Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c821f86f-a188-3c0d-86c1-ff1f6b566acf.roa
File:                     c821f86f-a188-3c0d-86c1-ff1f6b566acf.roa (raw, json)
Hash identifier:          elk/J7pUcpoJ2X66yJhLOhZd73OGgQTiozzlBYOYG7c=
Subject key identifier:   B9:57:EE:C6:BE:4A:11:B0:F3:6D:03:52:0F:59:9E:2A:3D:11:2D:51
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B747C1B5A4C4B7B724300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c821f86f-a188-3c0d-86c1-ff1f6b566acf.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.25.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:74:7c:1b:5a:4c:4b:7b:72:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=b638ac11-4cd9-4e3b-82bf-269f00b4f135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:68:92:91:86:4b:d9:f5:42:7e:3a:42:da:33:
                    42:76:92:bf:37:eb:5e:54:44:19:6b:73:0d:25:ec:
                    d1:b3:b6:dd:ea:07:a7:02:7d:24:42:50:86:f4:29:
                    02:67:b4:93:41:5b:9a:5c:2d:ac:0b:1a:61:f1:e9:
                    ac:85:5d:ae:82:fd:3e:1a:80:15:37:63:ab:87:a0:
                    85:1f:2a:cd:67:a6:aa:17:8d:55:dc:6b:7d:a2:cd:
                    47:46:16:64:62:56:97:5b:45:48:90:89:91:a5:e1:
                    dc:c3:4c:7b:af:aa:b7:43:d8:a9:be:bd:09:4b:9f:
                    ef:63:aa:bd:ac:0e:a0:d4:5e:59:df:54:d0:30:98:
                    cb:84:74:5d:34:04:84:c9:db:d9:64:98:ac:2e:f0:
                    98:d8:c0:24:52:0c:f9:1f:b8:fc:7c:d8:81:3b:f3:
                    61:f3:62:07:02:c4:ab:a2:ff:99:b9:30:b2:d3:06:
                    42:45:e6:08:cd:97:7f:35:b0:c3:26:5d:3b:f7:fb:
                    28:7c:03:cb:e8:5a:cc:bd:a7:4b:f6:df:69:f8:b0:
                    a0:5d:80:e9:94:f0:b5:b0:bf:c4:2b:06:b6:fe:2b:
                    71:43:58:60:3c:08:58:21:b2:bd:27:8f:77:c9:59:
                    ea:0d:be:46:0d:a4:d7:64:25:f2:e0:41:4a:2b:34:
                    18:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:57:EE:C6:BE:4A:11:B0:F3:6D:03:52:0F:59:9E:2A:3D:11:2D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c821f86f-a188-3c0d-86c1-ff1f6b566acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:47:bf:be:b0:19:65:61:e0:60:b4:ed:38:4c:a2:d1:07:9e:
         2e:70:34:cf:c6:d3:da:6a:f7:24:1e:e7:c1:1b:89:58:71:73:
         1a:82:87:e4:4b:88:59:a4:5c:68:87:0e:c8:7c:a4:75:80:23:
         0f:78:cb:39:e6:0d:6f:fb:30:c3:0b:94:c2:80:9e:c4:17:91:
         34:39:53:90:82:24:c9:38:42:18:81:7b:24:24:ba:60:1b:ee:
         a8:4c:67:c5:ee:40:b5:bd:4f:ec:4f:59:8b:50:03:3f:58:64:
         6b:7e:cf:dd:06:27:7d:13:b1:c3:9a:93:54:c0:c8:d7:ba:59:
         de:31:75:ca:93:8b:8c:f1:9e:91:35:45:53:24:d8:1e:c1:e1:
         55:24:16:6a:d4:f9:b9:f0:98:6d:b9:fc:c9:99:92:64:b6:a1:
         1f:80:a0:9b:70:82:76:25:98:0f:e0:9b:ea:cc:84:af:68:c4:
         f2:e4:fd:b1:63:5d:8e:82:7d:98:9e:7f:3e:05:97:85:e2:7f:
         fd:fc:e6:c3:b5:97:9c:d9:45:4d:a4:d0:f3:e4:44:72:44:a7:
         94:7b:d0:bc:33:01:39:c3:c2:6b:c6:34:f4:2d:a9:fd:18:0a:
         45:13:45:42:34:20:56:d7:13:4c:b0:0b:26:b5:ef:fd:3b:50:
         93:45:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:17:08 2025 by rpki-client