Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f3ee447f-91a6-3422-954a-c9810f17ad10.roa
File:                     f3ee447f-91a6-3422-954a-c9810f17ad10.roa (raw, json)
Hash identifier:          TAXMZaPMtaUxmalq+7XQNlSGtXs8MZcSKm0imHxICTs=
Subject key identifier:   80:1F:B8:E6:5F:A8:76:92:A1:89:7D:9C:9B:D6:E5:AD:31:ED:C4:AB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B679731924C6325DC44BABCE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f3ee447f-91a6-3422-954a-c9810f17ad10.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        173.19.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:31:92:4c:63:25:dc:44:ba:bc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=57cf7fe3-a182-452f-b6b0-13aa950c5346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bf:80:16:ef:86:82:f1:bb:93:cf:7e:4d:3f:
                    b4:e5:b7:9c:b8:ad:4a:6c:df:56:c2:28:36:e9:ec:
                    a5:67:ff:31:fc:df:b6:95:c8:7a:83:6e:ca:86:c3:
                    7b:5e:4e:5d:9f:22:ad:b1:98:d3:be:6b:49:61:19:
                    f8:16:fc:05:59:93:82:2a:64:23:3e:dd:89:4e:ab:
                    54:9e:90:4e:7f:76:53:0d:57:a7:e4:20:dc:b4:b9:
                    1e:99:d2:20:f1:fc:db:e5:50:1b:a9:98:12:bc:fc:
                    c1:f3:9c:cf:69:69:78:dc:5f:df:1b:cf:a8:49:27:
                    ec:1a:e9:60:19:47:2a:b1:ad:51:3d:2d:15:de:cd:
                    8f:a0:0b:a9:a7:57:b9:66:40:45:81:d4:77:a5:79:
                    fc:0b:53:2a:21:af:9b:15:29:05:94:8a:cd:b0:68:
                    cb:ee:43:11:5e:44:dd:50:20:88:61:3b:d4:8e:b5:
                    f5:de:db:b1:b9:9f:d4:2c:67:97:24:41:8c:be:52:
                    25:3c:05:8b:d4:da:b8:dd:cc:cb:ca:65:5a:9e:82:
                    99:d3:80:d0:cc:f6:7b:e7:36:14:a7:37:76:0a:f3:
                    4c:b2:6e:b3:f2:b6:14:6b:7b:df:d4:fc:2f:d2:f1:
                    42:c7:69:09:2b:18:c0:b9:38:d5:3b:be:90:e7:4c:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1F:B8:E6:5F:A8:76:92:A1:89:7D:9C:9B:D6:E5:AD:31:ED:C4:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f3ee447f-91a6-3422-954a-c9810f17ad10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:7c:08:7e:bd:4e:a7:25:e8:69:a9:a5:5c:d7:39:6f:87:
         49:54:db:53:80:dc:24:af:6e:98:57:a2:d0:1b:de:0f:34:21:
         3e:f0:5e:25:e1:83:d0:1c:73:25:77:8d:86:f1:5e:f7:ae:cf:
         0c:47:7c:fc:6f:70:cd:dc:ad:37:9a:8b:a7:d7:16:26:0b:5c:
         8e:b3:25:5e:50:4f:b8:47:c9:57:63:5f:bd:ac:69:e0:1c:69:
         7e:fc:fd:58:f0:30:36:8f:2c:4f:0e:25:e2:d6:60:8d:8d:2e:
         66:75:29:1f:10:bc:57:62:12:44:dd:5c:f0:ac:2f:5d:98:e3:
         97:47:f2:fb:eb:53:d9:ee:f6:92:b7:2b:f3:a7:7d:0d:cd:43:
         a7:1f:ef:79:c9:e4:e7:9e:a9:52:67:e6:9c:e2:85:83:ca:81:
         09:1e:f3:98:eb:2b:24:87:5c:33:ed:73:64:9e:46:6e:37:f3:
         db:f9:e5:d2:0e:d3:59:4b:08:b9:92:98:5c:8d:d1:c2:c4:53:
         a7:3c:24:b3:31:5a:2f:cb:6a:05:90:d9:0d:e7:dc:44:fb:51:
         6e:af:a8:03:af:1e:f5:19:32:a8:03:a1:be:f8:66:36:08:a4:
         5e:2c:b1:3f:f8:d7:4d:5b:72:72:48:dd:57:eb:47:63:8b:cc:
         8c:c2:39:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:59:08 2025 by rpki-client