Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaa89bf7-cc30-3e75-8460-5ee0485844b5.roa
File:                     aaa89bf7-cc30-3e75-8460-5ee0485844b5.roa (raw, json)
Hash identifier:          b3NdYsvzD3eDyxyzsCz3boJxS9ZBCWzyMnNPyiPLuCc=
Subject key identifier:   E0:59:BA:77:89:0B:72:A1:95:B0:C9:CC:81:2A:90:14:7D:0E:75:7F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A698B3653013A7B0F4295DEC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaa89bf7-cc30-3e75-8460-5ee0485844b5.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     30036
IP address blocks:        173.27.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:36:53:01:3a:7b:0f:42:95:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=a309500e-1a09-4fc9-8f85-e529263fcaec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:f5:df:0e:46:d5:d1:a2:8d:36:29:ae:06:
                    67:70:39:99:d5:ae:d5:fe:45:1f:e7:fb:65:24:4a:
                    21:42:3e:4f:11:02:0c:7e:2d:1b:a8:40:5c:ab:08:
                    b9:cc:57:56:71:93:63:d4:c5:ca:ed:42:e2:3b:c3:
                    6d:76:43:cd:2f:39:84:f6:f5:f2:98:db:ae:12:be:
                    27:31:ac:3b:28:0c:86:ad:d5:95:fd:15:7b:25:75:
                    e1:36:be:e4:76:41:9c:1c:96:75:05:b0:44:b1:bf:
                    36:11:7c:1d:5e:ff:78:0f:17:91:28:02:79:f3:02:
                    08:2b:a6:45:71:a0:1e:94:de:7d:d1:e5:05:75:69:
                    d6:5f:ae:48:83:f6:c9:b3:9a:67:7b:ce:31:9a:eb:
                    11:24:0c:33:93:1f:ba:ea:94:2e:a2:be:c8:36:53:
                    28:92:6e:56:b8:8f:c6:f5:b6:d3:5b:33:0d:4b:a5:
                    b5:46:17:5e:c9:ba:f6:96:2b:cf:4a:6b:b4:c0:cd:
                    76:a5:fc:e3:37:13:62:22:2a:23:84:e6:61:a7:a1:
                    38:3b:24:d8:27:03:70:ef:34:79:a9:60:7f:36:b1:
                    73:3f:8d:4d:01:78:11:26:5c:7b:58:80:3d:eb:16:
                    93:2d:4b:ee:28:c1:f3:a9:87:42:f6:27:cf:46:22:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:59:BA:77:89:0B:72:A1:95:B0:C9:CC:81:2A:90:14:7D:0E:75:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaa89bf7-cc30-3e75-8460-5ee0485844b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:dd:3b:38:11:d3:50:6e:bf:b7:b0:ab:16:66:61:6d:5b:18:
         e7:d4:9d:b3:7b:73:ec:a5:9b:24:c1:25:31:c8:98:aa:d3:2c:
         23:7e:ec:6a:17:79:76:de:fd:93:69:5d:9d:9f:c7:ce:28:5a:
         a1:e8:d6:40:ce:a1:8f:bc:b2:16:d5:52:9b:61:c1:3d:28:43:
         58:c3:e3:15:b7:c6:9a:d6:25:61:56:05:b8:eb:8b:ae:9b:3c:
         88:b2:d2:f0:ad:66:87:9e:fa:2a:b7:2d:70:4e:95:8c:d4:a6:
         25:8c:8d:92:fd:c9:9b:6e:14:89:33:65:91:d2:07:2c:b4:79:
         7d:6e:72:af:86:8b:0f:2a:7a:57:5b:96:50:28:13:70:7a:46:
         1c:6a:f4:b1:af:01:2c:17:58:f4:f2:62:b2:52:8b:85:8e:bc:
         6c:5c:da:c3:6e:52:55:9f:e6:3c:05:b0:31:7f:6b:85:77:d3:
         0a:88:4a:66:d4:11:7b:32:dd:a2:67:ce:ee:3f:66:40:ea:e2:
         fd:5d:a3:cb:cd:73:8e:f7:18:89:a4:05:9d:f6:5b:62:c2:2c:
         ea:0b:17:5c:cb:9e:29:44:c9:2a:d3:3c:2f:94:b1:b2:da:45:
         18:dd:eb:53:91:aa:a0:8c:e3:dd:57:27:66:f7:a9:0b:b2:c4:
         21:37:ae:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:21:25 2025 by rpki-client