Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fc35d57-ca3a-3623-a700-c6c79e1fe0f3.roa
File:                     3fc35d57-ca3a-3623-a700-c6c79e1fe0f3.roa (raw, json)
Hash identifier:          rd2QvqwzVlj8SzPZgsJFlWndxnhVPt0ZNMbrBrLZMGo=
Subject key identifier:   F0:2F:22:7D:63:29:85:F5:75:79:05:67:EE:0B:A1:DC:C8:41:72:27
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE58AA03D649B690288B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fc35d57-ca3a-3623-a700-c6c79e1fe0f3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.18.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:58:aa:03:d6:49:b6:90:28:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=36efa78e-9d97-4b69-a115-af415fa3c988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a8:82:33:24:a0:ba:58:59:a8:a0:81:3e:89:
                    7b:52:96:3c:00:27:be:ad:0c:59:27:4d:d4:8a:26:
                    fb:cb:b2:79:e8:f6:07:71:6d:c3:87:e8:b2:d1:4b:
                    ed:8c:a5:4d:04:50:47:d0:be:42:e1:e6:f4:26:ec:
                    90:6f:7d:e1:d4:2b:75:50:e6:0d:e9:dd:93:44:1b:
                    2b:db:63:9a:b2:1e:83:ac:4e:93:d3:e3:e8:a5:96:
                    2e:bb:91:c7:4e:32:d3:43:8c:d3:fd:68:5b:14:d4:
                    9d:4d:8b:2d:76:35:4a:e1:1b:14:9f:ea:49:f1:71:
                    fb:a3:51:ec:c0:b0:32:0f:c1:4a:91:90:b5:0d:ce:
                    20:58:5a:85:e2:a0:6a:a6:7e:3e:ec:90:8a:8c:a1:
                    4c:b6:1b:e2:e2:ea:98:ac:89:62:b6:0e:dc:fb:20:
                    80:d7:12:aa:1b:35:b6:31:9c:09:81:07:2b:f7:1c:
                    2e:0d:67:6f:6e:09:2e:1e:62:ac:c2:f8:5e:ff:82:
                    f5:4e:61:05:cd:d7:c6:da:53:ad:fb:29:73:ae:59:
                    30:49:f7:e3:33:75:66:81:f5:9d:ec:e1:5e:b5:d7:
                    42:b7:ab:e2:5b:16:6c:7f:75:00:8b:39:7c:81:00:
                    c3:21:92:ef:02:79:c5:9f:97:10:8c:1b:dd:aa:ac:
                    57:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2F:22:7D:63:29:85:F5:75:79:05:67:EE:0B:A1:DC:C8:41:72:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fc35d57-ca3a-3623-a700-c6c79e1fe0f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:04:3b:d9:77:f2:bb:3c:45:92:aa:f6:b1:64:a4:0a:ad:16:
         2f:be:ef:7d:07:fb:e4:69:9e:49:65:fe:6b:af:99:2d:51:a3:
         d3:72:7c:ce:88:e5:8c:ac:8c:18:cf:33:68:1d:87:ba:0a:56:
         2d:83:b1:07:66:a6:0f:ed:c8:7e:72:7b:f1:ca:d5:07:9e:0b:
         97:2c:e0:ee:df:55:cb:5b:83:c5:3d:0d:d7:59:fa:e5:e4:6f:
         75:bd:77:97:c2:b8:56:db:a6:da:6e:c7:61:28:bf:4d:c8:40:
         17:c7:d7:84:ee:8d:80:90:f2:fe:05:70:3b:a7:39:a4:4b:50:
         e1:c8:8e:7a:44:ea:df:89:f7:07:12:03:23:31:c8:63:c1:03:
         3f:36:12:b0:f9:b3:db:fc:b6:fc:53:fe:93:fd:28:39:c2:31:
         ff:de:6f:91:b0:43:2c:2d:40:68:5b:44:37:05:49:53:4f:f5:
         be:d9:20:08:c0:cb:6c:66:70:11:49:9e:54:4d:7c:3a:af:d5:
         51:b6:24:60:65:e6:49:dd:a8:98:07:3e:f0:9a:4e:ce:8d:3d:
         7a:2c:2f:75:8e:b6:f2:1f:82:24:36:ac:d7:a7:fe:71:10:1c:
         34:48:b0:96:17:9c:a0:50:4a:4e:37:ff:7a:0d:90:29:c4:90:
         16:3f:a8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:42 2025 by rpki-client