Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64161a67-5185-3656-b3f8-a68db923de30.roa
File:                     64161a67-5185-3656-b3f8-a68db923de30.roa (raw, json)
Hash identifier:          GXrrM6c5Tfs2i/Yd/7xosDf/lQtVThhmosBkvMF2NCo=
Subject key identifier:   71:38:E0:06:CD:44:04:66:0A:BB:15:95:4A:3F:50:94:19:91:64:DB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE3F9081193DAC66821E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64161a67-5185-3656-b3f8-a68db923de30.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.29.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:3f:90:81:19:3d:ac:66:82:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=42581d49-bd41-4313-8c27-16beb7174cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:cd:fc:3e:d6:94:ef:49:d8:ef:9b:d8:e1:
                    f0:55:70:0a:04:27:54:10:c9:33:0f:c2:f7:61:1b:
                    3b:92:9d:c1:1a:50:b8:e6:69:30:be:07:b7:7a:77:
                    c0:9c:07:98:39:5e:96:5b:7f:d0:79:83:dd:ea:45:
                    e9:db:9c:ee:82:2a:ac:b9:0c:02:8c:56:71:0c:e7:
                    ae:5e:cd:ab:a6:4f:73:8b:58:13:84:7e:a2:fd:0f:
                    44:bd:06:90:9d:8a:ac:25:93:39:13:31:71:38:12:
                    a6:3a:01:d6:ba:f0:a4:73:7a:31:cd:f3:0f:5f:1b:
                    cf:e5:3a:79:19:af:f9:fd:43:9e:1b:fa:ba:01:f5:
                    59:eb:e7:80:26:bb:a3:65:1a:03:f7:08:e2:91:d0:
                    e3:f3:1b:f0:15:75:e0:a6:97:02:55:b9:f0:ac:c5:
                    1e:b4:b2:6c:db:22:a9:70:c3:99:09:b7:9f:b3:2e:
                    07:05:76:1e:5b:f9:8a:0d:d5:98:7e:07:e9:8e:88:
                    ff:e3:e8:37:7a:b1:b9:09:fb:5d:e2:b2:7d:3b:e4:
                    dc:e9:e7:b6:0c:4a:0e:16:55:22:d3:c9:68:43:77:
                    f9:19:86:dd:54:20:d3:e1:82:22:b4:bc:a5:71:e9:
                    5c:5d:f1:fd:16:6b:69:7d:63:63:c1:ad:95:e4:c2:
                    22:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:38:E0:06:CD:44:04:66:0A:BB:15:95:4A:3F:50:94:19:91:64:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64161a67-5185-3656-b3f8-a68db923de30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:fb:a2:56:4f:9b:9f:4e:97:fe:c1:6a:1b:9e:5b:50:3b:a8:
         01:58:02:24:18:e2:85:c4:8a:38:74:92:56:25:f7:e0:b9:0c:
         75:69:18:d6:bf:8d:11:11:11:7e:7e:66:e8:1a:1a:ac:f7:91:
         a6:a8:db:ef:a5:78:22:df:d6:0e:78:39:4a:dc:6d:f9:1d:8d:
         dc:f5:8f:fb:89:8e:a2:31:57:94:38:0b:ca:76:79:e1:47:6b:
         05:ec:f9:a7:0b:cb:79:a5:fc:be:13:dc:b5:d0:3b:9d:19:d5:
         2c:15:51:73:6f:71:90:c9:5a:73:63:79:12:18:9e:6f:fe:40:
         95:9f:9f:44:15:05:16:a2:f9:7b:6a:62:ad:4b:5f:51:47:13:
         b8:a9:0c:8e:50:03:67:7a:f8:93:31:94:42:cf:42:cd:01:e9:
         7d:92:6c:3f:08:79:b9:eb:e2:03:df:4c:94:95:14:32:33:a8:
         c9:bb:ca:22:fe:b1:6a:7a:17:56:5a:74:6a:de:70:cb:ed:44:
         14:a1:36:e7:ba:45:61:41:3c:04:59:88:fc:a2:34:a0:26:84:
         98:25:4f:da:37:e0:c8:86:fc:b5:88:d8:85:0e:d7:5b:4c:ae:
         17:97:63:9f:90:65:17:be:bc:9a:4f:f8:11:d2:7c:0d:a4:be:
         ca:c3:7b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:12 2025 by rpki-client