Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d5a5049-d14b-3b4b-a644-b009587ea323.roa
File:                     8d5a5049-d14b-3b4b-a644-b009587ea323.roa (raw, json)
Hash identifier:          v8hTcEhkAyi9yXkRW8ft0GMRzqD6j86/2pz0WTFYcFU=
Subject key identifier:   C6:DB:3B:8C:FE:DC:71:20:EA:BE:EF:B1:2D:B8:C4:2F:3D:51:7B:04
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE506ED81EDA9F9D3AC400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d5a5049-d14b-3b4b-a644-b009587ea323.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.25.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:50:6e:d8:1e:da:9f:9d:3a:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7bb3de6c-a245-4302-bb8f-3d00527ab987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c0:f7:32:b3:4f:39:6f:4f:d3:c1:09:08:56:
                    d2:4e:4f:01:9c:b5:71:c4:29:54:c5:11:8c:9e:09:
                    f9:71:bb:46:da:3b:bc:fd:97:e1:84:e0:a1:08:cc:
                    bc:af:cf:d3:28:09:30:7a:2e:0d:20:a4:ed:28:97:
                    76:a0:03:8d:e9:48:38:f8:6f:6a:d4:bf:f5:10:f5:
                    c6:b1:1c:56:e7:2b:a6:31:86:1d:9a:87:68:2f:11:
                    0a:84:7e:9f:a2:99:8b:16:02:b9:17:ed:74:55:91:
                    2e:19:77:dc:54:ac:10:06:95:46:14:63:32:dd:46:
                    be:6b:16:4a:95:f8:df:34:a8:5e:27:ac:cd:e6:65:
                    b3:c8:57:f9:8d:20:21:8e:89:31:cd:3d:68:0a:3f:
                    f0:2c:c5:66:2d:c8:6a:4f:f8:33:eb:5f:45:40:7f:
                    81:5f:d8:ee:ba:10:f1:bc:6c:db:94:36:3e:4e:64:
                    0b:fa:38:9e:f1:61:5b:04:95:8d:0e:94:97:f9:38:
                    d0:80:8f:1e:77:fc:24:d6:12:04:94:f1:4f:c3:7a:
                    53:8c:98:bd:28:8e:8c:86:04:87:2f:bb:05:92:06:
                    f9:c4:10:32:1d:11:76:c7:08:da:2d:97:22:40:5b:
                    05:58:5e:62:3c:bc:bd:36:e9:30:cf:da:ad:13:99:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DB:3B:8C:FE:DC:71:20:EA:BE:EF:B1:2D:B8:C4:2F:3D:51:7B:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d5a5049-d14b-3b4b-a644-b009587ea323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ad:e3:c8:bb:88:0d:ec:03:21:53:38:81:bb:06:c1:89:32:
         8e:40:7b:d7:98:25:55:c7:84:49:52:f7:73:b3:16:df:41:6b:
         97:09:2b:a4:1f:25:eb:44:b7:2f:a6:90:82:fc:68:9d:9a:a4:
         c9:01:ce:58:93:de:1c:84:28:34:3b:6a:7b:62:cb:cd:53:fc:
         b8:bf:f7:82:4e:a3:7f:68:34:0f:2a:27:82:ce:31:f3:24:67:
         e1:78:47:58:40:4d:fd:ca:e6:49:83:93:a0:e0:14:5b:bb:f9:
         1c:8f:bc:63:c5:b2:a4:58:4a:0e:5a:90:7a:a8:e2:c5:d1:a9:
         1d:78:09:18:ea:f4:f6:dc:b1:ab:8f:56:4c:87:86:0c:f4:bf:
         86:55:68:89:85:fd:7e:97:6c:cd:00:58:8f:8a:d1:4c:a7:0d:
         da:73:c2:42:a2:29:e0:90:9a:94:6d:1e:cd:d2:e3:cc:46:7b:
         b4:89:a4:22:c4:64:3c:82:59:a8:fa:0d:09:4d:73:27:98:ac:
         1f:4f:46:cd:87:1d:35:25:2a:70:b2:5b:81:88:fa:b5:23:cb:
         82:7d:ae:8b:67:f9:4d:e4:ff:5c:3a:b4:a8:a2:fb:2f:c3:fe:
         d6:b4:a9:d5:94:8e:d0:33:20:7a:0f:36:de:9f:6b:71:56:b7:
         5e:60:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:20 2025 by rpki-client