Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/44953285-e796-3cdc-9db9-caa994ba9a28.roa
File:                     44953285-e796-3cdc-9db9-caa994ba9a28.roa (raw, json)
Hash identifier:          OAAXROgoQRmjoZkL99mtfYEJytMl7dz0UzXPo15Rd08=
Subject key identifier:   35:D3:DB:D1:B6:4A:AD:90:65:74:61:2B:27:E2:A0:84:69:B5:C4:16
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE569973E8B4DE7AAD6700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/44953285-e796-3cdc-9db9-caa994ba9a28.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.16.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:56:99:73:e8:b4:de:7a:ad:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a60e253e-b496-49dc-a18a-4d2d92548ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:97:87:f4:54:18:5d:32:84:86:95:73:d5:
                    d6:25:94:17:61:14:3b:42:c9:95:75:56:04:b7:1d:
                    f1:46:2d:60:b0:07:ac:7f:66:19:11:de:22:b3:19:
                    3c:0b:ca:94:63:c7:56:c9:51:7d:ae:5e:c6:dd:0c:
                    8e:ab:c6:52:79:9b:42:32:b1:46:8e:d9:15:e3:c5:
                    f6:41:52:4b:f3:07:4d:57:2b:1f:97:a1:fb:49:05:
                    99:ad:b7:e3:ba:0c:3b:64:db:46:95:4f:1b:ef:46:
                    80:06:40:29:91:c7:fc:36:94:87:b0:47:e8:42:3a:
                    f8:f3:f1:70:7b:62:6b:08:db:e5:35:51:19:ce:3a:
                    69:f5:c7:0a:c6:09:61:d4:6e:6e:f6:29:23:b1:e9:
                    d0:f2:1f:d6:1b:bb:e6:bd:21:54:23:dd:93:b0:02:
                    8e:9b:53:33:41:08:5d:6c:69:a4:f1:53:fc:99:0b:
                    a4:0e:2f:dc:53:6b:a4:21:15:84:79:82:42:55:3c:
                    ca:e6:43:4f:25:d6:cc:03:ba:cb:c9:29:01:44:55:
                    15:d5:6d:c6:11:59:39:18:7b:d9:a7:0d:27:49:f9:
                    ae:9c:ac:e1:ec:f9:63:1a:1c:63:88:15:a1:27:34:
                    cb:7b:09:7c:d3:94:24:ba:d2:18:84:a6:b3:f8:e1:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D3:DB:D1:B6:4A:AD:90:65:74:61:2B:27:E2:A0:84:69:B5:C4:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/44953285-e796-3cdc-9db9-caa994ba9a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:35:33:cf:b9:da:7c:b4:cc:0d:12:e8:a7:0c:36:65:33:3d:
         d6:0c:d9:7d:be:12:3a:9c:3a:00:fa:b9:30:73:f3:36:df:00:
         ab:70:0f:37:13:b5:74:39:a7:6d:62:3f:4e:e9:0c:e1:ce:91:
         79:a4:7b:2e:1b:5e:72:b7:54:88:7f:5f:5e:73:ef:0a:a2:ea:
         fb:2b:83:e9:f3:50:81:93:14:05:c7:30:e0:bd:db:e9:4e:10:
         2f:05:a9:78:de:99:f2:e7:21:9c:0f:13:ca:53:71:ac:00:bc:
         7c:aa:60:9a:31:29:b5:fa:fa:37:5c:7e:f2:a7:ab:a7:fd:d5:
         c5:ae:f2:12:d1:c5:fb:1f:52:1d:c0:59:4e:70:45:97:3f:ce:
         a1:fc:9f:7d:43:af:b0:98:e8:d8:b2:af:5d:dd:f5:05:bf:de:
         b5:85:55:af:ab:1f:7c:70:f6:0a:18:1f:52:ee:8e:ae:56:e8:
         2a:60:1e:4c:e9:f8:fd:84:b5:64:85:ca:dc:d7:f6:9c:f0:12:
         e1:e1:54:b4:c1:66:fe:59:31:4c:30:48:52:53:76:a6:cf:c8:
         09:fc:de:9d:bb:fb:88:cd:cb:aa:b3:69:9f:86:32:fa:3f:0a:
         a8:ba:11:85:8c:75:36:3b:fa:c8:5c:9e:f9:c8:b8:24:6d:7c:
         9b:93:b8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:56:12 2025 by rpki-client