Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11b2fc5e-84ec-3662-b5d7-f466139009e0.roa
File:                     11b2fc5e-84ec-3662-b5d7-f466139009e0.roa (raw, json)
Hash identifier:          fgFad3RpBpuGByB86DuK0hXbNR04b+IW0BbGMiDfjpQ=
Subject key identifier:   9C:70:11:7D:54:0C:49:1B:DE:F8:1D:02:80:BC:21:1B:5B:99:15:FE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE5DB5477AFDECBD0CC280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11b2fc5e-84ec-3662-b5d7-f466139009e0.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.19.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:5d:b5:47:7a:fd:ec:bd:0c:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2883a83f-fc7a-4169-994e-efb6426b67e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:d3:6b:36:4c:3e:cf:a5:a2:02:9c:95:55:
                    0d:6a:72:c0:83:8f:8d:19:d5:56:8f:cd:6b:bb:a3:
                    df:b1:a0:26:1e:6d:fe:d8:2e:49:6b:85:d2:c1:ff:
                    e9:c4:02:15:a1:48:7a:2e:40:c6:a9:57:3e:8e:60:
                    80:61:40:cf:60:01:13:3c:66:c7:74:df:ee:37:38:
                    96:c9:13:65:58:09:86:30:4a:4d:dd:13:2e:36:5a:
                    52:10:66:a7:77:63:33:eb:c6:7d:be:98:21:56:61:
                    2a:cf:c5:6b:6d:1b:cb:78:11:39:c5:c8:df:44:69:
                    f8:1f:ce:19:c5:b4:da:e2:29:b4:2e:a0:11:7e:77:
                    22:d8:45:8a:56:5e:db:00:86:01:f3:a2:2f:a0:cd:
                    41:2e:87:14:64:3d:e6:7d:40:58:34:dc:c7:2b:ca:
                    1e:0b:2a:f2:4b:53:81:47:b1:a5:2c:03:24:02:08:
                    a9:7f:89:3a:23:c9:4f:da:27:ab:87:8e:54:c8:11:
                    42:ea:46:40:6c:63:60:93:cf:7a:c1:86:8b:b7:b6:
                    a7:48:8b:f6:ac:5f:d0:51:f3:8d:8a:d7:30:cf:c0:
                    00:88:a5:15:76:d1:da:c8:25:4a:28:3e:5d:27:e5:
                    05:78:74:ca:1c:bb:ec:2b:40:df:f3:54:0c:09:97:
                    1b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:70:11:7D:54:0C:49:1B:DE:F8:1D:02:80:BC:21:1B:5B:99:15:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11b2fc5e-84ec-3662-b5d7-f466139009e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:44:56:56:c7:0b:f8:b4:93:35:b5:c0:f4:05:b5:d7:46:
         09:29:69:b8:45:4e:ac:d3:3a:42:92:e0:2f:18:3b:d1:a7:a8:
         0a:ef:99:24:22:64:87:08:eb:50:96:40:17:9d:cc:a1:ef:87:
         ac:ce:d4:a3:6b:92:49:60:f6:86:14:ae:14:d5:52:25:b5:51:
         c5:f3:d3:fa:a9:67:92:ae:ec:87:86:f3:81:f1:45:a8:7b:e7:
         4b:c5:10:6e:d1:64:5a:5e:5d:13:5b:e9:3a:3e:d2:56:05:a3:
         58:bd:1a:34:41:dc:5d:da:42:7d:d7:e5:cd:03:1d:30:ac:0f:
         ac:da:7a:2a:2f:c2:2c:f7:2b:ea:67:eb:c7:2d:db:e7:49:44:
         1e:9a:f6:7f:6a:ed:ad:71:37:e8:bc:db:c9:c3:dc:22:97:11:
         cf:ac:22:30:cf:cf:05:dd:de:59:e4:5a:dd:4f:de:1d:e1:f3:
         be:1d:50:e8:20:35:00:d0:dd:33:8a:05:50:96:14:ed:38:99:
         44:1a:91:ff:dc:b8:9c:ec:49:52:6e:f3:02:11:63:96:10:76:
         af:ce:06:83:51:fe:09:5d:d5:af:39:80:8f:de:ae:4f:e2:8d:
         a8:bb:09:e6:a9:d1:95:91:52:92:63:0f:19:75:9f:a0:38:1b:
         fe:e4:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:56:21 2025 by rpki-client