Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0da73f8-f77c-3e4d-8a4c-a442e64eee43.roa
File:                     e0da73f8-f77c-3e4d-8a4c-a442e64eee43.roa (raw, json)
Hash identifier:          jCnWNhowf/I7dVF0GZ/gaHFp7YI8BwsWnx6/cBRIYvg=
Subject key identifier:   5E:E4:23:B5:17:18:26:6D:FB:A4:3D:A0:17:23:F4:04:35:7F:58:30
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6201D798C13AA040ADEF3A40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0da73f8-f77c-3e4d-8a4c-a442e64eee43.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        173.27.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:d7:98:c1:3a:a0:40:ad:ef:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=846b5bd1-5ccd-4620-9caa-7e9dbb6d29c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a4:ad:45:35:9d:f2:7f:3c:14:bc:64:49:77:
                    1c:be:21:be:07:08:8e:30:ee:e0:53:71:76:5b:4d:
                    31:08:12:cd:69:1d:bf:72:aa:2a:40:97:4c:53:70:
                    75:71:df:9d:f5:ec:15:5e:8e:2b:c0:06:65:5f:d8:
                    e4:fb:94:02:10:eb:6c:61:bf:60:47:68:74:81:4d:
                    ac:7d:c7:49:55:af:77:6b:69:65:f6:68:a9:c1:17:
                    28:02:e3:1b:fc:4c:a9:b0:9f:34:1a:b7:55:a5:9f:
                    67:1c:08:fb:ca:f5:24:d3:0f:76:1a:65:4b:e8:85:
                    61:55:ce:3e:25:a7:00:90:5c:93:f9:c6:b2:c1:d2:
                    3b:d4:fd:b6:0f:9c:bc:63:0a:4d:99:f9:7c:71:5a:
                    f2:34:fe:ad:98:55:0e:28:a6:0f:24:57:9f:7e:97:
                    72:f4:fd:df:6a:73:99:90:0f:6e:d0:2d:13:01:93:
                    fc:d2:d9:21:89:ce:08:47:0b:1f:21:c5:31:ea:59:
                    f7:55:ef:69:2a:24:97:7d:59:8f:70:7e:a5:7a:9f:
                    95:f4:83:20:4e:50:90:e5:69:f2:b4:64:d2:ee:91:
                    ff:f4:cb:b0:06:3f:6c:5c:f5:d3:15:fd:83:90:7a:
                    72:c1:18:94:ef:87:19:0a:15:16:40:92:c7:1b:ac:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E4:23:B5:17:18:26:6D:FB:A4:3D:A0:17:23:F4:04:35:7F:58:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0da73f8-f77c-3e4d-8a4c-a442e64eee43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:77:38:24:e8:69:34:33:69:55:d4:34:87:eb:7d:ab:a5:f6:
         67:26:5e:1f:d4:27:1b:f0:5e:79:15:51:ec:26:ba:56:99:48:
         42:bc:e7:66:c8:75:24:03:57:fa:1a:e2:13:17:b2:4a:18:68:
         ea:70:85:fe:25:38:55:82:22:89:5a:fa:05:98:71:a5:a5:04:
         4e:2c:1e:a7:c4:c8:3a:0b:2e:e7:c8:8c:a7:3c:8f:12:49:60:
         56:7e:da:c9:45:e9:90:67:d4:d9:70:a5:10:4c:61:dc:c4:ad:
         15:94:e9:1b:85:6e:92:1e:50:6f:22:73:5d:16:fb:43:40:ec:
         27:e7:ee:de:9e:57:d7:b6:53:23:d1:dd:d9:cf:b0:12:f1:87:
         fa:7e:8f:eb:50:43:00:01:5b:f5:23:64:33:92:51:1d:15:f2:
         a7:1c:c8:80:6e:8f:9d:7f:37:3e:c9:d6:38:98:f3:07:ea:71:
         42:8e:f0:8f:19:76:1b:1f:3d:61:07:a6:dd:2a:ca:c2:5b:92:
         0a:52:52:39:5f:a8:b8:af:c2:a0:54:fd:0e:66:f9:4a:f4:7b:
         4b:f4:8e:80:dc:a4:99:85:ba:b4:f1:fb:27:65:48:ac:67:ed:
         8d:b0:e3:b1:f7:9d:69:35:9d:d5:ed:45:db:83:83:e1:d9:03:
         41:46:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:59 2025 by rpki-client