Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33cf24bd-40d4-324a-baf1-f5492e9fc710.roa
File:                     33cf24bd-40d4-324a-baf1-f5492e9fc710.roa (raw, json)
Hash identifier:          ufgaH5MDNNpuoGq9GkJ2bdYv6Eqy2kTLFnDPsR+t3yo=
Subject key identifier:   81:F1:E6:7B:AE:75:2C:C4:35:81:95:31:7B:CB:D6:1D:86:FA:4F:F0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CCB2333AC610B626A74D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33cf24bd-40d4-324a-baf1-f5492e9fc710.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.30.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:b2:33:3a:c6:10:b6:26:a7:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=307c04f7-a439-4a0c-98dc-c30a8590dd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:d5:db:22:10:8d:0c:ce:89:7c:ce:2c:3f:
                    71:71:e1:69:60:b2:a9:70:ac:58:9b:4f:26:1d:e3:
                    ad:90:4b:3c:ba:cd:62:ec:07:46:f6:32:de:32:13:
                    86:cc:f2:b0:a0:13:00:12:7a:68:ea:df:ec:2c:ac:
                    b1:37:16:e3:d7:2f:8a:52:38:c2:d5:9b:a2:8d:e0:
                    b2:9b:e9:89:f2:fb:b7:89:a7:b6:15:80:cc:1c:b3:
                    65:8b:8f:4a:1c:0e:89:ea:a6:83:a3:b2:da:8f:39:
                    59:70:47:3d:b0:48:fc:38:5f:2f:54:78:64:cd:ae:
                    67:e4:47:ab:ad:65:9c:5e:94:b0:e4:71:87:e1:93:
                    71:9b:61:91:83:5b:ed:06:a5:c9:e0:89:4b:72:4e:
                    26:ff:16:4e:90:ec:f0:87:8c:0f:ce:05:82:8a:ef:
                    e1:c3:5e:b8:71:18:68:32:7f:2e:9f:c1:8b:f9:63:
                    73:e2:2d:13:b8:dd:c9:d6:2e:ec:ec:73:27:fb:88:
                    52:4d:b5:40:a7:41:4c:a6:11:0d:27:05:34:73:30:
                    a4:4f:ff:76:74:c0:a9:1d:16:36:bd:59:1e:98:b8:
                    28:ad:66:a8:95:f8:c7:a0:44:93:53:1d:84:38:f6:
                    9a:ba:65:a4:17:9a:b3:08:78:9f:b0:2a:4d:27:38:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F1:E6:7B:AE:75:2C:C4:35:81:95:31:7B:CB:D6:1D:86:FA:4F:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33cf24bd-40d4-324a-baf1-f5492e9fc710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:7e:0f:6f:7e:37:bb:0a:98:2e:1c:5a:bb:6a:90:c5:20:45:
         b8:4a:f0:2a:1c:45:4c:e3:23:a0:90:69:60:4e:e0:0d:ec:a2:
         b4:3b:60:97:b4:35:22:c5:d0:65:06:e7:3a:b3:53:6d:da:48:
         0c:32:9e:14:58:28:f9:0f:ee:40:d0:f5:34:dd:02:58:3d:1e:
         c0:5b:ae:06:d7:44:ad:15:09:17:fe:8b:92:43:8f:3d:8f:a4:
         32:17:3c:56:13:8e:ef:82:51:0e:42:24:82:b8:18:77:96:a0:
         e4:f1:db:9f:cb:4e:0e:64:03:ea:bc:b2:05:cd:da:16:28:9b:
         bc:f3:2d:c5:40:72:5f:18:30:d3:9a:18:91:f3:3b:29:23:b2:
         c1:5d:76:c5:98:e4:58:6a:ce:f3:dd:d6:c9:e1:5a:c0:9f:f7:
         47:7a:55:c2:cf:dc:f2:26:7a:44:04:f6:30:75:48:09:11:87:
         a3:2e:56:8f:a8:0c:f5:23:fb:89:13:c7:2a:1d:f2:5e:9a:97:
         bf:10:95:0a:0e:6a:c0:0c:a0:e8:4a:4c:7b:f6:11:8b:9e:e0:
         2c:bf:95:7a:8a:7a:4c:1c:a8:24:53:10:f6:69:d1:77:43:8d:
         1f:e9:76:6a:bc:45:4b:cc:98:6b:c7:0b:9f:33:cb:25:d4:19:
         9d:fd:95:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:41 2025 by rpki-client