Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72a9715a-3730-3727-b82f-bbd3a0b5cf0e.roa
File:                     72a9715a-3730-3727-b82f-bbd3a0b5cf0e.roa (raw, json)
Hash identifier:          wjoH+wLsZ4QWoX52vvIjLWDtNEGYaS60P81x4UZYpGI=
Subject key identifier:   74:CA:24:00:00:9B:62:D8:0C:FA:EC:70:93:53:2F:95:8B:61:C9:DE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE38C11880D72706FCEC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72a9715a-3730-3727-b82f-bbd3a0b5cf0e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.19.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:38:c1:18:80:d7:27:06:fc:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9d44ee1c-4d62-45ca-996e-6fc99df93434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c8:73:d5:30:57:60:f4:25:11:ce:f5:be:1a:
                    f2:df:f4:31:9c:83:5a:11:27:59:f4:c4:77:16:76:
                    9e:e7:e3:02:24:5f:e1:99:00:89:ad:9b:86:7b:8b:
                    eb:0e:f2:b0:ed:48:15:53:3c:44:fc:a1:35:00:00:
                    f5:74:c9:ec:4f:6d:48:7d:6e:ac:d7:f5:fe:0b:ff:
                    95:dc:da:1c:e0:cf:a0:27:1b:e0:db:c9:88:4c:1f:
                    9e:d7:66:cf:89:b1:ed:7a:3f:2c:8c:33:32:9b:35:
                    12:93:1e:02:fe:60:5f:b1:c7:5e:56:d6:b2:a3:a7:
                    e1:c5:e1:e7:8a:3f:df:f1:fb:cb:e4:9b:fd:6e:87:
                    29:0d:f1:f9:7f:41:1b:ab:5f:29:8c:e4:bb:3f:5a:
                    9c:59:e4:85:7f:fe:bf:84:6e:a5:8e:98:90:81:4b:
                    37:fa:71:f7:72:9a:b9:16:f5:ce:9f:bb:de:83:a6:
                    19:bb:fd:eb:08:01:da:b9:20:99:9b:f1:71:ab:66:
                    9b:50:73:e1:15:cd:00:e9:62:c2:09:a5:be:7e:a1:
                    aa:dc:97:0d:6c:e3:43:9c:d9:5e:f7:af:66:09:c0:
                    64:73:55:bb:9d:b1:16:51:2b:3d:e7:33:eb:1e:76:
                    89:f1:c5:2c:78:eb:d7:7f:0a:35:49:d9:af:86:e0:
                    51:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CA:24:00:00:9B:62:D8:0C:FA:EC:70:93:53:2F:95:8B:61:C9:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/72a9715a-3730-3727-b82f-bbd3a0b5cf0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:88:38:22:df:2c:d5:c9:fa:08:9c:72:69:58:e7:3d:05:9d:
         0f:79:de:48:9b:b0:a6:73:e2:07:23:80:16:5c:aa:b5:8d:d9:
         40:72:af:30:38:40:24:21:24:e2:33:9e:5a:49:a0:0c:b3:3f:
         65:5f:d3:41:a7:8f:e7:40:b3:03:03:10:cc:76:3b:0b:e7:c2:
         38:d7:3a:93:2c:3c:9a:30:8f:93:66:13:53:e5:e1:98:47:dd:
         ec:11:cd:4e:7f:9a:e1:88:59:95:ed:cd:83:73:12:3f:c1:01:
         a8:6b:be:0f:94:f2:9a:90:a8:ed:25:80:84:d5:5f:27:c7:f8:
         95:2e:30:5c:a6:a4:8e:04:81:50:09:fd:53:a6:0a:14:50:bc:
         5f:1d:dc:0d:d9:7d:57:74:79:f6:3f:89:b2:7a:32:34:e1:51:
         9a:fa:d5:d7:5f:9e:dc:8a:b1:ec:7e:b3:fc:69:84:20:39:ca:
         32:ab:8b:34:94:b7:2b:ea:2e:6f:b5:a3:2a:73:31:24:11:19:
         d2:86:b9:00:6d:7c:43:e3:d6:1e:a4:75:4a:73:4d:8e:f8:ba:
         9b:c3:a4:f4:ee:c1:3c:01:5d:27:49:cc:7a:13:c5:52:4e:8e:
         24:f4:93:d6:e5:6f:db:c5:b1:8c:99:de:65:c8:cb:80:46:ec:
         bf:c4:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:00 2025 by rpki-client