Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/164e4b9d-ea60-3a0d-b0eb-48f699fdc8d0.roa
File:                     164e4b9d-ea60-3a0d-b0eb-48f699fdc8d0.roa (raw, json)
Hash identifier:          16foA1tLJsNgX/p7wmrN8CZI9uk+k/7BcSSrIrQt7ps=
Subject key identifier:   07:F7:4A:1A:4F:07:A8:9C:74:AC:29:1F:F2:1F:F7:F6:AB:09:81:38
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A841251D2241F50F2E31ED540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/164e4b9d-ea60-3a0d-b0eb-48f699fdc8d0.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.21.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:51:d2:24:1f:50:f2:e3:1e:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a594a653-a8c9-4f5a-93e1-c48454e6e198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0b:a5:bc:b5:ed:8f:86:05:8b:8e:1a:de:a4:
                    92:75:f7:5a:db:b0:ec:1e:52:8e:da:fb:01:22:8b:
                    cf:2f:66:df:10:29:df:88:4d:de:94:49:33:7e:f2:
                    cf:6d:fe:1b:e3:93:da:29:b2:1e:14:a8:51:90:c7:
                    1a:a3:af:9c:78:62:54:4d:90:af:61:9f:63:47:15:
                    85:b9:0b:6f:8d:74:e5:4c:24:cd:ad:c9:8b:1f:98:
                    c6:ec:f6:10:44:b7:37:5e:14:71:0a:67:da:9a:0c:
                    92:36:a6:7b:6b:b2:42:ff:3f:0f:58:a1:a4:c8:86:
                    e0:3a:c1:37:ff:41:a2:8d:e0:a9:b9:b5:27:92:74:
                    8e:ea:42:bf:61:2c:7d:a1:64:9f:67:82:68:1d:33:
                    f3:05:7b:50:93:72:f4:e5:fe:92:fd:6f:58:fa:09:
                    fb:b1:d6:7c:a2:c7:98:96:ec:a3:38:47:db:e3:87:
                    c6:13:ad:87:84:0a:fb:02:42:4d:90:93:5b:a8:30:
                    ba:2b:a9:15:fe:41:74:73:08:2c:17:54:61:c6:f6:
                    64:b1:50:43:a9:5c:e2:3a:31:63:2a:6a:d2:42:4c:
                    e3:c9:1a:ce:b9:7a:27:9d:b7:db:04:0c:17:67:b6:
                    a7:3d:03:ef:3f:bd:02:ef:18:b0:a5:33:ec:fe:a8:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F7:4A:1A:4F:07:A8:9C:74:AC:29:1F:F2:1F:F7:F6:AB:09:81:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/164e4b9d-ea60-3a0d-b0eb-48f699fdc8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:dc:f3:41:2a:28:41:f6:3c:3c:07:1a:67:e1:9c:3b:ea:d8:
         89:c1:8d:0b:0d:20:36:ed:53:20:0f:7e:91:2d:e1:be:9e:bc:
         8d:94:57:d8:3c:a8:cf:cd:31:09:50:d0:c3:81:58:e8:28:56:
         17:bd:05:f4:64:29:f3:1b:4c:bb:92:ab:19:13:45:3d:16:00:
         16:11:a3:99:d3:6f:78:29:97:01:12:3d:fb:a2:44:00:28:30:
         27:7b:95:7a:f1:a1:1d:dc:8b:52:72:e2:ee:32:f6:47:86:09:
         f6:bb:aa:a4:e4:fd:a2:0d:43:75:de:3e:a0:f8:6d:ba:ec:e4:
         b2:9b:da:c2:a8:fe:a3:07:40:58:de:50:7d:f5:dc:c9:38:27:
         d9:0d:72:5e:ca:89:4b:5c:5f:da:6b:7f:8f:1d:4f:76:6e:b1:
         cd:ef:a0:81:a1:d2:68:36:f7:44:2b:21:f2:e6:49:3a:2e:7b:
         9d:e6:3e:d2:52:18:e1:17:ad:dd:e2:45:5e:b4:d5:51:09:39:
         fc:49:d1:5b:d4:90:55:77:2d:74:eb:08:8e:a0:68:56:e6:2d:
         49:9a:76:7e:0d:a5:9d:7a:8a:51:dd:f5:07:4d:24:88:aa:35:
         66:1f:5c:40:98:7a:b6:8b:4f:c4:85:8f:b4:74:16:0d:38:0a:
         2a:fc:59:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:12:24 2025 by rpki-client