Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/15f3eed0-47a7-3b5d-921a-e9f9594bbf0c.roa
File:                     15f3eed0-47a7-3b5d-921a-e9f9594bbf0c.roa (raw, json)
Hash identifier:          kP9wnHtuMFca4OfGCyncV61GYxRPRE9EOqaZ5vRvAMc=
Subject key identifier:   CE:70:9A:E6:4E:AE:D8:75:3C:CC:DE:42:46:9F:0B:6E:96:50:E5:0B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B4C3752FAB31E83423E5A6840
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/15f3eed0-47a7-3b5d-921a-e9f9594bbf0c.roa
Signing time:             Wed 24 Sep 2025 05:40:36 +0000
ROA not before:           Wed 24 Sep 2025 05:40:36 +0000
ROA not after:            Tue 23 Dec 2025 06:40:36 +0000
asID:                     30036
IP address blocks:        173.19.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4c:37:52:fa:b3:1e:83:42:3e:5a:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 24 05:40:36 2025 GMT
            Not After : Dec 23 06:40:36 2025 GMT
        Subject: CN=99ba25d2-7f51-4865-bd34-66e3e4e0b027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:cc:76:d6:19:a8:94:db:6a:bc:ec:51:00:
                    c7:5f:17:3c:aa:82:4e:b8:3b:2b:83:7a:1c:4d:a7:
                    21:10:ed:db:76:b8:cd:74:ae:fc:e4:f4:c2:b4:85:
                    b1:46:46:25:1c:3e:57:67:62:ee:5d:43:32:4d:5b:
                    8c:7a:8d:9d:24:7e:08:24:be:d7:42:32:95:ea:ee:
                    66:c6:9b:c6:95:5f:31:a8:0d:16:f4:ec:87:9e:88:
                    31:bc:0a:9d:40:f0:e2:11:88:fa:ef:73:03:1e:9e:
                    a7:57:83:12:9e:5b:5f:fb:9d:2d:95:0e:41:88:0c:
                    b6:ba:d0:fd:3c:0b:90:3f:9c:95:dc:c6:31:5c:59:
                    2d:50:d8:3d:76:fe:62:03:3b:50:03:9e:d8:d8:ae:
                    8e:dd:03:da:d5:6e:d4:0c:e5:7e:d1:25:ce:bf:ce:
                    f6:d3:7a:fe:c9:1c:6e:65:9f:b6:69:49:e5:5e:5a:
                    89:bb:d8:c8:3d:62:19:80:ee:9c:33:2f:af:3e:a7:
                    85:20:b0:20:1e:1a:2d:9a:ca:cc:03:04:63:17:32:
                    b6:52:77:b1:70:b6:fd:7c:0f:2c:25:3f:15:55:69:
                    54:5f:84:24:d5:16:93:6b:4d:41:7a:5d:bb:61:7f:
                    16:eb:45:76:e0:4c:5c:96:44:b6:ec:71:7a:b6:fc:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:70:9A:E6:4E:AE:D8:75:3C:CC:DE:42:46:9F:0B:6E:96:50:E5:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/15f3eed0-47a7-3b5d-921a-e9f9594bbf0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f5:b5:6b:7e:ac:fe:1c:6b:d8:28:16:64:55:ae:cc:32:91:
         cb:59:bf:b9:2b:75:0a:90:39:ee:38:db:53:a0:dc:8a:54:8d:
         a7:02:0c:1f:e9:a9:78:f3:46:15:da:ac:50:d6:26:0b:6c:a3:
         63:4a:a6:c7:f1:cd:9e:78:80:49:bf:2c:3d:1a:d7:d6:bf:54:
         8c:91:8e:38:cf:c6:66:44:4b:23:a7:33:4f:61:23:a6:d9:12:
         28:aa:33:d1:9f:50:64:ed:2f:eb:f0:f4:74:e1:22:15:4b:14:
         ed:39:61:c6:4b:d4:44:6c:41:ed:dc:65:3a:23:f8:05:05:0e:
         15:c4:5b:87:24:f1:d9:e8:dd:07:70:80:8d:49:7e:11:09:01:
         3b:23:c4:d6:6e:ea:27:34:60:66:63:b4:98:77:a8:f3:e9:75:
         41:57:e8:0d:5a:42:40:06:34:05:e4:05:c3:d7:79:a3:b6:bc:
         d6:33:92:c6:e6:6a:21:cc:e0:9b:56:57:d5:f8:46:2f:9b:0c:
         62:58:73:04:04:57:e1:95:37:aa:3b:80:e4:12:fc:b9:0a:4d:
         8a:ba:71:56:e0:fe:c5:81:cf:a2:27:16:b2:a8:49:c1:cf:a4:
         ad:73:90:70:b5:8a:81:b3:85:5a:9e:4b:27:3b:ad:a6:1a:f4:
         c9:3b:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:34 2025 by rpki-client