Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00e5be3c-6018-35ab-b4ad-bc4a13f5e9a4.roa
File:                     00e5be3c-6018-35ab-b4ad-bc4a13f5e9a4.roa (raw, json)
Hash identifier:          XGdpyxey75p+7P1EvzEehh+STdNt6YDtxcHcTlo5Y6k=
Subject key identifier:   D9:79:6D:45:17:DF:06:A3:67:F9:62:84:22:A3:7C:3D:72:98:22:A5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B56D74196FE918DAC5D6649A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00e5be3c-6018-35ab-b4ad-bc4a13f5e9a4.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        173.17.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:41:96:fe:91:8d:ac:5d:66:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=a142ad7a-7b4d-49ea-bad6-155af90e4e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:3d:2b:75:56:ca:ed:c3:5b:45:d7:3b:98:
                    6c:c4:46:66:ec:a2:4a:e2:d5:e5:99:2d:a9:77:0d:
                    54:0b:4b:4d:1f:ed:e8:08:05:a3:0e:66:0a:8e:fd:
                    f4:95:cd:7f:08:36:a2:0d:9c:db:02:be:16:48:73:
                    fd:dc:91:52:b6:71:7f:ff:97:4e:7b:55:5b:7e:ac:
                    5c:53:e1:73:2c:81:f8:33:08:3a:3e:a7:5b:2a:c8:
                    e9:0a:0a:de:da:47:0a:41:27:37:ee:aa:eb:22:c4:
                    97:68:97:d1:5c:88:cc:74:64:fd:07:c0:89:0a:21:
                    83:a9:98:23:ab:35:9e:fb:4f:ec:41:47:a7:17:ee:
                    93:f2:36:1c:ce:0b:7e:1b:38:91:18:da:27:74:cf:
                    15:69:ac:39:ce:c0:ef:07:24:5e:07:04:41:88:96:
                    fe:86:e2:85:e1:02:65:5a:38:8c:69:80:b3:5b:1f:
                    ff:74:87:67:d3:91:56:17:0f:f4:2d:e2:eb:9c:a5:
                    2c:41:65:1f:62:f0:9c:5f:04:75:d5:b6:19:30:bb:
                    4c:ca:92:43:a6:04:78:d3:52:6f:5a:e6:79:22:36:
                    34:86:2b:fc:0f:51:64:bc:fd:55:e2:c7:33:8a:53:
                    a3:f3:f9:42:9c:a7:5f:a8:fa:0c:0c:c5:a5:b7:33:
                    b4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:79:6D:45:17:DF:06:A3:67:F9:62:84:22:A3:7C:3D:72:98:22:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00e5be3c-6018-35ab-b4ad-bc4a13f5e9a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fe:82:16:70:20:3b:0b:6a:41:f5:aa:21:bd:7e:34:45:f7:
         ca:51:6b:aa:12:f7:86:ef:6b:7a:39:2d:fb:e6:26:02:cf:84:
         ab:b9:3f:bf:f5:5b:28:25:80:a9:25:ad:45:cf:93:85:9d:f3:
         0f:76:03:56:f2:61:75:36:ea:2c:13:13:ad:00:db:37:77:59:
         ae:0b:2a:e9:ae:72:b0:9c:22:16:19:30:1d:97:e0:3b:dc:2f:
         6a:2d:6b:8a:d6:ca:89:43:8a:ce:0f:1e:b9:0f:c8:01:94:79:
         7f:18:62:8d:b1:58:d6:77:cc:08:fb:1d:1b:08:0b:96:b7:09:
         84:6a:2c:40:eb:81:53:03:60:e1:91:3c:60:a4:0b:44:4b:f0:
         30:a1:97:c8:27:a0:22:6c:2d:a9:87:ce:65:fe:21:89:aa:61:
         39:81:e4:4d:f5:93:19:72:3b:93:01:ce:1e:b0:51:d5:3d:37:
         6c:2c:7d:4b:d4:0d:6e:4d:9a:12:93:ee:59:d3:64:2d:f5:dd:
         45:a3:12:76:f5:b3:8f:c7:92:4e:18:80:b7:85:48:4b:3e:00:
         f5:65:1e:41:07:c0:5e:52:06:fb:35:df:fe:f8:7c:a7:40:89:
         de:aa:5f:9a:de:f7:ea:04:fa:1e:b7:df:8f:ed:8b:09:38:6d:
         5a:38:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:18 2025 by rpki-client