Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af884c94-8ab1-304f-82cb-9eac852fa966.roa
File:                     af884c94-8ab1-304f-82cb-9eac852fa966.roa (raw, json)
Hash identifier:          bd8FsRfsBnE9eK1nY3VjHWT4CSPDOiBqV4WkMoCC36Q=
Subject key identifier:   FD:51:74:32:A7:57:E7:9E:08:D9:E3:04:79:CB:95:38:6C:81:08:2E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE514DA3598F14C461DF40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af884c94-8ab1-304f-82cb-9eac852fa966.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.18.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:51:4d:a3:59:8f:14:c4:61:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=66f60355-b28e-4d13-9478-b01fb6c7b8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:61:ba:8f:f4:21:c0:2f:23:2c:f9:07:7f:60:
                    4b:34:3b:74:f6:7b:bf:6c:92:77:26:01:1e:82:bf:
                    cc:eb:09:4e:88:1b:73:78:0a:45:b4:0b:90:c5:a5:
                    a4:11:75:2e:88:8f:0d:05:2d:25:9b:f3:50:bd:d2:
                    66:9a:fb:98:9e:5d:b4:57:70:ba:d7:ba:42:30:7c:
                    66:ad:98:3a:0c:62:44:60:1d:c9:e4:33:8a:51:cc:
                    06:43:36:8f:12:3d:04:0f:bd:29:a5:84:f5:c4:dc:
                    87:7d:e7:c5:16:db:50:79:e5:94:2b:eb:2e:84:a5:
                    f4:82:ed:dc:a4:21:b6:b4:86:b4:2f:1b:2a:32:22:
                    9e:f6:b2:a8:ec:f2:89:04:63:e3:e2:26:b5:ff:04:
                    5c:f5:e5:5b:82:92:9b:29:81:b5:29:b6:94:af:e0:
                    e1:f5:50:88:72:ab:4f:60:3e:be:d4:c1:39:2f:cf:
                    9d:b2:0b:83:f2:93:44:1b:d6:12:f9:a3:49:ec:71:
                    07:6a:47:38:aa:72:3e:09:fd:4e:2b:83:67:64:7f:
                    5d:f0:48:7f:3e:24:2e:2e:66:e6:69:a8:bf:99:85:
                    73:ec:36:e1:89:8a:1c:3e:e3:66:a1:91:34:00:44:
                    99:4b:63:47:58:d6:3c:ec:37:1e:d1:a2:0c:46:08:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:51:74:32:A7:57:E7:9E:08:D9:E3:04:79:CB:95:38:6C:81:08:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af884c94-8ab1-304f-82cb-9eac852fa966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e6:30:9e:df:f0:33:50:7c:3d:49:c6:37:cf:92:79:6e:5b:
         ad:19:89:7d:40:7c:f4:b3:f8:03:65:07:c5:fe:ec:5a:9a:58:
         60:d9:c8:06:ee:47:be:1a:71:3d:22:f7:75:26:a3:4b:b5:e7:
         0a:ab:38:a3:07:66:30:ff:78:4d:6d:14:c9:4e:d2:2a:61:38:
         81:d8:9a:e9:57:69:eb:b2:74:30:89:02:78:2b:3c:7a:f6:59:
         7e:d3:c0:a9:60:59:59:2d:f6:c6:9a:39:c6:88:65:92:d0:cb:
         e0:6d:4a:46:ff:c9:18:0e:8a:f3:a5:96:ef:b9:8e:c5:14:a2:
         43:96:d8:b8:91:49:6f:a2:7b:8f:a6:3d:22:de:48:55:af:c5:
         89:89:a2:37:09:9f:57:b6:b3:3b:9b:01:b3:f5:54:42:f8:de:
         55:a1:df:0e:e1:6b:fb:8c:89:5a:e4:7d:6d:d3:52:2e:c2:15:
         11:a5:67:34:7e:eb:be:b4:9e:e3:e4:63:a3:03:00:bd:93:5a:
         27:3f:24:b0:c9:9f:76:e5:c2:a1:2f:1d:2e:64:a1:4c:0f:58:
         b2:a3:44:f3:1e:60:95:43:fc:7e:c8:37:17:98:7f:dd:a4:92:
         04:e5:7e:59:78:6c:13:18:de:bd:96:76:1c:be:9c:96:dc:1e:
         cc:d4:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:51:50 2025 by rpki-client