Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d7c259de-8475-31e9-9fdf-98a187c490aa.roa
File:                     d7c259de-8475-31e9-9fdf-98a187c490aa.roa (raw, json)
Hash identifier:          hNBC5nBzA+GFF6eIpSPIqLXC+DawqFIftf0U6/NKgOs=
Subject key identifier:   CE:2D:46:A7:35:94:13:A3:30:B7:4C:09:67:02:52:E9:25:C7:AD:12
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AE67B7D02A2FD34A840897CE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d7c259de-8475-31e9-9fdf-98a187c490aa.roa
Signing time:             Mon 18 Aug 2025 19:05:30 +0000
ROA not before:           Mon 18 Aug 2025 19:05:30 +0000
ROA not after:            Sun 16 Nov 2025 20:05:30 +0000
asID:                     30036
IP address blocks:        173.28.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:7b:7d:02:a2:fd:34:a8:40:89:7c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 18 19:05:30 2025 GMT
            Not After : Nov 16 20:05:30 2025 GMT
        Subject: CN=04664b65-4b34-47db-98a1-83016ce4b2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:e1:74:ce:97:a2:32:db:8a:c9:4d:03:81:
                    bd:1a:5b:0e:65:a6:35:6d:19:bd:27:f4:e4:ef:4c:
                    2e:fb:cc:df:68:3d:f1:96:4d:ba:55:40:00:15:6f:
                    c2:3d:32:05:7c:76:9b:2a:59:4d:03:54:bb:85:68:
                    2a:26:73:1d:64:b2:54:9c:da:3c:40:58:00:da:87:
                    90:34:22:f4:c3:ec:17:4b:eb:1a:61:a1:c4:b2:74:
                    2d:43:da:43:55:7a:8e:c1:c4:ed:4d:7d:7d:f7:9c:
                    d0:68:bc:e6:00:de:35:82:c0:6b:91:ef:28:e7:0a:
                    9d:4d:98:11:f5:df:ce:1f:26:52:dc:89:bc:68:52:
                    85:e3:db:e2:0c:4b:c4:0d:17:60:ce:34:7d:88:4a:
                    f2:21:bc:c5:4e:2f:c4:50:c2:91:c8:6e:fa:2b:f3:
                    e4:c8:85:1b:23:23:34:89:1e:58:97:09:79:c5:29:
                    5d:66:b8:57:b3:36:de:7a:ad:75:c7:d6:62:d2:79:
                    a3:71:69:b7:b3:92:24:3a:e5:4f:0d:52:29:f9:98:
                    3b:ec:e0:17:f4:f3:44:72:01:c4:77:77:e1:95:b1:
                    60:4b:21:99:58:d6:25:06:3a:2e:d2:e6:47:30:c5:
                    52:62:eb:99:ef:9a:c2:de:ca:68:1a:7f:7d:1b:1c:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2D:46:A7:35:94:13:A3:30:B7:4C:09:67:02:52:E9:25:C7:AD:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d7c259de-8475-31e9-9fdf-98a187c490aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f4:ea:87:80:8e:3d:a4:58:d4:14:47:55:7b:46:60:d4:bd:
         14:91:e6:c5:65:68:ac:19:e8:0b:e7:16:72:d7:12:c0:70:9d:
         77:93:98:9d:ff:e8:ad:94:a5:cf:a8:37:2c:7d:13:7b:7c:88:
         47:37:94:d0:51:66:67:d2:e8:19:a4:33:49:41:a6:c7:10:31:
         14:de:31:22:ab:26:91:45:e3:e3:e9:f8:06:f7:a1:7d:39:77:
         5b:9a:43:27:24:97:d5:3e:d4:a7:5c:4a:8b:d7:18:0a:0e:53:
         1c:c3:10:1d:cc:4c:f3:09:71:db:58:83:15:31:60:80:e4:ae:
         46:66:f4:90:f7:f0:e3:15:33:91:cb:e2:1a:6d:4a:3d:bd:de:
         d9:bf:a4:96:48:bc:fd:04:10:c3:61:b0:4c:b3:4a:6e:a7:ad:
         b8:4f:51:3a:b4:90:32:fd:a0:a2:87:6f:c1:11:cb:00:1b:0b:
         66:64:c0:06:92:e8:8c:87:65:7f:89:75:b2:8a:33:9c:d5:7a:
         e9:71:ac:95:d1:c4:c1:11:f2:62:35:90:e9:d8:6b:77:47:3f:
         cb:e6:f3:5a:6f:ea:0a:57:a7:5b:e8:25:6c:3d:2a:6c:ed:62:
         fa:1f:af:aa:c3:a9:aa:8c:77:f0:c8:2b:8c:a8:af:3a:a4:e5:
         14:a8:98:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:20:23 2025 by rpki-client