Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa
File:                     ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa (raw, json)
Hash identifier:          dfXnohMdpjiycN+4qyZ0Qifdz8hQXNWoHHgFTmD1ci4=
Subject key identifier:   55:7C:71:B1:87:0D:DF:F5:A5:56:03:E4:2D:11:F5:84:D6:34:71:E8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE3D3DD168B494819BD500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.28.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:3d:3d:d1:68:b4:94:81:9b:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7532699a-9762-4841-aa76-47d2d6696b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dc:5c:3c:62:d0:25:96:7d:fa:9f:be:2d:22:
                    85:00:04:98:40:fa:be:f6:31:80:cd:5a:5e:4a:69:
                    d2:2d:35:ba:6e:06:6f:dd:3a:43:38:a5:6c:34:fd:
                    ef:c2:19:e2:2f:98:e4:bd:5d:2f:b2:b1:87:44:36:
                    50:77:0b:4b:31:84:98:da:4e:e1:af:32:27:fa:6d:
                    7a:7f:4c:09:9e:a0:e6:a6:2a:4a:d6:fa:3b:35:35:
                    0d:5d:7d:30:61:3b:77:85:3d:8c:d0:e5:db:e8:4e:
                    2b:7d:5f:59:c0:86:7e:bc:d0:81:23:48:cd:ae:3d:
                    96:c6:36:fd:73:35:bb:81:04:89:16:08:ae:0f:98:
                    12:c6:e5:2a:89:bc:4c:41:f0:a4:3b:13:59:63:ca:
                    44:ba:9d:4a:46:f0:39:26:f3:12:26:e9:30:c4:f8:
                    f3:61:51:5d:70:17:b1:10:38:ae:b4:e8:d3:7f:ad:
                    72:31:35:fd:61:5c:35:d9:61:ab:b7:ad:77:12:3e:
                    d2:ef:f4:2e:6d:bc:93:c6:c8:26:bd:ef:50:0b:6d:
                    b5:e5:32:92:12:5d:8a:cc:c8:de:23:c7:d0:10:2e:
                    0c:0c:8d:92:ae:be:f4:f6:2d:4c:aa:ee:f3:14:cf:
                    14:3b:ad:76:8e:8a:22:e7:10:41:3d:06:d8:45:81:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7C:71:B1:87:0D:DF:F5:A5:56:03:E4:2D:11:F5:84:D6:34:71:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d8:fe:8b:d1:f2:e1:65:ce:fc:27:38:8f:ef:98:36:0a:5f:
         e2:39:bd:ca:ea:ed:38:ee:5b:44:9e:4a:e9:74:84:4e:ee:1d:
         d9:f1:31:f3:48:bc:3a:cb:9e:62:c9:1a:e4:89:72:dd:ff:b2:
         cf:e9:d7:b7:d3:69:84:a2:5a:80:ee:a4:b8:99:06:6d:88:3a:
         80:2d:64:a0:46:91:46:65:e5:66:8d:99:ae:e0:3a:f0:84:2d:
         88:57:d8:a0:f9:71:93:82:06:2d:c2:ce:dd:ef:e4:70:76:6c:
         09:9e:26:f9:47:bd:a2:78:b4:11:9a:36:d8:b7:cf:51:d3:a0:
         b0:b1:ec:9c:a1:37:08:d5:48:1e:15:1a:53:9c:d0:89:d1:02:
         cb:c4:97:a8:f0:39:ae:87:4d:36:af:8b:61:b4:61:bf:84:70:
         52:77:2b:e0:a8:17:a7:e1:2d:62:87:f2:3f:45:3d:37:a4:7f:
         0a:04:c9:ee:03:e6:fd:52:f7:0b:8b:fb:1c:17:96:25:f3:16:
         44:8b:a9:12:7f:77:e9:3b:06:49:f4:88:0e:8c:d6:74:26:d3:
         17:42:41:c6:70:e5:0c:62:f4:31:3a:41:be:da:80:3c:fe:cb:
         4c:a4:ed:55:f7:79:39:01:48:60:d4:7e:cd:d9:88:00:43:0a:
         81:a3:73:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:23 2025 by rpki-client