Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d78425cb-a2ae-3330-b7f1-293db195adf4.roa
File:                     d78425cb-a2ae-3330-b7f1-293db195adf4.roa (raw, json)
Hash identifier:          zznt4YR8DUHcQDtxFKS7W9jhuhmIzntlYfxbMU7lO+Q=
Subject key identifier:   F7:33:25:FE:80:8F:1C:B3:03:83:9A:41:2F:A0:B6:EC:3B:4E:FD:DE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6631E86A3171C2C5E9F85A40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d78425cb-a2ae-3330-b7f1-293db195adf4.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     30036
IP address blocks:        173.16.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:e8:6a:31:71:c2:c5:e9:f8:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=2d5b020d-da0f-46db-a5e0-27232ebc4857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:b3:aa:fe:7b:d2:f3:ad:38:74:2e:1b:97:
                    fa:64:51:4d:66:86:2e:f4:a6:1d:dc:fe:f9:51:92:
                    d5:99:8b:dd:19:0a:6e:ba:20:36:67:b3:14:b3:81:
                    ea:ec:a1:61:c8:97:80:be:e6:a1:4c:66:8d:60:2e:
                    29:ad:b0:84:a8:3b:9a:01:08:e5:c1:00:3b:7d:ec:
                    87:08:61:bb:6d:d3:57:4e:26:5b:88:b9:0c:79:1f:
                    e6:c3:05:3d:d9:60:f8:06:1c:6c:fe:bf:f6:74:f4:
                    0a:e8:0a:83:73:be:0b:47:88:66:1a:4a:ef:f5:3f:
                    7e:94:e3:19:0f:58:bb:e3:a8:af:8a:b1:9e:2a:c0:
                    50:b2:59:97:3c:5d:f3:3b:af:3b:27:1c:d2:1a:08:
                    ee:aa:65:d6:ca:bf:f8:3c:a4:24:ab:17:ca:9b:e9:
                    09:ee:58:c5:51:42:97:d4:b3:df:7a:2a:10:59:d0:
                    4d:09:67:2f:1a:8b:f7:bf:80:03:de:e2:83:17:e9:
                    13:6e:7a:6c:45:d3:b4:5c:94:ad:f6:52:b0:5d:80:
                    9e:4f:2d:3f:1d:08:3a:d7:c9:8b:1a:6e:51:26:09:
                    96:2b:ed:40:62:34:5b:d3:ed:fa:d3:25:26:b5:cb:
                    b0:33:9d:d7:dd:2e:3e:e2:9d:7e:17:64:64:18:ea:
                    71:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:33:25:FE:80:8F:1C:B3:03:83:9A:41:2F:A0:B6:EC:3B:4E:FD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d78425cb-a2ae-3330-b7f1-293db195adf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:80:0d:5d:38:6e:07:65:b5:96:37:09:88:b9:85:09:89:
         4c:4d:a0:c9:b2:d6:63:47:ae:a7:3f:12:c0:22:6d:fd:bf:b4:
         d7:3b:2a:d5:19:60:5f:76:8f:da:32:3d:d6:84:ae:2b:ee:fe:
         15:39:9a:77:ed:8d:e2:37:d6:11:8c:01:a0:bd:4c:0e:98:cb:
         16:39:96:7b:b6:1c:09:9a:6f:8a:c3:51:60:ad:a9:59:4e:60:
         15:35:e4:39:47:9c:70:a5:46:0a:c5:cf:1f:57:64:06:f5:67:
         ca:7d:ec:4e:81:64:86:6f:6d:71:1e:1a:c7:d2:cf:a6:10:f1:
         18:0e:75:8e:a7:79:86:b4:cb:b0:96:e3:91:e7:38:c4:dc:41:
         73:e6:14:91:3b:78:02:c8:79:ee:69:1b:80:ef:9d:82:29:df:
         c9:77:f2:af:79:ea:15:1d:a8:d8:f9:6d:eb:c8:a6:ca:46:af:
         e2:e7:a6:af:2d:07:17:2d:03:07:98:0b:c6:e2:cf:42:07:72:
         1a:d6:50:95:00:fb:cb:a4:be:c6:57:7e:bb:e6:45:3f:3c:83:
         08:7a:eb:66:06:e8:60:34:0f:ee:f3:3e:04:13:b3:83:37:5a:
         02:f9:89:72:b5:e9:1a:94:44:42:94:55:69:00:0a:61:e4:4f:
         b9:95:76:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:51:56 2025 by rpki-client