Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58a48a1c-4c64-3639-a785-fa3bfbbc5c6b.roa
File:                     58a48a1c-4c64-3639-a785-fa3bfbbc5c6b.roa (raw, json)
Hash identifier:          MfmZKnftJMrqFu7Lp+e3Xya1XS0xrwRm3PoSmQjMeqA=
Subject key identifier:   E0:0E:93:44:10:A5:EA:3A:C8:76:14:4B:88:4C:0B:40:64:46:25:4B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CC87A63FBE1414DC484C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58a48a1c-4c64-3639-a785-fa3bfbbc5c6b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.30.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:87:a6:3f:be:14:14:dc:48:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=74c918e2-d70b-4c60-bee1-57fb7f0b85ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8e:08:08:f6:63:b0:b9:22:66:73:93:f6:e3:
                    ac:e5:e3:97:64:fe:41:47:3c:c4:90:41:00:35:5c:
                    b8:82:ec:c5:5c:75:57:50:06:4b:23:65:8b:6d:05:
                    be:7f:17:89:2a:f1:11:52:39:2d:84:47:5f:a4:c3:
                    10:47:4b:eb:0c:6e:b8:72:5a:d5:c6:6a:92:4c:ad:
                    5e:4c:98:0e:f8:7a:58:72:d4:a2:83:dd:d9:78:d8:
                    9a:ad:4e:05:89:86:03:da:70:6a:10:ca:c2:61:7f:
                    20:45:99:63:41:b7:cb:a7:e8:df:7f:e0:a8:af:db:
                    26:4c:39:1c:e9:44:ab:67:9b:19:d4:4a:8d:4e:82:
                    b8:90:b4:0b:58:be:b3:eb:de:99:1e:db:ad:68:4e:
                    d1:98:85:55:c9:52:28:4b:39:85:7a:6f:b7:0d:24:
                    e2:82:75:76:65:74:36:d7:f0:a0:93:74:8b:f3:bd:
                    f2:7d:4a:70:cb:e5:2d:09:38:ac:70:15:42:87:e3:
                    c0:12:af:82:61:48:08:ab:91:7a:b2:7f:17:68:2c:
                    b7:5b:de:e5:56:e7:37:76:67:f4:43:62:5f:ca:26:
                    1b:85:15:72:a5:4b:05:9e:df:f4:c2:a5:4b:0d:a2:
                    a9:98:a7:6c:ee:a1:56:80:90:9a:98:b5:a7:af:e4:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0E:93:44:10:A5:EA:3A:C8:76:14:4B:88:4C:0B:40:64:46:25:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58a48a1c-4c64-3639-a785-fa3bfbbc5c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d0:8d:cd:78:41:af:b1:c4:4e:2f:93:d9:42:5b:7e:35:b9:
         b5:5e:26:4e:25:96:ed:e4:ee:09:63:85:f9:ee:16:d5:78:c4:
         86:63:89:46:b1:24:79:02:5c:26:91:a7:5c:5e:15:e4:27:67:
         23:34:9a:65:eb:2a:e0:b3:6d:4a:26:9d:3b:c5:d9:e8:85:37:
         ad:a0:b9:25:cb:8b:f5:f7:31:9c:ee:a5:a8:ef:61:8a:d1:de:
         56:b3:4b:39:15:ee:4b:c8:09:6f:60:be:1a:37:f4:e6:cd:9a:
         5d:7d:d5:ba:2b:d7:93:3b:58:e5:8c:dc:9e:3f:e5:00:a3:61:
         3b:5c:d5:c7:8a:4c:43:e4:7d:05:ed:8a:f0:3e:a6:78:36:a3:
         05:ea:01:12:09:c3:31:eb:98:0c:22:bf:ce:8d:35:4a:91:b2:
         fe:6b:ba:49:5e:2e:6b:25:ad:58:0f:1d:42:90:1c:e7:6c:c6:
         2e:66:2b:b4:c3:7b:b9:c0:47:7e:81:77:07:8e:2f:ed:af:4f:
         4c:eb:3c:4a:14:2f:52:79:91:fa:3f:fd:ef:63:e5:0d:0d:ca:
         e7:6c:3d:08:00:07:a4:c3:94:cb:2b:31:66:7b:62:62:83:dd:
         d1:4a:0e:28:97:55:1a:2d:b3:1c:60:f6:d4:83:fb:15:4f:6b:
         1f:a6:96:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:35 2025 by rpki-client