Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/823787c9-4c7c-389b-ba8a-83e6f50e1293.roa
File:                     823787c9-4c7c-389b-ba8a-83e6f50e1293.roa (raw, json)
Hash identifier:          lRhmFaZC5Y+XnidQvOva8MF5uq7vsSOM7KFLQ1ijt70=
Subject key identifier:   3D:15:76:F6:79:7F:D0:76:D9:7D:D1:A2:CE:60:C2:28:3E:8C:7E:A2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B56D748DEC29563311930AE00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/823787c9-4c7c-389b-ba8a-83e6f50e1293.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        173.31.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:48:de:c2:95:63:31:19:30:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=fa93b141-9d93-4258-b035-5f48bcea6ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:58:57:f4:c1:81:c5:34:02:bc:98:0f:8f:1a:
                    13:68:29:a3:2a:a9:44:1e:b5:1b:d7:77:4f:67:6a:
                    14:9e:20:27:ee:c9:1f:5a:f4:3e:7e:e3:21:91:e6:
                    06:df:cf:1e:3a:93:54:b4:92:f9:38:06:a3:ed:68:
                    a1:66:ec:bd:5b:a2:46:a3:ae:cb:47:dc:52:e7:8b:
                    e7:3e:94:cf:d0:ec:ba:67:88:03:f4:5e:75:d7:63:
                    e9:ad:33:8c:94:c5:94:bf:27:86:ba:bd:f9:6b:4c:
                    22:d7:82:bf:fc:3e:1a:ff:ae:d0:32:43:4f:ab:e5:
                    45:d7:6f:4b:9a:d7:1f:62:99:7c:bc:d8:aa:91:a5:
                    19:ee:df:e1:1a:0c:9c:fd:14:3a:c9:9f:66:2c:11:
                    05:00:43:2c:76:c1:e9:94:89:2d:1a:d3:77:d6:5b:
                    5e:3f:01:de:cf:b5:bb:83:03:8e:b4:99:6e:7f:2a:
                    6f:ba:64:7c:37:58:2f:23:e1:28:12:22:13:b9:10:
                    19:2f:50:95:05:8e:8b:d0:4b:55:54:3f:64:89:c6:
                    ff:87:ef:e6:2d:70:e7:ac:60:4f:8d:e6:fd:73:58:
                    ff:a8:96:e0:3a:a0:21:16:db:3c:e2:90:58:fa:88:
                    05:99:42:ba:fe:4f:1c:ad:fc:36:b2:95:a8:a5:65:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:15:76:F6:79:7F:D0:76:D9:7D:D1:A2:CE:60:C2:28:3E:8C:7E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/823787c9-4c7c-389b-ba8a-83e6f50e1293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f1:3a:b5:ee:15:cd:32:32:05:02:71:1a:e8:ea:c4:77:d4:
         70:b7:ec:17:55:bc:ea:01:22:be:3b:af:c9:2e:fe:9e:10:6f:
         ce:15:ed:1b:64:a6:39:2d:f0:05:0c:a6:df:2d:d5:86:75:15:
         75:28:7d:6b:d3:be:cb:93:45:90:ba:7c:95:a2:e8:e3:af:6f:
         34:1a:69:db:b7:b5:bf:84:e2:4c:4b:d4:e2:07:46:32:f6:6b:
         ce:19:e0:36:0f:7e:fe:8a:9f:89:47:ae:24:97:4b:e8:a3:4f:
         92:30:31:ac:8d:d7:24:05:9b:e0:ab:5f:c4:f7:7a:e4:0a:85:
         c3:5e:2c:6d:bb:7f:58:d9:02:25:5d:6c:3a:4d:41:92:e4:c8:
         29:f5:0b:09:2d:18:df:c6:c4:f7:d8:02:04:26:04:7c:4f:29:
         90:be:95:65:2b:79:b3:d7:62:f5:3e:60:1f:b6:30:90:b3:75:
         3b:f8:4b:a9:ad:3a:12:01:16:77:af:c5:cc:7e:ec:65:23:b4:
         1e:d0:d3:47:8d:52:cb:5e:49:58:31:fa:77:7b:61:e3:f7:ba:
         85:30:6e:3e:05:87:6a:7b:08:90:0b:f1:7d:1a:3d:b2:46:79:
         20:52:93:61:90:88:38:4a:29:63:7c:a7:9f:f6:b8:1e:63:0d:
         bb:56:c2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:14 2025 by rpki-client