Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa
File:                     ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa (raw, json)
Hash identifier:          vQwS9l12EEU+tc0Mzr7UTsf6S6L/cAKqWrBYHUTghAk=
Subject key identifier:   BC:80:39:DE:79:6A:A6:D3:5A:62:52:65:26:C9:E0:E1:58:B3:63:D9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6631FA8753BBC04F6FE38FB0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     30036
IP address blocks:        173.16.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:fa:87:53:bb:c0:4f:6f:e3:8f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=35133bb7-4477-4769-b46d-8dcf6779162d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:ea:70:45:5d:d5:0c:58:95:1b:c9:0b:cc:
                    4d:69:df:1b:ed:4f:6f:42:e1:15:30:62:55:f1:99:
                    4e:ec:b6:cf:0c:86:49:c1:ba:a8:d2:df:18:6c:3b:
                    87:a9:5d:3e:be:11:ce:70:cc:5c:97:97:6f:a8:29:
                    76:c5:34:41:97:36:dd:67:34:d1:76:9d:fa:18:8b:
                    6c:01:21:dd:3a:c7:7c:0b:80:d3:ed:ad:d5:7e:58:
                    39:d2:5d:99:a5:8d:e8:c2:8f:3b:ae:7e:ab:29:7b:
                    83:5f:5b:81:50:85:e7:a6:c1:5b:38:48:07:d9:0c:
                    40:95:a8:af:90:85:47:26:15:36:30:42:1b:47:7f:
                    1e:4e:b1:0d:ac:d6:63:7d:e5:a6:f6:5c:a7:d9:41:
                    9c:e5:95:5b:e0:c0:a1:e7:49:b3:d4:5f:02:0c:39:
                    fb:d7:e2:bb:5b:ef:ff:88:00:22:99:e8:f8:68:a1:
                    d0:8c:47:1c:a5:ba:47:19:b3:6e:c1:57:b9:1b:c2:
                    b9:af:76:6f:53:64:bd:d8:24:b1:88:48:c2:b0:05:
                    47:15:f8:0e:94:06:2f:8c:6c:bc:1e:80:b1:9e:94:
                    b8:8a:23:72:1e:6d:81:bf:5a:c2:89:36:1a:01:d1:
                    b9:b9:1f:47:ec:36:13:42:e6:7a:96:42:8a:1b:b3:
                    3b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:80:39:DE:79:6A:A6:D3:5A:62:52:65:26:C9:E0:E1:58:B3:63:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbfe7e8-e738-3a7b-9f53-59a2677a066a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7e:60:22:3c:e4:3e:1f:1f:04:c2:5f:de:73:99:64:da:b8:
         01:6f:f9:f7:1e:f9:17:d2:04:24:a1:85:6a:df:ee:c6:92:36:
         a3:59:96:b4:7f:ac:13:72:1b:16:07:54:8a:c6:f2:03:aa:84:
         99:aa:dc:3f:c6:99:ac:84:56:26:0d:4d:a6:e0:97:ef:5c:f6:
         ae:84:5c:7f:fb:6e:4d:cf:34:fc:12:12:4a:b0:de:d4:cd:8d:
         b4:79:0d:19:88:9a:8a:fb:ad:49:f0:bf:7a:23:40:fb:d3:84:
         7b:82:26:b6:6e:59:d8:30:60:8b:ae:18:7f:72:57:1a:30:c2:
         fa:6a:d6:45:17:3f:56:6c:10:5f:e5:42:dd:10:a9:92:cd:21:
         2d:a2:f9:b3:eb:87:cc:df:27:6c:da:f5:53:8a:2e:a8:7b:b2:
         87:63:36:c4:ac:f1:ca:14:9d:ea:0d:bb:c2:9a:45:ed:c6:d0:
         15:75:ef:7d:22:79:b2:78:20:6a:72:fe:1d:b0:c1:82:b1:f5:
         d5:af:25:8e:f2:18:c9:7b:89:ca:e5:8e:9e:87:c4:14:1d:4e:
         52:6a:94:43:2c:8e:96:73:af:13:f0:52:bb:93:6b:35:cb:7b:
         24:c8:af:51:c6:f8:67:73:bb:42:b3:51:5f:dd:22:aa:db:74:
         95:99:49:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:36 2025 by rpki-client