Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/36f7e937-5ec1-3527-91c3-5bdc636ed9e9.roa
File:                     36f7e937-5ec1-3527-91c3-5bdc636ed9e9.roa (raw, json)
Hash identifier:          ldEets56zNXL9T6/W+AjHAP1g52P8ypB6J/yY9W1Tm4=
Subject key identifier:   A0:7C:2A:C6:AC:E1:0E:05:22:E8:75:E3:F3:DD:F4:02:4B:C3:0D:F2
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F4328584B1F017B1A3FCB588ABBA1AE00
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/36f7e937-5ec1-3527-91c3-5bdc636ed9e9.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     30075
IP address blocks:        168.99.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:7b:1a:3f:cb:58:8a:bb:a1:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=0c205a40-4484-484b-a35c-1023a1186941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:39:6b:98:16:8c:f3:b0:4d:72:ec:50:a0:
                    e6:6a:52:8c:67:73:0b:42:e7:a0:6a:b8:a4:52:bd:
                    b7:0c:20:4d:e3:d4:a5:24:85:55:68:78:61:39:5e:
                    8e:47:a8:70:65:28:81:59:8b:e9:83:b7:ce:cb:17:
                    03:5d:1c:57:27:25:e5:6b:86:33:24:0c:e5:b0:bd:
                    15:22:8d:68:7f:5f:92:fe:da:c7:56:03:c2:f7:08:
                    50:54:b2:4c:ad:86:14:e9:97:82:f2:7a:90:0c:8f:
                    cd:f9:8b:95:c2:3a:e6:ae:c6:9a:0b:78:ba:9d:f4:
                    21:ba:ad:a5:53:4f:42:97:22:0e:1e:b3:46:6e:83:
                    0a:00:d3:ea:b0:ee:c9:8c:90:73:5b:43:66:e6:ac:
                    4f:58:6e:8f:ba:6a:4f:7c:80:fe:e3:8e:3d:73:64:
                    a6:76:c4:b2:eb:02:6f:86:75:c7:a2:4d:36:4a:c1:
                    02:6b:34:eb:6d:67:97:18:fa:7c:9f:bd:a7:ea:5d:
                    55:4a:6f:19:0a:e4:3f:d2:0e:9b:97:b7:82:cb:6f:
                    fc:36:bf:51:d2:4f:70:37:a0:ad:05:99:c4:1d:1c:
                    9a:cf:ac:a3:ec:ef:38:31:1c:65:e8:60:72:ed:00:
                    85:95:4e:b4:32:ef:53:7a:3d:b4:5b:a2:04:18:01:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7C:2A:C6:AC:E1:0E:05:22:E8:75:E3:F3:DD:F4:02:4B:C3:0D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/36f7e937-5ec1-3527-91c3-5bdc636ed9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.99.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:2c:f9:47:d0:a5:91:37:92:56:84:de:df:38:e8:81:f1:3e:
         61:2e:7a:c5:44:b8:6d:be:f4:ba:6b:25:f5:73:80:f9:96:60:
         c7:d5:cc:a8:74:65:d8:11:63:65:57:69:fd:10:0f:1f:24:87:
         28:3b:6b:8b:5d:e4:b8:67:9b:a1:9e:e6:f4:8e:a0:8c:8a:de:
         93:46:ff:64:d1:60:ef:e5:b9:78:13:7e:06:46:58:77:4c:d6:
         f5:ae:66:71:76:8e:33:68:35:37:2d:65:c1:bb:0d:ed:36:19:
         0d:36:da:12:f2:af:d1:50:1f:23:2b:3a:2b:c0:e1:5d:4a:99:
         6e:22:56:c9:3e:23:2a:39:56:72:e3:a9:0c:2f:47:8f:23:c7:
         b3:70:2f:ec:8e:c5:64:21:50:67:5a:22:0f:fb:9e:d2:42:d3:
         fb:25:21:23:df:e8:e6:c3:50:13:24:30:11:aa:58:fd:09:b3:
         1e:4c:60:0a:cd:dc:db:46:7e:49:dd:70:06:41:0e:1d:0d:a4:
         17:a9:54:11:30:8c:03:70:ad:05:9b:b5:b2:72:44:46:48:c4:
         9d:5b:45:bb:fb:18:d5:3f:b4:b4:dc:6b:83:f5:d7:8f:bd:14:
         fb:de:91:1f:45:e6:00:c4:2a:6a:1d:0a:06:bb:a3:cc:3c:f4:
         62:5c:89:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:47:11 2025 by rpki-client