Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3adc686-2254-30df-9af2-38d13fc2c6b5.roa
File:                     e3adc686-2254-30df-9af2-38d13fc2c6b5.roa (raw, json)
Hash identifier:          m4W8j7VwerF93nAwiXiy4KuCp21LEaHhU1LN4lF91nQ=
Subject key identifier:   27:44:C1:CB:11:00:EC:CB:CF:09:84:4D:E2:3F:1F:F8:E9:92:EF:E6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B79C9FB35D2131519C5E49AC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3adc686-2254-30df-9af2-38d13fc2c6b5.roa
Signing time:             Fri 10 Oct 2025 13:27:29 +0000
ROA not before:           Fri 10 Oct 2025 13:27:29 +0000
ROA not after:            Thu 08 Jan 2026 14:27:29 +0000
asID:                     19905
IP address blocks:        173.17.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:c9:fb:35:d2:13:15:19:c5:e4:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 10 13:27:29 2025 GMT
            Not After : Jan  8 14:27:29 2026 GMT
        Subject: CN=98594ab3-dde0-4fca-9e14-aadb1c479c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:99:92:e8:46:13:78:fb:4a:14:93:b5:45:
                    d1:86:a2:24:c9:a8:b8:89:42:ef:5a:02:06:79:ce:
                    0e:26:08:6a:e8:fc:c1:22:cc:11:54:ea:a0:67:0f:
                    1c:6c:c8:27:3d:98:a1:8b:d8:59:9c:28:f3:00:d1:
                    91:56:60:27:fb:b4:d6:5e:df:9e:e5:4f:9f:7b:11:
                    5e:e1:c3:76:11:1f:ce:6e:32:0a:f2:ee:f6:1c:8b:
                    1d:00:94:d4:a4:74:3c:33:fb:59:1d:e5:6d:54:47:
                    59:e9:cd:85:13:76:bc:f9:f5:55:d7:1a:8c:b0:2b:
                    3a:c6:c9:91:d1:ba:82:54:9d:ba:9f:0b:c2:3a:d8:
                    26:2f:03:a3:14:03:e4:a6:18:a0:41:f5:d1:06:f2:
                    2d:e2:63:44:f0:f9:b1:22:bd:4f:88:16:80:5f:f5:
                    89:99:e4:84:d9:2f:d5:e3:89:20:72:8c:b6:be:06:
                    fb:69:7b:b6:9b:72:28:3f:fe:7c:c8:d0:ee:a9:af:
                    93:34:58:5b:bb:f6:9b:e5:d2:ce:5c:c2:df:3d:6d:
                    c6:a0:8a:5d:d1:ec:ab:14:c1:d4:09:55:9d:75:f7:
                    45:6d:44:10:b5:a4:0c:82:c2:7f:45:90:a7:9e:bb:
                    fa:be:50:18:26:70:ca:2a:8a:0c:65:f1:85:9b:79:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:44:C1:CB:11:00:EC:CB:CF:09:84:4D:E2:3F:1F:F8:E9:92:EF:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3adc686-2254-30df-9af2-38d13fc2c6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:bd:98:05:42:8a:d9:95:8a:09:a3:76:94:75:b7:c6:d9:f3:
         89:c7:01:5c:88:05:a0:25:28:4a:f4:52:2a:1f:f5:0d:44:31:
         3b:95:ef:d2:3e:e9:5c:db:c3:82:4c:3e:d8:ea:c6:a8:64:64:
         cb:7e:73:e3:16:27:b8:d1:5e:55:11:fc:55:bc:ef:d0:3a:fe:
         e2:bc:c2:42:45:17:08:66:48:2c:42:62:3a:cf:99:ce:00:99:
         d2:b9:b1:0b:f7:15:71:3c:34:e2:d4:ec:1f:a7:5c:2e:dc:b1:
         f9:83:8f:46:37:12:35:5e:30:84:22:82:84:f1:1d:d3:7d:a6:
         b8:68:b9:0c:7c:e4:57:7f:8d:16:a3:5a:5a:e0:c5:56:df:f4:
         d6:72:9b:7e:ec:38:0f:1d:67:15:73:14:c9:96:bd:43:8d:06:
         be:9b:cd:e3:86:e4:67:e9:8d:be:3b:1f:b1:34:6c:68:8a:24:
         ae:9a:7f:f7:6c:c2:8c:1f:67:03:42:ef:4b:49:dc:46:97:de:
         ee:db:c2:0d:a2:c3:83:8d:a6:68:3a:88:52:a3:c5:c9:a2:b0:
         07:59:1e:4f:d8:01:75:f6:8d:c0:bf:3f:87:01:54:49:e6:ab:
         12:fa:15:0a:43:6e:08:fe:17:70:aa:f4:e6:3e:de:e3:50:22:
         90:a8:0c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:22 2025 by rpki-client