Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b209b49-fd69-3e18-a25b-f032d8f835be.roa
File:                     6b209b49-fd69-3e18-a25b-f032d8f835be.roa (raw, json)
Hash identifier:          gcRk5gUFMCa+uU5QkHV7RbOLYjczBbvGssRZYU87wP0=
Subject key identifier:   6B:A3:C6:A5:71:7F:6B:A9:31:89:CB:49:A0:9A:60:0D:8C:32:C0:48
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B5C6C71E48BCE9C095F03E500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b209b49-fd69-3e18-a25b-f032d8f835be.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        173.21.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:71:e4:8b:ce:9c:09:5f:03:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=b900cb40-2772-424b-85b9-ee8160912e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:33:6e:82:5e:8e:01:2f:cd:c1:47:9c:36:3e:
                    0c:b4:98:73:2a:7e:b7:bd:d9:f8:4c:95:af:6f:ac:
                    0e:f3:bf:0c:a3:e7:53:83:d5:83:dd:95:28:4e:2f:
                    cd:8b:8c:70:79:04:ff:6a:09:69:64:55:1e:2d:9b:
                    7c:32:de:d4:cb:f6:a9:03:7f:4a:b5:43:1b:4e:bb:
                    bb:76:23:0b:6a:ce:57:f7:07:11:65:4b:e3:02:9f:
                    12:14:9d:1a:7b:82:29:87:b9:7b:e2:42:40:7f:63:
                    79:f0:0d:c5:7f:00:54:fc:d7:a7:64:a8:dc:21:e7:
                    d5:6e:7e:c6:8a:65:65:b0:52:07:bd:b6:57:3a:ec:
                    ce:c6:3a:b5:02:f1:80:90:ee:af:6c:d1:eb:c0:77:
                    42:18:1c:7a:16:45:b4:76:ce:51:53:f0:31:50:1c:
                    fb:13:5f:ac:66:73:4a:25:cb:3e:d4:ec:58:9c:50:
                    fa:63:e3:d4:34:1c:8c:d3:b4:75:e8:0f:6b:7b:fc:
                    5a:f0:32:a6:52:b2:7f:3e:9b:44:19:d6:1e:57:6a:
                    d1:6d:c1:53:dd:76:b3:16:0f:cd:c1:13:73:40:48:
                    8e:57:c6:e2:d3:74:ec:36:c4:74:d7:9d:4e:d8:8f:
                    08:80:4e:3e:5f:25:21:06:cd:10:ef:be:d3:c5:a0:
                    18:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A3:C6:A5:71:7F:6B:A9:31:89:CB:49:A0:9A:60:0D:8C:32:C0:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b209b49-fd69-3e18-a25b-f032d8f835be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b3:55:96:1c:4c:43:28:93:d2:33:c6:17:e5:21:47:7d:fc:
         83:33:2d:71:4f:f2:cc:49:8b:29:2e:1b:6b:f5:c1:24:7a:5e:
         b3:83:d5:72:33:8e:f0:38:6f:74:46:7d:3f:63:00:c9:d4:b8:
         bd:25:96:91:2b:1d:d5:03:8a:85:cb:1b:e2:40:46:0b:48:9b:
         92:9d:b3:b1:9d:04:b0:d1:a1:06:a5:2f:34:7a:81:9d:ae:42:
         2c:ac:6b:00:4d:f9:44:b0:64:fb:e6:20:53:f8:4d:e8:2e:ac:
         d4:aa:98:19:7f:d3:ac:a9:87:ab:6b:ea:6f:e3:43:52:84:58:
         2d:3f:b9:90:03:74:fd:e2:81:29:9c:71:7b:ed:40:6b:a3:5e:
         6d:c3:88:53:c6:91:54:ab:0d:8f:91:ec:42:d3:9f:e1:ee:46:
         d3:b7:5a:9d:ba:4f:9b:80:96:21:37:92:f1:13:e5:f9:ab:a3:
         30:ad:e8:ac:b8:f8:4e:83:a7:46:9b:f8:5a:65:45:45:b9:07:
         ea:5f:ee:2e:58:c0:63:64:9e:7a:20:36:e3:0f:47:d1:e2:33:
         77:82:34:87:16:a7:88:ae:f9:fb:37:ff:de:86:03:01:b4:32:
         10:48:77:0f:00:a0:9e:53:e3:00:a2:c7:b9:1a:e2:b0:2c:dd:
         4f:4b:2c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:44 2025 by rpki-client