Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/469a78cc-8d57-3c51-bf7f-67969fc276d8.roa
File:                     469a78cc-8d57-3c51-bf7f-67969fc276d8.roa (raw, json)
Hash identifier:          5AHhv0bjaGs/dnfiXmTh1NEdZnZ1I7372u+tVP3z3+A=
Subject key identifier:   F2:4C:98:26:A1:AD:03:3B:64:7E:9A:DA:FB:0D:F5:40:32:CA:D8:B7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6797ED7C61AE44FF0DDD1080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/469a78cc-8d57-3c51-bf7f-67969fc276d8.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        173.31.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:ed:7c:61:ae:44:ff:0d:dd:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=f17f35c4-0e76-4bb0-b684-2f9a61f7070d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:9b:0a:c1:0a:0d:ba:bd:c8:0d:26:04:c7:
                    d9:01:29:c2:17:a2:33:22:62:d7:19:89:63:53:8a:
                    df:37:6e:d5:be:a3:cd:34:80:0e:6e:f2:94:cd:69:
                    d6:18:b9:e9:dd:d6:75:57:9c:69:af:f1:84:5f:33:
                    9b:50:cd:bf:1e:0f:ac:7c:ce:e4:db:59:8d:d7:78:
                    21:40:8e:0d:35:ca:a0:b4:f8:2a:a9:84:75:19:e7:
                    85:bb:7b:6b:9d:56:1f:63:c4:00:ea:70:7c:cc:ef:
                    ba:a7:5c:a3:63:c8:73:a7:c1:f2:44:22:2b:ee:01:
                    f8:e2:75:31:d0:5b:a7:d1:41:ac:7d:35:c9:d5:96:
                    9a:60:b0:d1:45:3e:4d:ce:2c:bb:bc:68:99:22:91:
                    d7:82:cb:e7:f6:eb:a3:07:a5:f8:08:90:cb:3c:74:
                    5c:f0:08:29:5b:4d:2b:ae:a7:9c:57:88:33:e3:44:
                    47:e7:72:0c:2b:6e:f1:e9:b2:a9:86:9d:54:5f:ef:
                    82:f7:0b:54:94:9c:11:cb:13:db:22:c3:f2:83:8c:
                    b9:d4:71:94:d9:d3:d7:9e:90:8a:11:66:18:04:27:
                    07:6c:e4:e8:e3:0e:51:fa:c7:5b:f8:31:1e:f7:21:
                    a8:9e:21:9d:c9:71:04:d7:68:a8:e3:9f:0e:0c:2b:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4C:98:26:A1:AD:03:3B:64:7E:9A:DA:FB:0D:F5:40:32:CA:D8:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/469a78cc-8d57-3c51-bf7f-67969fc276d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:59:e8:be:60:f3:cd:40:0e:ce:60:52:1d:e8:95:33:ca:72:
         20:cd:79:22:cc:ed:3f:33:c7:df:5d:2e:fb:7f:03:64:59:e6:
         00:94:7c:cf:8b:ef:cb:44:f1:a4:2a:4b:55:72:b4:92:35:53:
         68:e2:7c:38:bf:50:d1:b0:3d:fa:ba:34:af:d2:66:b1:d4:73:
         81:fd:dd:3d:3a:48:e5:80:aa:6f:ae:5b:82:98:84:8f:2f:61:
         a0:87:d9:43:c9:19:9e:ff:d0:85:91:c5:ce:0c:b2:9a:8d:02:
         88:75:16:2a:3a:51:20:d5:8d:df:b4:a7:50:30:db:85:d0:71:
         31:81:20:6d:0c:b3:41:98:59:a1:55:dc:90:00:43:01:0c:44:
         5a:53:34:e6:9b:3b:6b:94:c9:9a:5f:20:12:8e:f7:46:52:5b:
         48:ea:52:b8:b5:3e:b8:35:04:ed:22:ac:74:93:5a:5b:3e:16:
         22:e3:ce:5b:1d:37:42:40:f8:f2:55:10:e7:65:8b:48:4d:c9:
         2e:7b:5c:29:2e:ce:d7:48:a6:e9:a7:e2:0f:ac:4c:1d:2f:0e:
         4f:cb:be:e6:4f:7b:a2:56:2b:30:8b:d9:0c:a7:2d:06:46:ad:
         6c:bc:6f:ab:9a:b0:55:3c:15:3c:56:ff:dd:03:fc:8a:79:58:
         e6:cc:c3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:36 2025 by rpki-client