Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19952207-4665-30d9-8636-fe596802d8be.roa
File:                     19952207-4665-30d9-8636-fe596802d8be.roa (raw, json)
Hash identifier:          DgumncKFTGzUwMXAbOoiVF7O8LgwBrtwEHCOwOYWVpU=
Subject key identifier:   9F:C3:C8:54:67:A1:10:9B:DA:C5:D6:3D:55:08:DB:07:DF:61:7A:AB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B79CA32B05BA66DE35317C300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19952207-4665-30d9-8636-fe596802d8be.roa
Signing time:             Fri 10 Oct 2025 13:27:55 +0000
ROA not before:           Fri 10 Oct 2025 13:27:55 +0000
ROA not after:            Thu 08 Jan 2026 14:27:55 +0000
asID:                     19905
IP address blocks:        173.30.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:ca:32:b0:5b:a6:6d:e3:53:17:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 10 13:27:55 2025 GMT
            Not After : Jan  8 14:27:55 2026 GMT
        Subject: CN=85e48068-7bce-408a-a325-cd718672dfe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c1:d3:d1:42:20:27:b5:ba:96:1f:fc:f6:a1:
                    ec:88:89:74:20:01:35:a7:d5:be:50:4e:87:6a:44:
                    3f:15:3b:31:1d:69:a0:d7:48:89:91:da:75:4e:88:
                    aa:3e:e6:00:07:54:8b:88:30:99:b8:49:c7:4f:bf:
                    b2:49:5f:0f:87:84:83:52:db:c3:3c:f2:0d:26:4d:
                    70:f7:4b:16:3a:d4:42:1d:3e:86:93:d1:9a:43:3a:
                    f0:c7:12:fa:49:ca:ec:d3:bd:18:6b:38:97:77:6d:
                    aa:e2:1c:6e:50:c7:35:df:94:dc:3b:e6:b1:d8:2e:
                    42:07:ec:79:e6:25:6e:f3:ae:15:39:09:a6:e1:ad:
                    1d:dc:58:79:a8:68:c9:1e:0e:d9:e2:89:cc:41:0c:
                    66:24:3e:98:3c:f6:9c:0f:ba:02:f4:c9:52:a0:fc:
                    28:fe:d8:1a:3f:fc:3f:4c:c8:1a:f6:58:53:2c:96:
                    f4:64:6b:80:2f:d6:7b:e8:f9:e7:80:92:a0:20:c8:
                    7e:62:69:21:9e:62:2b:a6:47:f8:5f:66:3d:f3:dc:
                    24:69:19:c5:d5:45:29:85:46:3b:32:c9:20:a8:51:
                    72:a6:a2:9a:73:36:6f:30:ef:a9:4b:02:45:85:c1:
                    e7:f9:93:a0:aa:ea:81:a1:db:0c:18:f6:72:9f:1f:
                    cc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C3:C8:54:67:A1:10:9B:DA:C5:D6:3D:55:08:DB:07:DF:61:7A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19952207-4665-30d9-8636-fe596802d8be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c7:f6:36:21:00:63:d2:9d:f0:05:2a:ea:fd:6a:e2:d2:df:
         df:aa:73:63:da:ae:7e:b1:25:69:11:30:8e:26:1d:16:8f:95:
         38:97:be:1e:8a:de:6f:6e:aa:18:e7:2c:09:e3:75:13:02:fe:
         00:9a:c1:ac:98:36:0f:7a:da:f6:3d:d5:db:16:d1:5e:b8:2f:
         15:93:aa:9d:80:1a:3f:c8:57:f1:23:3e:8f:df:11:c0:1e:85:
         30:68:13:b7:e8:35:94:41:24:a9:fe:d3:d8:f1:5e:5a:4e:ca:
         77:5e:5f:8c:7c:de:83:8a:db:36:79:4c:92:08:ad:82:a3:0f:
         95:f4:70:dc:77:4b:08:59:a4:1c:1d:d0:53:67:7f:5a:69:b0:
         89:2f:c5:63:46:a1:4b:7c:ad:b5:29:ca:21:37:84:8d:2e:62:
         b6:fb:08:51:fd:93:60:dc:1b:1f:a7:04:72:a7:3f:7c:de:c2:
         89:31:f7:77:fa:91:42:54:8b:cc:4e:bd:56:d1:25:98:ad:83:
         7b:ef:b4:65:27:95:08:f2:83:ee:38:67:de:3a:6a:81:2b:9a:
         82:1a:25:b2:ee:b8:97:a4:79:ab:de:88:6b:6e:b1:3a:c8:15:
         ec:e3:c0:ff:af:cf:6b:dc:16:a6:34:ea:83:81:30:67:09:a8:
         f5:0d:6f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:26 2025 by rpki-client