Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/949366ec-ec71-3cc1-bf3f-859b82be86fe.roa
File:                     949366ec-ec71-3cc1-bf3f-859b82be86fe.roa (raw, json)
Hash identifier:          2eULOOPuJsQ4cTu3R8RvnIHqjw490qPCxHAaaGV1v30=
Subject key identifier:   05:92:09:D9:4F:A9:BD:33:D9:CD:39:DD:D5:BB:91:01:0E:0E:68:73
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A612B07FF5991F4AB31BB0C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/949366ec-ec71-3cc1-bf3f-859b82be86fe.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        173.25.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:07:ff:59:91:f4:ab:31:bb:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=03563a46-7ecd-499d-8edb-a4a644d20f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:5d:c0:8a:de:e1:d4:78:34:80:68:d2:ca:
                    ef:a6:4e:32:24:b7:46:a5:34:90:e0:e9:c8:04:51:
                    26:1d:75:5b:90:05:3d:ec:0b:d3:04:93:b6:cd:9c:
                    cc:f2:b6:bb:18:78:c1:e5:1a:58:78:c5:5f:68:75:
                    2b:a4:5f:6f:e2:30:02:79:71:6c:ec:68:8c:36:38:
                    2e:41:ee:53:dd:9f:6d:d7:bb:d8:ee:c0:d7:47:b7:
                    da:8c:d6:d3:a9:79:c9:5f:bd:f1:19:ca:63:aa:10:
                    5f:b1:bc:3c:2a:9c:9b:e3:e5:71:d6:b5:74:e3:7e:
                    6a:c9:1f:97:40:28:d6:d9:3e:b4:ca:b3:bd:0f:7f:
                    b7:8f:55:f2:a3:a9:af:f6:1c:07:53:cb:db:90:b3:
                    aa:f0:30:c8:fb:a1:d8:e4:ca:d9:84:60:83:00:9c:
                    b9:25:b1:87:d9:f7:89:2e:94:93:22:44:83:c0:6d:
                    09:14:f6:18:43:37:b3:0f:fe:83:f8:d3:6a:db:47:
                    c2:de:0b:a8:91:4c:93:68:df:a2:7a:1d:35:4d:a6:
                    f4:41:ad:c9:b4:f0:44:0e:82:0b:8c:92:15:5d:de:
                    c1:a3:69:ae:df:08:4f:69:8d:3d:d2:51:61:d6:4c:
                    72:c2:8c:d6:cb:26:73:4f:a0:b0:cf:ce:4e:93:5b:
                    4f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:92:09:D9:4F:A9:BD:33:D9:CD:39:DD:D5:BB:91:01:0E:0E:68:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/949366ec-ec71-3cc1-bf3f-859b82be86fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:78:61:f8:49:06:b0:e2:9e:6e:66:3a:64:65:43:24:5b:58:
         3a:2b:b9:71:c6:09:ae:20:00:56:83:68:ec:47:90:6c:13:8a:
         6b:95:23:f5:34:62:68:1a:24:b5:f1:3f:4d:af:0d:24:44:80:
         31:c1:76:79:67:a5:59:a0:ef:e1:af:a5:22:b1:3c:78:58:26:
         70:de:7d:7f:da:ea:21:80:1e:de:d6:33:c7:3f:02:56:a8:c9:
         99:20:51:f8:5e:6b:27:3a:db:b1:8a:16:c9:70:9b:b6:d7:b0:
         9f:d7:19:97:f4:0a:be:4f:6f:4e:00:03:3d:3a:8b:a1:61:ae:
         b1:50:d3:b5:2f:61:84:a6:20:0e:58:ee:fa:9a:f1:11:5e:c3:
         57:30:6d:22:39:97:d2:ae:e0:4e:ae:0b:87:49:de:11:ac:5f:
         fa:bc:52:2c:37:d2:0c:f8:c8:75:43:f9:6b:af:82:66:50:9f:
         71:b7:1f:08:62:5f:c2:b6:a1:3b:43:b5:ab:35:69:43:13:24:
         00:a5:c8:38:a5:48:67:8d:e2:9b:4e:27:73:6a:83:37:ad:95:
         70:05:0b:09:c9:ce:78:f6:d7:14:7f:0f:30:09:f4:e7:73:97:
         cf:31:7d:ed:53:6e:26:e2:f2:96:e3:90:2d:98:0a:d1:3c:2a:
         b3:0f:a9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:22:47 2025 by rpki-client