Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc62e678-d5d2-3d5c-9f24-c68905ce905f.roa
File:                     cc62e678-d5d2-3d5c-9f24-c68905ce905f.roa (raw, json)
Hash identifier:          HAa0ESWKq8Vs5PoDdF5ajRhvqTpzt/tl/e4NTgHxEDA=
Subject key identifier:   3C:9A:52:51:D4:C4:89:8C:20:E0:33:71:00:D6:99:B3:6C:B0:C8:B9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6202315D809B5D1EF5D33590
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc62e678-d5d2-3d5c-9f24-c68905ce905f.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        173.24.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:31:5d:80:9b:5d:1e:f5:d3:35:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=632b71cd-c354-4764-9940-77a54a633c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:f9:29:aa:8e:ca:07:5a:ae:6f:f5:f4:44:
                    56:ce:1d:c1:e7:8f:2b:bf:5e:25:e1:25:01:f4:c7:
                    0a:6f:fc:c3:22:d7:94:df:7e:42:d2:7d:70:0a:23:
                    9c:13:10:0a:ae:6d:14:2c:63:a1:84:1a:58:0d:a4:
                    7d:7d:81:80:98:3d:d9:31:f7:dc:46:bf:d2:b3:76:
                    aa:fe:c4:2f:1a:8a:da:c2:b0:34:66:76:55:4f:1e:
                    8b:9b:45:cb:5c:bd:5e:f4:9d:29:e4:49:76:77:a8:
                    40:ba:20:07:8c:45:44:b7:3e:4b:fe:d4:2e:21:cb:
                    08:6d:1f:ea:9f:95:da:20:dc:59:d8:79:66:0f:78:
                    d3:3f:03:ca:db:46:85:8b:d2:4c:15:6b:66:3a:03:
                    55:d0:3a:25:9f:71:04:ba:d6:63:ee:2f:5e:ca:7d:
                    18:19:d8:c3:ca:17:7b:fc:53:8e:c0:82:b0:17:d1:
                    57:d3:d6:2a:9e:59:f2:b0:52:23:6e:ac:52:c6:62:
                    99:2d:89:eb:f0:36:ec:5d:d1:83:7c:1f:65:f4:eb:
                    34:65:f1:a5:40:8e:0b:ef:4c:02:cf:8a:bb:26:1f:
                    9b:6b:e4:2b:f4:85:1c:9a:f0:b5:50:de:3d:50:67:
                    2e:6d:7b:ca:01:6f:ad:1a:d1:69:cf:62:3e:c0:1e:
                    33:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9A:52:51:D4:C4:89:8C:20:E0:33:71:00:D6:99:B3:6C:B0:C8:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc62e678-d5d2-3d5c-9f24-c68905ce905f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:df:d5:73:40:29:ca:4e:e5:66:b8:96:fc:6b:19:d3:93:df:
         a7:cd:2e:05:d2:04:29:4e:af:62:0c:21:f0:75:75:c8:36:e8:
         1d:f3:ff:94:e0:8e:61:eb:2f:93:b9:2d:eb:32:9a:1b:48:d5:
         6d:f5:14:e7:98:a6:86:c2:3c:a8:92:c2:1a:df:ab:f1:8c:47:
         5c:d6:0a:fc:cb:cd:ec:9e:e2:98:ec:16:7f:6a:93:1b:b3:07:
         7e:1b:c9:71:99:3a:4e:4b:85:a9:fb:5b:8e:64:a9:3d:fd:8a:
         4e:45:2f:96:27:23:f6:23:d2:83:e6:c4:10:77:0d:45:16:c1:
         f2:2b:e5:ed:63:21:74:3c:33:b1:54:7d:38:de:1f:c1:dc:12:
         a0:58:19:18:5e:6a:62:7c:23:a5:04:22:24:5b:18:39:6e:73:
         62:7f:dd:70:2c:d7:4a:4c:ca:c8:3b:5b:ee:8e:83:28:eb:dc:
         26:49:9c:4a:7a:43:68:28:b8:b8:75:46:ee:2a:86:de:ca:ef:
         e0:99:64:91:8e:66:16:0f:a1:6b:1e:fe:63:15:39:97:36:db:
         63:b4:eb:59:ed:59:a7:0e:15:e8:00:1d:08:b8:ac:57:d3:21:
         bb:78:58:7d:ef:cf:fe:83:74:2b:de:7f:74:dd:ff:2c:28:ec:
         54:e4:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:59:03 2025 by rpki-client