Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa
File:                     6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa (raw, json)
Hash identifier:          WkTRCdXQF54/QvR0sfUNW0v4CnXuYxCrYAbWxf/5Dx0=
Subject key identifier:   29:30:FA:63:CC:6E:7A:A6:F2:D0:63:D5:FC:A2:0C:21:95:B6:A1:2D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CC8423FC2B8A229150AA00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.20.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:84:23:fc:2b:8a:22:91:50:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f942d2e9-e399-4678-8ddc-c4f38fce7231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:58:20:23:a2:6d:5b:14:90:81:99:ce:68:
                    4a:7e:47:70:7e:b9:ff:e1:44:b0:db:4c:21:56:18:
                    3e:02:79:12:2e:cd:46:c2:3d:b2:0c:61:7f:b3:a9:
                    39:50:db:a2:98:1e:5c:79:46:e0:e8:9a:a6:c4:07:
                    a7:cf:65:02:0c:26:57:4b:87:c7:ea:b3:1c:c6:d8:
                    cc:0a:ef:81:c9:27:4c:ec:b2:9d:1e:46:87:e7:47:
                    6f:a6:37:c7:62:b8:3d:a5:7a:0f:94:8d:80:6b:b6:
                    bf:83:aa:60:f1:06:b2:99:9d:b2:2b:de:5d:73:ab:
                    c3:34:62:af:7c:1d:28:79:7a:e1:8e:08:a2:19:3b:
                    e4:f9:4d:c7:7b:89:c5:4d:55:0b:9f:03:e5:12:30:
                    dd:15:45:e2:05:f2:f3:61:96:ce:34:22:13:e6:fa:
                    16:a2:01:be:8e:62:eb:4b:ef:45:2a:86:03:9f:ba:
                    99:30:71:9b:c3:ac:ea:b1:5b:a0:24:b3:b7:b4:8e:
                    d2:dd:49:fe:5b:80:3a:3a:eb:c5:57:2a:0e:f4:d2:
                    69:61:ca:7b:af:2f:40:27:56:c1:bf:a6:8b:10:67:
                    40:d0:1b:bb:47:58:df:a2:cd:e6:73:c0:1b:40:c9:
                    8e:4d:0c:eb:ed:8a:83:c7:54:8a:fb:17:33:9e:7b:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:30:FA:63:CC:6E:7A:A6:F2:D0:63:D5:FC:A2:0C:21:95:B6:A1:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6dc70666-d1d6-3e28-8e66-bf369cc78c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:27:75:69:ac:0a:36:b4:51:05:d1:d5:2f:13:64:b4:67:a5:
         79:c0:dd:67:f4:57:6f:ec:71:d2:06:81:10:21:47:03:b7:9e:
         9a:e1:24:f7:2d:4e:95:14:02:0b:09:11:13:1b:d5:0d:a9:53:
         5c:94:20:0b:ca:4e:45:14:c7:35:e1:dc:9e:8c:67:40:60:15:
         47:30:a9:27:fb:80:d8:74:05:5f:fb:8b:90:2c:13:a5:e6:35:
         72:77:4a:ee:00:87:a1:a3:22:12:5a:75:b1:49:da:b4:67:c0:
         8c:2f:b4:e3:44:b4:80:1b:30:53:9c:e0:35:47:33:75:22:4b:
         09:f6:93:8e:2c:e8:81:a4:78:72:8c:ce:3d:c1:58:51:0b:a2:
         1b:25:32:ac:85:72:b5:f5:b0:08:80:7a:d9:c2:8a:7b:b3:aa:
         dd:a5:50:32:e9:d1:ff:7b:e5:a2:a2:0c:48:f0:98:44:97:43:
         97:70:0a:ba:5c:59:18:c1:13:a4:ec:53:94:27:78:44:f7:f5:
         0b:df:76:f8:34:41:83:38:c6:dd:e1:fe:d4:fb:ae:b1:e4:80:
         6c:28:82:12:0f:25:20:49:71:ee:22:6c:60:09:9b:7a:63:f9:
         92:73:fb:f6:f4:01:39:33:0b:43:62:26:2b:61:53:77:01:e8:
         e0:a0:7a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:19 2025 by rpki-client