Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74a44a82-0cc4-3587-bd68-459ca1d3d994.roa
File:                     74a44a82-0cc4-3587-bd68-459ca1d3d994.roa (raw, json)
Hash identifier:          DndRK1WLxTx/RYWxpmT1hK3ZqHeuLQUB82ri0CVqH1Y=
Subject key identifier:   6A:80:02:0B:C4:35:22:2A:60:AA:F3:8E:3C:AA:41:85:00:6F:12:76
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B67973F5713E2074F1214E380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74a44a82-0cc4-3587-bd68-459ca1d3d994.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        173.30.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:3f:57:13:e2:07:4f:12:14:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=72a48cb8-414d-4516-9449-c622bc8f42a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:57:81:92:b7:ac:0c:73:28:a8:7d:af:1b:
                    63:fe:37:cb:75:f7:93:e1:1f:fa:02:4f:af:9d:0a:
                    f3:9f:30:9a:d3:07:34:13:93:c6:cf:da:b5:8d:59:
                    34:d5:be:cf:af:94:c8:28:8d:58:70:39:94:ab:80:
                    75:6a:11:82:c3:0a:66:37:36:34:60:1c:5c:14:67:
                    0d:df:e7:78:9b:0b:3f:cf:68:24:12:8b:92:d0:04:
                    8a:a2:c3:d5:c6:a5:1c:a1:37:4d:c3:03:1a:fb:02:
                    80:e7:eb:52:95:98:40:5e:cf:f9:d2:10:50:f5:61:
                    0e:10:27:70:ac:c2:d7:6b:5c:03:35:84:c9:ba:a3:
                    66:a1:0f:87:35:23:c2:7e:57:18:ce:d7:e6:5b:ae:
                    07:34:b4:3d:bd:99:f3:51:88:22:e9:71:4b:dd:ce:
                    5f:e2:ff:b9:ee:d0:f1:48:96:95:6f:ae:ba:53:af:
                    35:6a:b0:5f:5c:70:98:89:37:65:82:e9:95:2f:e3:
                    28:4c:1f:d5:f1:8f:92:08:fb:c0:20:f0:a3:4d:99:
                    4e:98:bd:73:9d:61:67:85:2d:1e:91:93:3e:00:6c:
                    6a:35:11:b7:c4:9c:3d:4c:01:fc:a2:0b:44:83:6f:
                    5f:f2:0c:37:c1:20:37:44:ab:f2:1f:ef:7d:9b:ac:
                    a1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:80:02:0B:C4:35:22:2A:60:AA:F3:8E:3C:AA:41:85:00:6F:12:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/74a44a82-0cc4-3587-bd68-459ca1d3d994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:84:71:68:64:2f:15:47:02:8c:c2:fc:de:ae:e3:e1:13:25:
         4f:28:22:72:75:b2:22:fa:c3:ac:1c:ae:f0:d4:58:e6:d4:83:
         35:27:03:f9:7b:e8:55:50:97:c8:f5:d0:da:90:20:2e:ba:e4:
         02:35:80:eb:ae:ee:94:a6:9a:ef:3d:ca:c8:bb:d0:ac:bf:cf:
         f6:b5:14:1e:91:ce:49:ed:6a:76:7d:09:8b:55:35:4a:1a:70:
         88:32:e3:9a:29:33:55:a1:8b:85:54:62:32:86:ea:00:73:6d:
         a7:5b:ac:7e:46:36:48:48:3c:fe:8c:49:6c:60:91:f8:e9:2d:
         3f:7c:34:c5:21:f8:c2:a5:2e:6d:ee:90:17:6d:cd:a7:97:61:
         88:fc:12:42:d3:3b:2a:db:85:63:37:44:df:55:c0:b1:93:6e:
         c6:01:6c:de:58:c2:2f:26:bf:b0:dd:f9:38:7e:55:70:33:bc:
         d8:dc:6c:b3:f6:c9:05:34:aa:9d:97:e7:92:de:3b:5b:25:96:
         aa:1e:93:c4:cc:5e:2c:2f:52:72:a9:3a:32:98:ed:89:34:d0:
         66:e7:57:a8:63:0f:96:33:8f:bc:cf:e1:9a:5b:a6:aa:8b:f9:
         fe:90:a7:31:67:48:8c:47:e4:8a:30:2f:05:25:e7:9d:fc:00:
         de:5b:68:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:26 2025 by rpki-client