Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d62f04d6-6ad1-3312-9e34-748c87b458da.roa
File:                     d62f04d6-6ad1-3312-9e34-748c87b458da.roa (raw, json)
Hash identifier:          49BEvNaLLb4ySvdLJauvdSIdJ3NyGD31VJk6NWBhUuU=
Subject key identifier:   B8:05:C2:10:96:41:2A:31:75:44:78:85:3D:C8:4E:4D:59:FC:F4:27
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6201D67DC55DFF89011A1460
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d62f04d6-6ad1-3312-9e34-748c87b458da.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        173.28.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:d6:7d:c5:5d:ff:89:01:1a:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=faea9519-75e2-40a2-bd34-59a8b4fa85dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:28:d2:9f:af:0b:e5:6b:c8:85:63:bf:87:
                    d3:6f:27:d9:59:56:7a:f3:05:76:66:76:a7:2a:84:
                    32:3c:e3:07:05:72:63:f4:89:d9:fa:b7:7c:f0:50:
                    3c:59:fe:b8:94:26:68:7f:94:af:73:7c:6c:96:5a:
                    ac:55:6d:4c:4a:31:89:53:09:58:83:58:87:c6:fb:
                    0b:0c:9c:6a:d2:55:b1:e5:e2:3f:38:1a:4e:9b:f5:
                    94:38:e4:fd:f6:7d:a1:71:07:fe:6a:f5:84:9d:cd:
                    6b:e3:b9:2d:08:8f:86:33:22:92:45:b4:76:17:e7:
                    ba:f1:55:78:af:22:91:a6:86:b7:74:fd:c1:b5:00:
                    5d:56:5a:5a:d8:cd:b6:2d:f9:1c:bb:95:96:b1:54:
                    c5:c2:e8:40:ff:d9:9b:fc:40:3d:25:fc:16:8c:bd:
                    61:4f:48:ae:f5:24:c5:ef:7a:41:d3:f6:17:11:7d:
                    07:61:c0:c4:91:61:e0:b2:25:0c:48:34:89:7e:8b:
                    8b:18:96:da:68:b0:e8:20:dc:ca:fa:a8:e2:05:a7:
                    d9:60:4d:a7:aa:72:7a:e4:db:fb:a3:aa:1b:bc:9b:
                    93:74:4c:9c:6a:10:30:e8:be:3f:81:d1:c7:65:e0:
                    84:da:05:90:35:ed:1f:08:6a:7a:18:36:8d:75:55:
                    67:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:05:C2:10:96:41:2A:31:75:44:78:85:3D:C8:4E:4D:59:FC:F4:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d62f04d6-6ad1-3312-9e34-748c87b458da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c7:96:57:6b:e1:d5:82:1b:ad:d5:b4:a0:8a:5c:15:0f:76:
         30:df:ec:77:08:0e:69:e2:34:86:56:44:b1:3a:03:43:2e:f6:
         94:49:44:97:6c:05:25:2d:aa:c4:55:c3:0c:79:18:93:81:5b:
         c5:20:b3:ab:b1:8e:fa:00:18:5d:18:ae:5d:49:03:13:d3:fd:
         ce:43:f3:c3:58:ed:75:3c:b4:16:22:35:e9:9b:42:07:4e:14:
         08:af:c1:cc:b6:c6:18:2f:25:1c:dc:30:6f:5b:ff:7c:b6:a3:
         26:82:2c:6b:30:70:df:1a:b1:60:be:61:b9:7b:60:74:c2:86:
         b4:26:54:72:01:bb:7b:ae:dc:23:81:89:6f:db:e5:eb:4e:1a:
         2d:24:a8:47:a9:9b:05:06:d5:6a:ab:c8:69:a3:18:db:b7:35:
         bb:c7:76:44:58:ae:62:73:01:54:de:98:38:fb:9e:34:d4:16:
         52:14:c8:b4:08:26:ea:a5:43:03:f8:73:b0:73:e7:7c:da:dd:
         2a:31:27:a8:fe:d3:cd:39:a7:8b:eb:e3:6d:e6:df:ee:5d:72:
         d2:cc:00:70:dc:af:53:a0:55:0b:7f:58:9c:52:4d:32:3d:2a:
         70:4b:51:05:40:f9:ad:d3:01:7f:7d:57:ad:bf:88:1b:b5:66:
         cc:3d:3d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:17 2025 by rpki-client