Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad554eb-9cea-3b26-9fe7-0a0e8542d977.roa
File:                     0ad554eb-9cea-3b26-9fe7-0a0e8542d977.roa (raw, json)
Hash identifier:          ggFdoE/fhNPri7VWoG0X3MG8lCW26JQj6g0GXhjURjQ=
Subject key identifier:   79:91:6F:88:93:7B:FA:03:BE:37:04:D6:1A:B2:D8:AB:B4:FF:BF:50
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410D0499FC6B07B6FE13D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad554eb-9cea-3b26-9fe7-0a0e8542d977.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.31.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:d0:49:9f:c6:b0:7b:6f:e1:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8be62dc9-e87b-4d7d-908a-11b22359151e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:52:c4:ca:8f:e5:2f:3b:06:5e:78:e7:f9:
                    9b:e3:3f:4d:b7:22:da:fa:60:ea:bc:ed:de:eb:c7:
                    69:f1:cb:9e:fd:94:b1:80:1f:15:29:c5:f2:15:e2:
                    3a:ad:ca:aa:df:b8:a8:72:45:17:8c:6d:54:05:a5:
                    5d:d6:a0:55:dd:b2:5c:42:57:76:3a:6d:a8:7f:4e:
                    15:fe:99:28:96:01:de:91:1f:5e:b3:05:85:5b:e4:
                    9d:75:85:aa:8a:8b:0b:a7:25:3e:af:f7:6c:3c:8e:
                    4e:f5:bb:72:10:47:c0:9a:11:f4:79:5a:b3:38:6e:
                    c9:b4:c2:bc:53:3b:fc:71:39:52:66:7d:85:20:60:
                    33:e0:d1:d8:e4:2c:9a:70:6e:0b:ec:cd:1f:b1:5d:
                    69:a9:4e:fe:59:13:5c:a1:05:ec:8a:85:7c:0e:bd:
                    db:f4:84:31:00:2b:d4:fd:3f:a5:1b:e1:44:d7:b2:
                    0a:82:e9:33:25:f1:e2:f7:09:31:60:8e:43:2d:ff:
                    c6:4d:ec:7b:2f:7b:fe:0f:7d:80:8c:47:3e:79:e0:
                    d2:f7:c4:97:86:e7:a9:f5:d3:83:47:14:98:46:37:
                    c8:e2:13:d8:d1:4d:35:fa:08:d2:13:5c:0a:fb:d3:
                    3e:29:ea:0a:6e:53:c3:f2:29:62:a9:ad:a3:c1:ef:
                    40:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:91:6F:88:93:7B:FA:03:BE:37:04:D6:1A:B2:D8:AB:B4:FF:BF:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad554eb-9cea-3b26-9fe7-0a0e8542d977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:55:44:0b:72:8a:fc:c7:99:ca:36:dc:ad:8c:86:61:c3:e5:
         07:6b:40:13:08:d5:57:09:f1:a0:ad:6d:65:00:bf:36:2b:56:
         2b:64:8c:18:6a:4f:b3:bb:ee:d2:b9:b2:cc:14:71:3b:3f:52:
         7d:23:38:48:6a:0a:1d:19:79:14:ed:48:4e:de:0d:66:b0:c8:
         9d:d2:e6:9d:a7:14:d4:5e:8e:a9:83:46:c9:5c:d4:34:0f:61:
         f2:ea:a6:71:b3:08:b5:c7:53:69:82:3b:8f:18:6c:6e:bf:b5:
         6c:e5:5e:ab:b7:40:c0:6f:0a:af:5c:45:f9:f5:51:7e:3b:e2:
         34:83:a6:f8:29:65:dd:0f:23:51:43:84:74:6b:9b:72:c4:6b:
         27:25:5d:5b:99:72:a8:17:12:e2:d7:5f:6d:4d:db:03:af:64:
         f2:23:a2:03:d4:f7:cb:b8:78:fc:1d:25:95:71:7d:5d:ea:56:
         26:5e:20:30:4e:e8:ff:d1:56:94:91:5c:e3:93:7c:bd:0a:63:
         67:de:56:46:b4:06:91:88:9d:71:4a:ef:4e:36:9d:23:bc:76:
         f1:92:e3:50:42:94:18:eb:24:5a:79:c3:1d:70:cf:5a:1b:2e:
         8f:45:1f:65:a4:d1:5c:1f:66:37:69:9c:7e:e6:56:5d:a6:1c:
         3d:c8:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:40 2025 by rpki-client