Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da24ea1c-45de-3bb8-874b-d2d7edf5b0f4.roa
File:                     da24ea1c-45de-3bb8-874b-d2d7edf5b0f4.roa (raw, json)
Hash identifier:          0b4neQLYwPmhjEreMsrZ4Ul3z1GLR8yiwtnxMPkZnVE=
Subject key identifier:   E9:DD:6A:35:44:27:AD:31:54:FB:BA:35:B8:18:F4:10:4A:7A:70:F4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B4EA5D977725312CB3F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da24ea1c-45de-3bb8-874b-d2d7edf5b0f4.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.25.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:4e:a5:d9:77:72:53:12:cb:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=0436bc7f-e493-4939-b251-0fb744742942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e3:59:4d:d9:7d:af:fb:e9:ac:d7:8f:5a:4a:
                    21:ca:15:3f:2b:b0:59:a4:c6:3b:6c:2c:5a:db:22:
                    58:23:53:aa:9c:33:a7:9b:5c:00:7b:02:fc:ba:1e:
                    f2:db:63:4b:61:b3:cf:46:12:ba:01:82:e3:db:d1:
                    de:ee:5a:57:ad:e2:bb:3c:40:d1:68:71:5c:62:05:
                    77:3d:35:47:7c:28:3a:32:0a:d1:6a:c2:39:9c:ad:
                    5d:ce:f6:f7:2a:03:ca:02:d4:0b:be:4b:85:d6:e4:
                    12:45:75:0f:d2:b4:12:5c:e5:34:41:0e:56:88:6e:
                    78:4d:fc:33:2f:9a:a3:7f:7b:7c:0b:1e:3e:16:ff:
                    54:f6:7f:6e:6b:34:df:f7:39:76:8f:21:6f:9b:35:
                    57:2a:e7:cc:a8:ff:72:83:9e:98:4f:24:97:eb:57:
                    98:47:4c:05:39:5b:23:b5:ba:68:3d:c8:c5:a1:12:
                    22:ec:3d:2f:8c:d3:9c:2c:25:6a:a1:8a:0b:2f:0a:
                    7f:45:62:73:ca:59:96:66:27:4b:38:67:53:f0:3d:
                    c1:69:82:71:27:9d:56:6c:47:a8:bf:81:8f:d6:bc:
                    6d:ca:71:74:ca:f9:9f:23:73:cb:eb:a7:64:3a:78:
                    b7:3d:e9:52:bc:2b:6d:a3:35:e3:0c:3d:2c:ce:5c:
                    97:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DD:6A:35:44:27:AD:31:54:FB:BA:35:B8:18:F4:10:4A:7A:70:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da24ea1c-45de-3bb8-874b-d2d7edf5b0f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f3:f4:6d:62:62:f2:65:62:27:9c:ff:ae:f9:63:e8:f9:82:
         d7:dc:1b:3c:9c:18:b0:01:27:ee:f0:33:97:59:26:16:34:81:
         96:0e:9d:a3:03:0a:e8:a4:84:d4:40:4b:e2:59:ba:0b:d2:40:
         66:06:8d:93:db:60:60:c3:10:83:4d:89:2b:cd:fd:29:5c:2b:
         6c:cf:e3:f9:eb:99:23:77:95:94:6e:f8:44:ba:b4:6f:d0:82:
         2e:a0:e6:10:d9:94:75:01:c2:0b:7e:b6:c5:c0:d8:48:1b:80:
         b0:9e:d1:82:59:1e:4e:3f:d6:6f:d3:89:e3:f4:89:9f:ef:00:
         7c:f1:2d:2c:f0:84:be:35:a3:a3:84:28:72:15:32:44:1f:e2:
         e1:5b:cd:74:97:b5:cf:57:4a:2a:8d:02:c9:22:ee:c7:fb:08:
         2a:0d:62:5f:0e:18:3a:07:da:57:b7:db:bc:5e:6f:9f:35:f3:
         33:d5:58:29:d9:57:4a:c8:a4:5b:f7:92:e1:c3:f7:1f:ad:1a:
         fe:9f:3d:2f:a2:68:35:e3:44:d9:fe:c8:a4:17:85:29:7d:ea:
         18:33:25:29:1b:97:34:99:9a:70:50:81:85:56:46:a4:9a:3c:
         cd:ac:22:b4:d2:8a:34:4c:e6:c1:cb:66:fe:e0:cb:8f:f7:67:
         db:9d:f9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:35:47 2025 by rpki-client