ce:37:ae:69:1b:18:75:a7:26:64:fd:cb:
                    a2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:44:08:F9:E1:1B:B2:03:18:DA:AD:E2:D9:43:AD:98:40:55:90:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8f15a50b-7fa0-36a8-a927-5270cdd2e812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4d:54:be:a6:a8:16:b6:7e:82:6e:15:0e:b3:e8:35:68:c5:
         eb:d8:47:48:69:14:ff:70:9d:51:ba:2a:37:7e:67:8d:1c:9c:
         11:7b:8e:4f:1c:6f:e0:77:b3:db:89:d3:b7:02:b3:61:df:ee:
         c3:8d:7e:fe:ac:09:d6:bb:2d:a7:c8:da:93:5e:fe:5c:20:d8:
         e6:7c:95:11:ca:ae:99:e6:0b:9e:21:1c:2a:84:7f:08:70:52:
         75:98:bb:8b:ef:5c:90:1b:4b:eb:94:b2:c9:b0:42:58:ab:dd:
         a1:58:59:79:aa:a9:e7:cb:00:5e:8b:1e:2f:00:3e:14:47:ae:
         c1:5e:4b:0e:6f:09:68:92:9e:26:67:e6:1e:c7:86:07:9d:dd:
         cd:d8:85:46:3a:7c:db:49:46:14:b0:51:d1:e4:9a:fd:41:51:
         c2:67:f7:f8:48:de:d7:84:27:80:0a:4d:56:b4:c6:0a:85:f3:
         6f:c2:ca:0b:47:c5:0d:6c:55:a3:f2:21:b4:12:cc:4d:6b:80:
         fe:25:e2:a5:13:4d:72:43:01:5e:69:f8:76:2f:0f:d6:d1:f2:
         11:dc:de:cc:06:5c:1e:a9:f5:77:5c:ff:33:1a:15:b4:01:92:
         fd:18:ac:79:56:f5:fb:a5:cc:95:66:3a:91:a1:7d:a1:59:5a:
         e9:33:e6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:08:49 2025 by rpki-client