Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37a413d7-77ca-31ec-9b13-620ab596be2e.roa
File:                     37a413d7-77ca-31ec-9b13-620ab596be2e.roa (raw, json)
Hash identifier:          6wS5yAky+pVg6bRo9hLtVxhrUQzoy2FNabj9o2hbp+k=
Subject key identifier:   34:0D:D6:11:71:AD:52:D5:A4:63:DD:7C:A2:ED:97:47:26:1F:6E:EB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B3C6CE1EF56198384E3313840
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37a413d7-77ca-31ec-9b13-620ab596be2e.roa
Signing time:             Thu 18 Sep 2025 13:55:35 +0000
ROA not before:           Thu 18 Sep 2025 13:55:35 +0000
ROA not after:            Wed 17 Dec 2025 14:55:35 +0000
asID:                     19905
IP address blocks:        173.19.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:6c:e1:ef:56:19:83:84:e3:31:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 18 13:55:35 2025 GMT
            Not After : Dec 17 14:55:35 2025 GMT
        Subject: CN=5afc8f54-6b95-4dda-9276-999154f1f1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b1:e1:41:7b:04:fa:86:24:a6:51:3d:51:6f:
                    56:f3:90:56:89:d8:56:b2:d5:99:44:d4:bb:ff:f3:
                    1f:87:62:95:d5:71:dd:9d:fa:46:69:77:d0:7b:ee:
                    7b:21:76:61:e0:46:0a:ff:35:7e:6a:60:47:93:45:
                    7b:45:16:ec:da:f4:6e:d7:4a:68:c0:ff:a1:47:06:
                    49:4a:ef:7d:20:d8:51:df:c7:b0:1d:dc:13:43:fd:
                    66:2c:f0:d5:a9:94:34:cb:b1:26:9a:d4:fd:36:98:
                    69:42:7d:5d:8c:14:41:f5:9b:78:b0:8d:50:53:93:
                    56:0a:ed:68:a4:df:27:4a:fe:fe:9d:63:a2:0c:49:
                    60:aa:5c:90:33:d8:e0:af:f7:5a:bc:0f:23:be:8e:
                    ed:e7:5c:17:9a:98:b7:00:24:0d:31:8b:92:59:20:
                    b7:62:6b:b5:74:9b:b5:8d:09:b9:97:c8:bd:3d:d6:
                    b1:c0:48:ce:cc:bf:2a:bf:05:22:d8:be:65:24:32:
                    32:76:2d:f1:46:40:2b:8a:b7:52:6b:40:fc:2e:f3:
                    5c:76:27:51:10:71:cb:b9:06:f6:0d:5b:fc:32:37:
                    6f:77:15:4e:af:c1:a1:ed:b6:46:0a:c3:4c:9a:5e:
                    bf:00:01:e6:32:f9:55:e8:14:66:31:4c:4f:5b:96:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0D:D6:11:71:AD:52:D5:A4:63:DD:7C:A2:ED:97:47:26:1F:6E:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37a413d7-77ca-31ec-9b13-620ab596be2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:96:f6:10:70:b4:48:c4:e3:2a:ab:35:2d:3d:66:b1:9e:6c:
         23:3c:f5:88:c6:9e:7d:46:34:f9:1c:61:7e:24:c2:9e:c2:d7:
         1e:2c:60:1d:6c:d0:22:2b:47:ae:86:09:ed:e5:25:85:08:4b:
         52:87:bc:fe:a3:9f:9b:f9:c3:ac:ee:fb:17:dc:83:90:a3:89:
         cd:a3:38:e3:a8:30:7c:47:35:09:b3:cc:40:57:97:b4:a1:ed:
         f9:de:5c:4d:7f:eb:16:f8:5a:70:c1:c9:38:44:fa:5f:fb:51:
         15:58:e1:e1:f8:26:60:fe:54:12:d7:7f:00:76:3c:92:ca:a9:
         f6:4e:49:e2:87:07:81:b0:63:0e:7d:a9:a5:9c:69:b9:f0:bc:
         4c:9d:46:99:6a:4f:fb:82:ad:f1:86:43:97:77:98:aa:ef:53:
         91:b7:a4:06:e9:46:c7:c1:db:27:5b:74:f3:e3:2d:8a:85:7f:
         0e:9c:64:32:72:b5:62:4d:5c:af:bc:6f:e4:5b:58:a9:74:8c:
         81:60:9d:f4:75:67:97:2b:22:85:da:f7:cc:dd:4f:ea:0b:da:
         cd:23:06:d8:54:4a:78:87:40:d2:a5:67:70:8f:d4:c1:46:bc:
         a7:a7:24:db:79:7a:41:a4:02:5d:13:12:49:c6:62:b5:11:dd:
         ee:c9:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:10 2025 by rpki-client