Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9bddad1c-404b-3998-b6be-b3976cf51275.roa
File:                     9bddad1c-404b-3998-b6be-b3976cf51275.roa (raw, json)
Hash identifier:          wXydRHamwGONALrSb5l/07MyVO/yO/dPHTN7hC2QeD0=
Subject key identifier:   B4:CD:F6:04:BA:69:8B:7B:B1:DB:C7:C0:16:72:81:27:45:71:66:F1
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584B13D6AF8ABF85245F97ED1980
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9bddad1c-404b-3998-b6be-b3976cf51275.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        173.199.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:af:8a:bf:85:24:5f:97:ed:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=12c79563-0b34-4785-9d59-9aa605b9720a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:7d:ee:12:c4:23:00:da:46:fd:4a:f8:2e:
                    26:3b:e1:e2:26:4f:47:5a:64:c7:5d:49:69:ad:3f:
                    d7:83:4e:16:d2:16:1a:4e:30:83:03:4c:0d:c4:f2:
                    55:7a:00:1d:91:2e:b6:15:eb:ee:ec:1e:69:48:7c:
                    26:2b:d4:41:33:64:21:ec:81:a9:44:44:8b:cf:f5:
                    99:08:d7:a1:89:64:01:39:95:7f:74:08:cd:c1:96:
                    8c:ce:94:4f:38:a6:ec:6f:e3:c5:a5:f7:8b:0f:da:
                    98:92:19:8b:44:50:b9:4f:88:cb:d0:f4:e0:02:dd:
                    4e:fa:31:e2:9c:d6:3e:41:2d:57:3f:9d:88:4b:16:
                    cd:91:bc:81:ed:9c:25:37:10:b1:4d:05:77:18:78:
                    c1:f9:3f:26:ae:a6:72:17:cd:46:2c:69:9c:d0:42:
                    d4:a9:a9:be:58:d9:92:20:d3:3c:93:2c:fd:de:4a:
                    04:f4:59:21:6d:56:9e:d5:c5:5f:9b:7e:e8:d5:d0:
                    2c:eb:29:e7:69:96:9b:b6:11:ee:fb:76:a3:b4:de:
                    11:17:f1:5c:49:7e:06:16:08:a3:92:5b:5c:b9:43:
                    63:8e:69:ac:19:66:7d:72:65:bb:fb:47:c2:a6:22:
                    6a:82:d1:6e:87:0e:12:cf:41:a2:fd:68:17:37:cc:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CD:F6:04:BA:69:8B:7B:B1:DB:C7:C0:16:72:81:27:45:71:66:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9bddad1c-404b-3998-b6be-b3976cf51275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:13:78:e4:3d:a7:27:9e:ab:91:28:8d:ed:cc:73:85:c8:17:
         bc:6c:d4:9d:54:b4:9b:4d:55:e9:46:ce:ff:2d:dc:12:fe:6a:
         51:a5:5c:f5:21:c0:71:8b:32:a4:83:07:50:d1:89:dc:3b:51:
         07:f9:1a:33:79:b1:9b:d0:1d:db:14:ee:aa:58:c2:75:6c:f2:
         a9:fd:01:0a:03:06:a9:cc:10:72:47:fe:69:29:48:35:ad:2a:
         46:8e:61:e9:2f:58:c6:5f:4e:5f:72:22:0e:14:38:b4:3e:63:
         c3:a1:d2:e8:0f:7b:58:29:28:09:e5:e4:56:cd:5f:2a:5e:7a:
         0b:64:d2:ea:bd:d8:12:8e:9d:0d:3c:55:31:4d:95:c5:cc:f2:
         5d:35:58:5e:60:b8:1e:d1:01:29:94:e2:2e:3b:94:37:8a:a1:
         30:87:64:03:0c:18:36:11:e8:e8:8f:90:19:5e:9a:d3:88:74:
         26:5a:89:44:a6:15:ac:4e:06:4d:db:79:bc:07:26:54:69:19:
         2e:8a:dd:4d:f6:5a:eb:c5:3a:e5:45:8b:fa:c5:9e:cb:15:ef:
         5c:37:c7:84:08:97:c8:d7:f1:d1:2d:92:90:63:4c:50:a3:33:
         b8:3e:2f:aa:23:8c:6e:05:e7:9b:6c:a5:1d:69:c6:cc:7a:96:
         f1:fb:ec:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:09:20 2025 by rpki-client