Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd045038-50e5-3c3f-82fb-258eeb5c66bd.roa
File:                     dd045038-50e5-3c3f-82fb-258eeb5c66bd.roa (raw, json)
Hash identifier:          Z2OKnsqyaM6Tf704o/J4lVw5CvyqXTMG28+65IzWu6A=
Subject key identifier:   2F:A2:9A:F0:3C:AB:48:E4:68:0A:72:AD:57:19:2F:57:AC:31:C5:94
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6797344F3DD120D5FA1E9240
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd045038-50e5-3c3f-82fb-258eeb5c66bd.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        173.23.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:34:4f:3d:d1:20:d5:fa:1e:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=334e4c61-e253-4077-9c09-b0c102a91a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:25:51:0d:73:d7:f5:e7:41:ce:3c:8d:c3:
                    05:a1:99:e9:c6:6f:11:65:c5:bc:cd:eb:51:bf:61:
                    7b:77:60:b9:02:a4:51:20:68:98:99:b3:6f:ca:51:
                    f8:41:13:34:de:92:33:b5:ef:72:48:0a:eb:99:64:
                    4f:0b:c2:31:d4:b4:35:1c:6e:a5:31:13:73:83:d4:
                    14:81:58:fa:72:f4:81:a7:cc:95:e1:af:1e:1f:32:
                    c8:bc:8d:ae:36:a3:e2:cf:80:59:ad:c3:92:a6:62:
                    5f:8e:0d:82:f3:17:90:cd:75:a9:67:14:8f:b5:ba:
                    72:48:43:36:65:3a:e8:66:06:6b:08:42:e5:d9:33:
                    98:3a:93:0f:d6:31:e2:5d:08:46:99:af:e5:23:08:
                    65:59:78:29:ed:ee:de:7c:b1:76:55:9f:05:5d:a4:
                    2a:5d:d2:c1:f8:e6:ec:fc:42:c1:f3:0b:ce:03:ce:
                    51:1e:de:df:8d:ff:0c:eb:98:0e:09:f3:d9:d1:1e:
                    42:dc:c1:c1:89:85:9d:de:94:7e:b7:20:45:b9:10:
                    56:17:84:e5:30:09:f2:73:e2:3a:20:ab:b7:62:8d:
                    3a:c9:f5:1b:ce:91:56:72:e1:6b:d3:bd:82:17:9c:
                    9c:b4:35:3a:ab:1d:48:f8:d1:c8:3f:50:26:ad:14:
                    43:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A2:9A:F0:3C:AB:48:E4:68:0A:72:AD:57:19:2F:57:AC:31:C5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dd045038-50e5-3c3f-82fb-258eeb5c66bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f3:be:5e:6d:3e:5f:cf:71:a4:41:17:1c:33:e9:ed:3a:82:
         68:83:a3:d0:93:2f:9e:fe:3f:f1:7e:ec:16:d0:c9:54:4a:be:
         35:f9:d4:d5:8d:7f:b3:8b:13:d9:e3:40:1c:e2:a6:77:71:7c:
         e0:06:b6:d5:7c:71:33:61:63:b1:3d:75:f6:88:a6:2e:51:5a:
         e1:8b:44:f1:b8:38:b2:cb:5f:52:b3:22:59:5d:f2:58:20:c0:
         f4:e9:9c:43:c5:cb:ac:f9:84:fb:18:ca:6b:69:7f:31:f6:b2:
         20:ec:2f:83:88:bd:6c:db:37:83:10:db:67:15:ca:93:c6:62:
         ea:b7:0a:33:db:d0:73:00:94:40:5e:c5:c3:fb:49:fd:92:17:
         5f:fa:51:c7:5d:02:eb:13:9e:a6:68:f3:7b:6e:09:ed:2d:49:
         4b:d6:2f:fc:b5:e5:80:b4:e9:3c:bc:f3:77:12:41:84:72:8e:
         61:35:97:ed:fa:b4:4b:cb:65:76:10:39:7b:37:9f:95:1a:46:
         ca:27:15:8a:58:03:ae:3b:6c:2a:03:7b:29:cc:dd:db:a7:b8:
         a7:87:a8:01:99:20:35:5d:8a:5e:a7:f5:56:58:cb:5e:27:eb:
         4b:ec:90:51:09:61:bd:28:02:d5:39:76:14:0e:cd:21:54:4f:
         0f:4e:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:13 2025 by rpki-client