Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91030a56-c64e-3fc2-8aeb-f1b5094ada23.roa
File:                     91030a56-c64e-3fc2-8aeb-f1b5094ada23.roa (raw, json)
Hash identifier:          oPWCjkXddCgf7iVIwMgA35DDGcGZTEqI16Ns6+uB3Lw=
Subject key identifier:   B9:9D:9B:39:73:87:20:30:7B:B2:D5:16:33:92:E1:66:71:D5:6D:2C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6202058D78B1F1070DB84780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91030a56-c64e-3fc2-8aeb-f1b5094ada23.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        173.16.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:05:8d:78:b1:f1:07:0d:b8:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=f6bb8ba0-e393-4080-a1a6-b98129658a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:ce:b6:80:33:20:fd:6b:d2:e1:63:73:2d:
                    7a:1d:65:2e:70:af:9d:80:bb:8c:3a:89:25:9c:07:
                    cf:10:4d:df:f3:dc:c0:82:5a:56:77:a8:72:e3:1f:
                    de:2f:ce:67:bf:30:24:7f:71:30:d2:01:59:87:ac:
                    78:2f:c1:d1:2d:cb:54:a5:b2:46:6a:88:d1:a8:11:
                    9b:f3:eb:f5:24:85:5c:4d:ac:cd:fd:b7:7e:ce:3c:
                    f9:fd:26:e0:02:52:d3:61:73:62:e5:2a:13:2c:f3:
                    b9:18:df:ab:03:43:a8:19:9b:3a:cd:6a:34:22:4d:
                    99:b2:70:23:5f:a1:ae:32:6a:d2:75:fd:80:1b:e6:
                    13:0a:b4:62:7e:e9:2a:75:61:83:4d:35:15:2d:f2:
                    29:3d:15:bb:4d:44:fc:fb:4c:9c:0c:bb:b0:fa:80:
                    13:d9:e4:bc:a0:1a:36:40:19:75:fc:de:c9:0c:a5:
                    09:a7:18:6e:44:39:a8:35:1f:a8:b1:da:41:79:24:
                    10:38:84:82:84:86:d8:ee:be:13:c6:bf:59:79:14:
                    02:47:1a:6e:d9:78:b2:74:2c:1b:9d:e7:50:8b:24:
                    e2:2b:81:fc:59:19:f9:5d:65:1d:ec:fb:52:e8:d5:
                    21:35:55:b6:fc:f2:47:74:f6:a0:43:44:6e:d4:54:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9D:9B:39:73:87:20:30:7B:B2:D5:16:33:92:E1:66:71:D5:6D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91030a56-c64e-3fc2-8aeb-f1b5094ada23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:aa:94:5a:8b:f6:5a:dc:b1:85:78:0a:8e:5f:4a:ca:66:fc:
         66:22:a6:bf:b7:03:13:43:b9:39:f8:1a:86:fe:b9:79:24:ac:
         ec:29:07:f6:df:5f:76:75:9e:db:47:4c:80:3a:a8:7b:54:25:
         52:a7:49:c1:77:aa:4d:cb:22:7a:bc:40:cb:f2:ec:86:40:67:
         9d:f8:90:a9:15:57:f3:5f:ae:6c:a3:0e:9e:cf:93:f5:8f:fa:
         32:45:ea:23:29:7d:fa:da:fc:85:be:08:15:29:37:90:3f:87:
         ca:27:6c:32:ca:b0:88:c6:72:27:a8:45:63:9f:36:64:af:68:
         89:94:71:96:cb:0e:b0:15:29:3b:d0:2a:43:2b:52:72:3f:5d:
         92:00:15:b3:3a:93:5e:bd:81:77:e0:b8:8c:f0:73:cb:bf:06:
         b1:46:fa:96:1f:e1:52:87:c3:f7:5b:e4:8d:71:6c:f3:cb:06:
         93:11:86:f3:63:a0:e3:2b:6c:54:a5:9e:98:86:2a:00:3d:cb:
         1b:5f:ca:58:74:3c:65:6a:24:49:33:da:65:1c:a6:bb:86:d5:
         57:1c:84:bf:2f:4b:b9:59:a1:05:77:6b:c2:39:90:ac:d2:0b:
         a7:25:51:07:6e:cf:b7:2d:62:00:9c:a3:16:a2:cf:07:7b:f4:
         ff:e1:77:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:23 2025 by rpki-client