Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d8e6eb5-b871-3c3d-a9c0-4c848c008eb1.roa
File:                     6d8e6eb5-b871-3c3d-a9c0-4c848c008eb1.roa (raw, json)
Hash identifier:          1x0qjpoGOeco/2x+SZ/AAq9U2AsnWPRcHZLXsh2eY5I=
Subject key identifier:   69:D9:03:8F:F4:9A:1A:C3:8C:2E:41:AE:72:FF:57:C3:88:A7:2F:3B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE5CB08ED85F8198916200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d8e6eb5-b871-3c3d-a9c0-4c848c008eb1.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.19.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:5c:b0:8e:d8:5f:81:98:91:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=8ab43539-93c5-419e-a210-60fe59780a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:a4:39:1e:e5:2c:3c:33:46:89:62:07:b9:
                    5b:2a:9a:24:21:e9:94:8c:66:bc:a9:ba:36:8c:30:
                    fc:e9:71:57:9a:13:84:f4:29:d3:48:01:ed:2b:21:
                    84:64:92:51:28:c4:2b:8b:01:ca:98:27:0f:55:36:
                    14:f1:fb:34:87:c6:49:31:a3:0e:b4:73:e0:4e:53:
                    20:b5:28:00:e4:35:1c:6e:32:7a:4a:8c:e8:f8:21:
                    74:3d:b7:bb:06:6c:4e:95:e4:7e:52:f2:e3:b9:e8:
                    e7:dd:25:a9:04:d0:aa:fe:ba:ce:50:f9:2e:27:32:
                    90:8f:e1:ba:9b:c2:40:30:2b:fb:7e:dd:91:82:1b:
                    eb:1a:02:27:21:88:19:ca:ae:69:1b:e3:75:d6:7b:
                    a0:b3:31:b9:91:a4:37:8c:b3:12:13:36:f2:25:cc:
                    31:20:b7:a0:bf:5a:01:0f:87:ba:19:5a:bd:6c:61:
                    6a:21:14:9c:4b:b7:87:13:fc:36:09:a1:2f:a1:7e:
                    dc:ab:9e:49:99:a5:84:89:8a:ad:0c:1c:23:03:d7:
                    e1:5a:d4:96:53:a8:8c:ff:b5:13:5a:b0:6d:2f:ce:
                    86:02:e7:85:ba:26:a2:f2:94:f8:6e:40:18:d3:9a:
                    50:8f:37:ae:6c:e1:89:ea:4d:a2:4c:f9:cc:b3:25:
                    0b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D9:03:8F:F4:9A:1A:C3:8C:2E:41:AE:72:FF:57:C3:88:A7:2F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d8e6eb5-b871-3c3d-a9c0-4c848c008eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ae:e3:13:85:d3:93:8f:1f:3f:e3:28:da:cf:7b:99:c8:82:
         8a:a1:ed:82:bb:32:cd:3c:1e:29:0b:fa:bc:7f:7b:1e:6e:74:
         92:68:d6:f5:64:11:5f:58:96:84:8f:e1:ba:ae:b9:09:71:e5:
         2e:6a:6f:cb:29:ac:2f:94:a6:ba:25:37:dc:03:bc:82:7f:51:
         ac:87:a8:87:b9:1c:12:fb:ce:6b:9f:38:f1:2d:90:99:78:1f:
         7f:b4:4b:fe:83:e3:60:5b:28:95:46:1b:da:8f:36:49:6d:33:
         8f:09:75:c6:55:e3:9e:56:2d:73:d0:51:6a:fa:bf:a7:9d:d5:
         87:e9:03:08:67:b3:fd:3a:44:8d:29:19:5a:5e:90:83:db:ee:
         26:e3:95:26:51:e9:57:01:e2:8f:ee:17:51:57:0f:f6:5c:3d:
         44:57:8d:5b:f8:95:88:c3:0f:fa:14:42:ad:0b:fb:c3:68:37:
         40:19:96:00:64:fd:e6:60:5a:82:aa:47:23:e6:1c:10:22:43:
         00:21:2e:91:1b:4e:9b:5b:78:5a:88:e8:2f:69:42:e9:c0:e1:
         22:88:41:bd:9f:e2:52:3c:47:42:b8:5d:71:9e:e0:5c:42:ca:
         07:b8:88:95:e8:10:21:e2:95:1a:ee:c9:7b:ca:9e:6c:34:49:
         68:e0:fb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:26 2025 by rpki-client