Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6e4dae6-057e-39f6-87c4-29ab3553b1ee.roa
File:                     e6e4dae6-057e-39f6-87c4-29ab3553b1ee.roa (raw, json)
Hash identifier:          QMSgbdtokrtQlIfn+F9JJRUnAMnZCLtK5US0aguRREg=
Subject key identifier:   02:37:FB:3C:59:E0:5E:CD:7D:BC:7D:4F:6B:17:3D:EA:46:31:40:29
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE62AFC04C1A5BEC8642A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6e4dae6-057e-39f6-87c4-29ab3553b1ee.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.25.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:62:af:c0:4c:1a:5b:ec:86:42:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a8f7ba11-0fdf-4468-9dac-4d59a94aa438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:67:bd:39:60:c7:88:cd:af:ac:d1:af:33:
                    53:43:5d:49:07:15:82:0b:5d:27:e8:89:21:65:ef:
                    31:45:ad:f0:b8:86:2a:c0:53:c7:7d:18:8e:91:45:
                    a5:52:06:58:1d:86:c1:33:ec:7d:87:c4:2a:9e:f8:
                    c9:a1:54:93:dc:4a:53:ec:a4:3c:1d:bf:1f:af:a9:
                    02:9e:85:4b:1c:89:7e:44:54:31:02:c5:03:20:70:
                    04:34:ba:0d:15:c1:27:93:bd:2c:f5:b9:5c:5a:5c:
                    77:78:6f:d7:dd:69:09:7c:7f:0d:f7:6c:1e:5a:7d:
                    38:fc:6f:c0:bc:29:82:c0:b4:5e:27:08:1d:e8:76:
                    3f:af:f3:8f:df:39:0e:7d:32:4b:f0:0a:a0:6a:55:
                    8b:e7:f7:11:60:ba:04:3c:63:f6:c4:08:2e:be:ef:
                    cd:54:37:0e:1d:e9:0a:0e:0f:f1:a5:e2:c3:15:9e:
                    e6:bb:8d:95:2a:f3:1b:17:69:d6:f1:6b:43:d8:5c:
                    72:b3:f8:41:77:0e:8e:38:e0:0b:32:c4:c1:f6:ed:
                    12:a3:7f:89:f3:07:38:b9:58:75:ea:5a:9e:70:d9:
                    d0:67:d0:1e:1e:b4:7a:80:3f:15:89:42:15:29:01:
                    65:8a:ac:5e:0a:e3:15:5f:51:ac:b3:1a:5d:b2:48:
                    f9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:37:FB:3C:59:E0:5E:CD:7D:BC:7D:4F:6B:17:3D:EA:46:31:40:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6e4dae6-057e-39f6-87c4-29ab3553b1ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:92:6b:7d:45:8c:0e:1b:66:89:d9:35:db:60:8e:92:9d:a2:
         e3:f4:3a:3c:a7:92:bd:08:e1:ac:9f:af:91:f4:68:20:33:e3:
         d9:49:c3:25:a8:97:c7:78:0f:1f:67:69:03:0b:55:d5:cc:cf:
         f0:ec:08:b1:b1:41:0e:ab:a0:03:ad:97:43:86:2a:33:8b:f1:
         c7:5c:3f:ad:e9:5d:f9:45:f6:46:da:57:c2:cb:27:c3:07:48:
         b5:30:9a:28:7d:5f:66:73:77:cd:f5:91:24:2e:f6:3a:79:47:
         f8:9c:62:44:6f:1e:a2:0c:44:d8:c7:33:70:be:a0:d1:9b:82:
         82:51:91:e3:30:3f:a5:3a:6b:c1:f7:a7:b8:ac:b5:fd:ed:cb:
         77:11:58:e3:25:62:0c:de:f7:ae:43:7c:c3:fc:44:02:de:35:
         7e:0f:e2:9e:09:d5:e5:94:5b:aa:43:df:cf:b5:32:09:de:f5:
         92:74:2d:4b:ec:26:69:24:aa:1c:01:e6:bc:87:8b:34:e2:e5:
         c5:62:72:0e:06:6e:91:11:7b:bf:1f:d9:85:31:e2:52:9b:11:
         17:4d:a4:9d:2f:c1:1a:2b:32:b6:82:66:ee:09:75:db:02:1f:
         aa:cb:ac:b4:d3:cd:7e:36:90:e7:a5:cc:24:14:23:2d:38:21:
         3a:4e:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:59:11 2025 by rpki-client