Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/addf3a7e-a546-3f84-b10d-126e0fb1e13f.roa
File:                     addf3a7e-a546-3f84-b10d-126e0fb1e13f.roa (raw, json)
Hash identifier:          P+zsWivusJBBbpQb6HGYzM4wwPLtc27MfuQyxKHngNQ=
Subject key identifier:   51:78:9E:A0:77:D8:41:9B:90:39:D0:02:58:63:52:66:38:E8:45:AB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CCBAE7C75FF32C8BF841C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/addf3a7e-a546-3f84-b10d-126e0fb1e13f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.16.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:ba:e7:c7:5f:f3:2c:8b:f8:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7adab435-3241-42e7-8920-90f269aef757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c8:1a:17:f5:f5:3a:4e:6e:3c:05:f7:34:60:
                    6a:45:2c:04:e0:f6:4d:7c:78:9a:8c:ad:de:22:ea:
                    e2:35:9f:9f:12:00:62:96:14:9d:fb:da:b6:9c:f9:
                    b6:93:f8:51:7d:a5:e2:16:e0:0d:f2:d8:35:5e:e5:
                    bd:54:1b:9a:de:74:a8:51:c4:7c:d6:f1:9e:2c:b8:
                    11:ca:52:cd:6a:dc:1b:8a:79:1f:a9:4e:65:b5:38:
                    33:b2:c5:b9:be:af:00:a8:d1:fb:93:62:e8:59:fc:
                    35:d6:a3:5c:d4:4d:56:18:be:90:35:66:7f:01:20:
                    8c:1b:16:d4:df:45:b6:7c:fa:a7:3a:57:b8:d9:2b:
                    97:f0:91:cc:93:02:87:7f:57:62:8c:7f:82:12:d5:
                    1b:a1:7f:68:1c:00:e9:c6:f6:d3:15:e6:45:c2:61:
                    fc:39:e1:d6:2f:c9:5b:d9:b9:25:5a:ff:92:d9:87:
                    15:a6:ec:d7:7a:af:84:53:ab:22:b2:f1:75:19:1f:
                    8f:81:82:d6:46:da:75:c8:3c:b7:c9:96:38:cd:71:
                    0d:ba:b8:ec:7a:38:3b:3c:f1:a1:74:30:45:71:e9:
                    fe:54:62:43:14:fe:47:f2:6e:84:a5:4a:c0:9c:d2:
                    80:70:9e:d4:72:8a:89:2f:c7:f1:ba:83:15:ff:08:
                    e5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:78:9E:A0:77:D8:41:9B:90:39:D0:02:58:63:52:66:38:E8:45:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/addf3a7e-a546-3f84-b10d-126e0fb1e13f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:8c:6d:a2:00:bf:9a:c1:41:4d:1b:c8:dc:0f:61:5a:a0:44:
         2b:26:d7:b6:85:55:83:f1:9a:a1:af:e4:30:1e:5c:10:c7:68:
         8b:1b:c9:f4:84:83:8d:3f:b5:14:31:8e:9f:7e:75:37:e7:f9:
         b3:d1:e8:01:f3:9b:2a:d1:74:c0:4c:b2:4a:e2:8b:9b:96:b0:
         fa:e0:cf:87:19:08:00:f5:55:ef:ca:02:06:6b:d2:8c:0a:a8:
         31:83:3d:5b:94:e3:4a:66:6e:22:c5:97:ac:dc:1f:1d:81:11:
         5d:61:cf:49:f8:47:46:9d:df:e3:27:fb:6e:eb:5a:cd:a3:19:
         5f:ca:f9:a5:fb:c1:56:4f:ee:fa:06:be:4b:04:8a:f0:ad:9f:
         0c:2f:45:5b:6b:34:c3:8e:b0:e9:4b:1b:be:3a:3e:d7:2a:24:
         d8:0a:80:c2:d3:62:04:fd:26:81:a6:57:62:e1:31:f8:be:a3:
         79:b6:3b:7e:94:39:22:d4:2a:fd:20:66:ef:4a:2a:e0:23:00:
         ee:0d:51:26:aa:d0:6f:8b:d2:01:e8:86:6d:82:ca:d6:a9:d7:
         97:ae:b7:bc:18:21:63:01:2f:0c:7c:65:03:72:60:8c:49:15:
         bb:50:9e:53:b6:ce:7a:87:73:72:0d:17:cc:44:7f:69:ad:bc:
         d1:14:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:18 2025 by rpki-client