Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/680d311d-12cd-36cd-a27c-7f8f10091d6d.roa
File:                     680d311d-12cd-36cd-a27c-7f8f10091d6d.roa (raw, json)
Hash identifier:          uzysLIr1wvO3OuFtbC91/NbFHkEWLnj1JzWADXMo4g4=
Subject key identifier:   A0:16:5D:CF:DB:F7:B5:49:B2:9A:85:EA:55:88:51:48:22:96:38:26
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE42C76099DEB8CED9EBA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/680d311d-12cd-36cd-a27c-7f8f10091d6d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.25.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:42:c7:60:99:de:b8:ce:d9:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f1c5a3e6-4ba6-4357-a429-a80eab06f779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:21:2a:2d:99:a0:9b:0c:9f:ef:3d:99:45:
                    68:36:42:5e:97:7d:4d:1e:f7:96:17:98:74:20:41:
                    00:99:4f:5a:c2:ac:66:2b:ac:46:86:e4:29:23:4d:
                    20:02:15:fe:fd:f8:c5:2c:c4:06:ad:3b:1f:1b:be:
                    08:7a:e1:8e:ab:15:77:2a:e9:84:e6:72:94:bd:b4:
                    2b:60:dd:cb:9d:81:e7:3f:1c:1f:3c:43:27:22:87:
                    98:99:81:0a:cf:fe:a8:42:ce:38:ef:dd:ed:47:48:
                    f3:6c:11:04:1c:35:52:0f:c5:ac:eb:b2:cf:57:28:
                    90:f1:bc:68:34:df:68:51:64:fe:a5:1c:98:54:e4:
                    ef:44:5c:60:6d:fc:a0:2b:96:97:43:14:10:be:d7:
                    47:52:ef:fc:f8:60:2b:25:3e:f6:f3:e6:b6:a8:d6:
                    43:e8:bc:48:69:f3:34:26:3b:5c:c7:36:d7:cb:42:
                    61:64:8b:a5:0d:e6:55:23:4b:2a:92:24:1d:63:88:
                    fb:fb:7c:a6:b1:17:57:63:44:58:8b:89:e4:09:ff:
                    f9:0e:66:b0:d9:75:a0:35:58:66:b3:08:3c:2f:5a:
                    78:47:d2:40:e1:4c:47:44:4f:e2:c3:d2:a1:2b:3e:
                    31:2c:ad:99:40:56:61:50:ff:e8:3c:d5:a5:7a:75:
                    15:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:16:5D:CF:DB:F7:B5:49:B2:9A:85:EA:55:88:51:48:22:96:38:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/680d311d-12cd-36cd-a27c-7f8f10091d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9e:10:46:73:59:cc:dd:5c:9a:91:c4:db:1c:e2:9c:ba:20:
         9c:96:e7:d9:41:ac:aa:d0:98:55:40:54:05:82:ad:62:a9:c6:
         43:79:a8:01:e3:7a:d1:75:e2:7b:b2:79:b9:21:37:2d:c0:67:
         ed:b0:dd:22:2c:08:d0:37:ba:46:47:56:62:2e:e2:10:8e:6b:
         a9:cb:9b:9e:17:49:e2:86:06:e7:d1:05:e8:39:ee:97:00:b7:
         fc:11:a3:9e:97:ff:97:2a:87:bc:2e:a1:9e:aa:75:d4:b2:fb:
         25:99:35:68:6c:39:84:a7:63:0d:d5:ac:2f:cc:c2:2f:2b:3f:
         5b:94:f5:78:93:79:9c:a8:c5:d7:0d:f4:6b:74:da:7f:26:c4:
         8a:f4:de:6f:b8:14:dd:da:a7:fa:5d:c9:5c:fd:d5:e0:fe:e8:
         8d:3f:f1:09:0c:01:1d:52:99:86:10:b6:97:6c:28:f1:9e:2e:
         e8:c4:cf:c7:3f:2d:8d:8f:bb:f6:73:c8:6d:46:53:b5:bb:10:
         4b:8c:76:e4:84:04:9a:37:b5:6b:b6:a6:9a:6a:96:2e:04:bb:
         e8:69:6e:14:49:d1:b2:43:c7:b4:52:ee:67:d8:86:88:03:fc:
         19:85:df:bf:b0:47:56:f9:ca:40:c3:82:10:f8:83:93:c5:15:
         5c:d5:d7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:01 2025 by rpki-client