Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06f0dc40-d678-3d94-9f4f-e25a9e5c0f93.roa
File:                     06f0dc40-d678-3d94-9f4f-e25a9e5c0f93.roa (raw, json)
Hash identifier:          MAoqDvRHdiDodCFvwgIiUJdOa7t0l9G7w13XSd6tTCI=
Subject key identifier:   FC:10:09:1F:B5:49:28:5D:9D:0A:9B:46:F0:74:B5:8A:1C:05:A4:B0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DC0732CA00383553BB9780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06f0dc40-d678-3d94-9f4f-e25a9e5c0f93.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.18.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:dc:07:32:ca:00:38:35:53:bb:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=35d7595c-5696-45d3-bcf8-583d92f94e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9a:d6:42:e6:97:f9:d0:b3:63:ed:9c:61:d4:
                    39:ef:de:97:84:da:4a:3e:90:74:f0:7e:e2:0b:e9:
                    e1:27:90:76:6c:75:6a:44:55:2d:f8:31:7e:75:7d:
                    b4:b5:8b:45:da:c5:f9:6c:04:10:82:a1:1a:0d:70:
                    d7:1d:69:3d:9d:b0:36:50:7c:e1:0c:c0:ae:42:8d:
                    e8:9b:ef:8e:cf:a4:42:79:e7:ba:5b:d9:e3:b6:3f:
                    30:fb:0d:03:76:0e:a1:bc:c7:98:3e:3c:fc:a0:e9:
                    d4:c2:54:fa:a3:63:40:a5:2c:32:24:13:19:60:1f:
                    00:be:22:1d:04:2c:72:7d:82:f7:88:4a:67:04:42:
                    15:36:6d:6a:f3:b4:2d:b0:33:27:52:5d:de:40:00:
                    83:c4:41:ff:91:6f:b9:2f:fb:39:36:cc:31:89:9c:
                    bd:ce:42:64:df:94:66:7f:b7:9f:b8:70:8a:42:42:
                    92:74:f8:8d:2d:f9:7f:c1:57:7e:8d:4d:9b:52:94:
                    ac:d3:e3:ea:96:89:fd:ec:f0:19:c3:51:ab:f9:a4:
                    5a:e6:2f:a4:18:56:85:98:7f:76:5d:2b:21:80:d7:
                    2a:ee:8c:ab:95:3d:b5:c6:2d:49:3c:cc:52:18:59:
                    f8:75:4d:4d:86:92:79:f0:02:6c:f3:2b:e1:e5:36:
                    8f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:10:09:1F:B5:49:28:5D:9D:0A:9B:46:F0:74:B5:8A:1C:05:A4:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/06f0dc40-d678-3d94-9f4f-e25a9e5c0f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:88:3b:a0:64:af:7f:01:d8:e4:72:9f:3c:27:92:c8:b9:25:
         e6:61:37:7c:bd:58:a5:b6:51:e8:f0:c1:5f:17:b7:9d:35:8a:
         88:24:f1:65:47:0a:70:aa:6e:56:38:bf:20:15:8a:b1:02:97:
         e6:35:ef:88:14:4d:38:8f:58:6d:91:22:ce:04:f0:a2:18:85:
         de:70:51:4c:04:89:b6:f2:1c:78:54:79:12:78:da:5b:b0:f9:
         85:84:3b:f0:1c:8f:43:b5:3b:5a:5c:4d:5a:08:c5:a3:78:18:
         b0:aa:8c:c3:40:a6:b5:0d:8d:3c:6d:ad:c8:dd:f9:73:24:62:
         24:0d:64:20:90:fd:0c:ff:a9:66:84:aa:65:3c:ee:ee:21:5e:
         06:88:c6:03:7c:08:79:31:49:b2:d8:42:09:58:58:5e:76:e4:
         96:02:4f:62:ee:9c:a5:89:41:5d:2a:02:64:72:58:84:31:04:
         ab:dd:8d:05:64:4b:6c:e3:3c:c2:5e:1c:56:d0:c1:ec:b2:85:
         c8:99:ae:9e:76:c0:1c:78:f0:fc:16:64:00:2f:cb:e5:65:0b:
         76:b5:24:02:a0:33:4a:53:65:64:0c:a8:4a:6b:7f:3d:82:8a:
         55:68:57:cb:bc:50:9d:b7:72:0e:ed:b9:b3:ab:ac:0e:09:b1:
         3e:bd:0b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:27 2025 by rpki-client