Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e5affdb-6980-35fd-9b7b-2528975a41af.roa
File:                     0e5affdb-6980-35fd-9b7b-2528975a41af.roa (raw, json)
Hash identifier:          9lqG3dwFcdAcpGXrdIx6ic328ECTXm1/0usCu1xyWd0=
Subject key identifier:   39:66:5F:46:6F:AD:7E:A2:06:0A:7F:1E:21:B3:21:87:20:B4:9F:6F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE51EEAA4BD36DD9A77780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e5affdb-6980-35fd-9b7b-2528975a41af.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.17.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:51:ee:aa:4b:d3:6d:d9:a7:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=56c29ceb-af48-491b-8fe3-86e3613afd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:ca:3d:89:0e:6d:bc:f3:dc:17:45:3b:ce:
                    cd:f8:d8:2e:d4:67:23:67:d4:19:ce:15:b0:5d:0a:
                    cd:d1:e1:23:ba:4c:2e:9a:c0:aa:59:87:5a:ad:40:
                    45:2e:ee:d2:09:48:37:f8:56:a0:b5:8e:6e:ca:7f:
                    aa:df:46:19:b6:4c:56:a0:dc:7f:8b:96:00:06:9e:
                    bd:63:f2:7b:fc:fc:18:9e:47:e4:15:0e:4b:29:bc:
                    1c:8e:0f:28:3f:4d:3b:10:06:2a:cb:7a:83:cf:0f:
                    7f:95:a4:3a:44:e7:44:00:9c:cb:f4:cd:98:68:41:
                    25:da:e1:86:0d:ab:95:37:d9:40:7a:6b:72:af:9f:
                    b1:f7:b2:60:68:64:7a:ba:03:39:4b:67:df:86:d9:
                    0b:2b:99:ce:e9:6f:06:01:72:a2:b3:6b:33:67:09:
                    34:cf:42:6d:58:29:f2:d3:8d:9c:fb:c1:fe:fe:85:
                    ce:38:e4:6b:fa:67:9b:17:78:96:6a:66:2f:52:f6:
                    4d:3a:67:38:02:ec:7f:b9:8a:75:60:0a:c4:84:65:
                    a2:db:e0:71:89:61:38:1a:98:0e:81:30:38:81:33:
                    77:14:85:87:9f:1f:23:3f:6a:6f:da:73:15:6a:21:
                    a3:16:0b:c8:80:b2:20:e5:d0:7f:86:45:35:72:68:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:66:5F:46:6F:AD:7E:A2:06:0A:7F:1E:21:B3:21:87:20:B4:9F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e5affdb-6980-35fd-9b7b-2528975a41af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:37:4d:b4:a5:46:3d:0a:d3:ad:df:e1:6f:90:0e:69:b3:05:
         58:34:c1:f4:67:3e:b4:c6:c0:c9:97:f4:4a:b1:1d:2e:a3:80:
         11:4e:88:48:1f:c1:d4:55:4a:fb:6e:76:7b:43:4b:18:f1:02:
         05:7a:58:d1:17:fd:95:60:9a:21:f5:1e:78:1e:53:5a:5b:e9:
         4c:e3:6d:3c:9f:fe:87:c5:49:91:ca:53:ae:1e:61:d9:06:76:
         3c:43:71:08:3c:55:8a:4d:57:04:ab:c5:9c:e1:e7:d4:40:3e:
         4d:87:8a:30:e9:e3:07:65:35:4c:62:75:65:fd:67:1a:e5:98:
         4c:9c:30:b1:5b:c6:6a:f8:a2:c4:03:33:3d:65:1a:45:8f:88:
         e8:7d:09:2b:00:72:1f:0f:a4:f6:6d:a5:bb:3d:45:61:6c:73:
         9b:a6:75:76:94:d1:bb:55:24:9e:3e:83:c3:98:53:42:cc:03:
         a6:97:83:e0:a4:3f:54:30:6a:8c:0e:d2:bb:99:f7:e5:fa:d6:
         0e:4b:bb:fc:f8:0b:eb:48:84:30:78:29:f3:8b:3d:40:69:07:
         64:37:a8:6c:b6:6a:73:e6:38:30:fe:b3:50:e3:a1:ba:74:08:
         7f:14:7f:1c:a7:5d:c7:65:cd:14:b0:aa:4a:0e:05:be:6e:94:
         c2:61:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:25 2025 by rpki-client