Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b66c70c-fd19-3222-a957-4c3c7233a7ab.roa
File:                     3b66c70c-fd19-3222-a957-4c3c7233a7ab.roa (raw, json)
Hash identifier:          GQ8lNVixyeUWTr+q/pk89GwRtpx+xd2NfQicLsHmZqc=
Subject key identifier:   17:19:32:D3:EC:94:5A:FD:0B:54:79:7F:3A:98:3F:55:38:A8:1F:49
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B609CB5D5E8EB0C4DD1EDD760
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b66c70c-fd19-3222-a957-4c3c7233a7ab.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     19905
IP address blocks:        173.30.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:b5:d5:e8:eb:0c:4d:d1:ed:d7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=c4aadd10-a51f-4a15-a483-3ce70cd2d443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:7d:81:29:84:c6:2a:7d:7f:23:98:a0:97:
                    9e:a8:8e:fd:bf:d9:3c:f9:c7:5a:b0:a8:06:58:c2:
                    42:9c:89:b3:56:75:94:7e:c8:96:ba:15:65:66:7a:
                    82:3a:f0:3f:4a:f7:91:cb:e3:5b:5c:09:32:2d:58:
                    40:7c:10:25:15:04:95:df:43:dc:f4:44:3b:2f:50:
                    b2:5c:53:35:38:27:36:d1:0b:71:64:ea:17:7e:61:
                    21:19:12:6b:65:0e:fb:2e:d7:68:cb:44:41:c5:1d:
                    32:15:20:77:c3:3b:bf:c6:9a:cf:a8:03:9b:39:c3:
                    5d:0c:37:cd:62:1a:e5:b7:d2:07:77:7d:8c:92:5a:
                    1b:69:82:62:5f:f4:f5:cb:e9:4f:78:25:ab:94:4e:
                    28:35:a5:57:10:11:7f:c7:3b:b2:be:1f:b1:9f:6a:
                    1d:1c:55:e9:b8:7f:49:3e:7b:77:25:96:04:fa:48:
                    0c:d2:df:4d:dc:91:d0:23:c8:fe:0c:fb:1d:15:d1:
                    23:0a:4d:56:23:da:85:8a:e5:54:6c:14:f2:88:62:
                    07:c0:13:27:fc:61:88:ef:38:3e:d4:c7:77:81:bc:
                    d6:a0:de:11:a8:e7:bd:5e:0d:db:11:ef:94:85:45:
                    d5:8f:53:fc:de:7b:e5:ae:5e:f2:9a:f5:25:0f:3d:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:19:32:D3:EC:94:5A:FD:0B:54:79:7F:3A:98:3F:55:38:A8:1F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b66c70c-fd19-3222-a957-4c3c7233a7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:3b:8c:96:4d:09:38:76:85:9a:df:5c:8a:15:cc:bc:8a:eb:
         d4:8e:b2:82:6e:c0:5a:35:09:45:9d:c8:61:1c:6f:f5:6e:98:
         7c:07:4c:e3:c3:1a:11:01:8a:07:1c:3f:32:c0:c7:8f:61:3f:
         19:04:fe:dc:f4:f4:4a:bb:bc:f1:82:b0:02:dd:59:eb:10:31:
         89:46:59:f1:c1:ef:7a:d3:91:94:f1:25:d0:48:66:c1:12:3f:
         d2:f2:1c:e3:d8:99:b5:f3:cd:90:44:61:f9:b4:e4:27:86:4b:
         de:82:ca:fa:43:5a:4f:00:54:c0:86:79:62:44:00:7d:21:9f:
         52:66:ae:af:60:be:b6:be:59:1b:ab:56:9c:32:36:00:b8:8f:
         a5:bc:96:45:c5:76:00:69:6e:5b:8d:40:6b:4a:e9:70:d0:cd:
         8f:49:88:60:9f:f9:65:59:1a:46:48:7c:02:1f:11:b1:2a:c6:
         c4:10:be:ec:33:61:06:0a:73:ed:2c:17:1b:ab:95:b5:a6:b7:
         da:eb:c5:f0:61:a3:a3:f5:2c:3d:76:27:e5:3b:6c:5e:6d:c8:
         d5:51:51:54:2e:33:2f:19:a1:0c:53:39:81:33:23:80:95:81:
         16:ba:a3:47:5e:a7:7b:9c:49:f2:1c:74:6e:86:f8:09:56:cd:
         41:01:3b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:44 2025 by rpki-client