Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27524b53-b03b-3759-8c76-8aaeff053815.roa
File:                     27524b53-b03b-3759-8c76-8aaeff053815.roa (raw, json)
Hash identifier:          m3N96K26d+O46wawc/f3ZvhirUXIlus+fGst1oSFziE=
Subject key identifier:   99:A1:E1:DB:85:6D:AB:A7:DD:BE:F7:92:F0:8A:0A:E5:B9:0A:20:5F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84124660A33F03E7BCFF2440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27524b53-b03b-3759-8c76-8aaeff053815.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.31.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:46:60:a3:3f:03:e7:bc:ff:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4a2036c7-b832-4ab8-9523-38ad79a87183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:98:2b:f2:cf:06:2c:51:d3:73:67:7a:cf:
                    4e:03:7b:76:13:da:fd:84:1c:30:7f:99:c4:9c:06:
                    7f:4c:95:3b:1c:ae:12:4f:d1:ae:4f:ed:44:33:a9:
                    ed:56:24:67:cf:81:67:7a:38:64:02:6b:ea:fe:e0:
                    4b:71:b4:1c:e6:cc:f2:89:49:88:0a:76:98:32:a1:
                    4e:9a:2a:35:07:e1:ba:61:58:ad:82:a9:23:09:d6:
                    8b:ac:66:53:d0:4d:c2:ef:6a:67:57:cc:96:7f:f2:
                    65:74:fc:31:b0:33:70:09:e7:f3:a1:34:cf:25:8a:
                    ee:a8:04:82:2e:f9:9a:d6:14:6d:f1:62:9c:13:f3:
                    f3:6a:4a:e1:ce:61:e7:42:a1:0b:e0:86:08:1b:32:
                    1b:77:ae:e9:97:33:7d:8b:25:44:ba:fe:46:9b:94:
                    6c:6f:51:a7:14:f7:0e:db:93:3e:d9:4d:bb:94:be:
                    69:5e:f7:47:e9:89:86:33:00:49:63:93:c6:35:62:
                    df:07:44:ac:d2:40:43:59:c8:0d:0f:8c:e1:2c:73:
                    ca:02:bd:52:d3:77:ed:4c:4e:91:44:e4:12:b3:1f:
                    e1:a1:e3:95:64:b4:6c:6d:5c:6e:06:0b:2e:9e:61:
                    1d:2c:cb:dc:5e:95:b7:d6:6d:59:2d:74:76:e2:ed:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A1:E1:DB:85:6D:AB:A7:DD:BE:F7:92:F0:8A:0A:E5:B9:0A:20:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27524b53-b03b-3759-8c76-8aaeff053815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:08:40:55:cf:2f:94:a7:ac:1f:ce:50:98:c2:f9:c1:2a:84:
         02:af:c2:9c:38:95:ff:ef:9a:a3:86:66:07:97:09:1c:8c:f7:
         43:31:d5:55:e1:17:9e:e8:1b:8c:69:d3:5b:5c:6e:3a:ec:21:
         19:ea:51:c1:67:e6:39:88:c6:89:6e:b3:4f:b3:9b:1e:1d:09:
         8e:53:b2:1b:33:2b:8b:79:01:e7:bf:bc:03:9d:c2:c4:6b:85:
         b1:ea:88:96:b5:c8:f7:14:c8:57:09:84:c3:e5:49:3f:35:43:
         77:0f:e9:92:88:7d:a1:4e:f2:87:b5:c9:d0:7c:49:e0:88:3e:
         66:e3:96:c7:f8:82:7c:a1:50:ee:3c:15:2a:d7:5e:6a:d9:5b:
         ad:54:36:7b:56:43:09:c2:4e:ff:5c:a1:62:ce:33:fe:48:e0:
         dd:e2:fc:e4:57:c8:3e:27:a6:4f:5f:88:59:27:35:f3:2d:23:
         83:19:22:78:1b:2f:8d:92:f7:7e:2a:61:8e:20:30:be:03:11:
         40:ca:8b:be:71:7f:92:07:8f:11:a5:1f:c5:d8:f0:0c:ce:dc:
         0d:53:93:2d:94:52:a8:f3:0d:3a:40:ff:6e:d3:54:ff:1a:12:
         91:6f:5b:c1:de:de:6d:ce:01:3f:f2:e9:9e:89:ae:b3:6d:91:
         dc:19:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:07 2025 by rpki-client