Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2bed913e-ceaa-33a5-9f1b-8d89f95ea31a.roa
File:                     2bed913e-ceaa-33a5-9f1b-8d89f95ea31a.roa (raw, json)
Hash identifier:          65zf6y4N1gdVfXR8mK/FdfBiU0FYQRtASMHw7qxMzjs=
Subject key identifier:   72:8B:7D:B3:5D:94:E4:8F:50:5E:A8:54:14:88:EE:1C:95:C6:2F:12
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8412492045A788769DA5C720
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2bed913e-ceaa-33a5-9f1b-8d89f95ea31a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.30.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:49:20:45:a7:88:76:9d:a5:c7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4f82721c-cec5-4db1-bf2a-f7ded24695dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:d7:38:29:af:e1:b7:96:c5:dc:16:2d:a7:
                    e9:e6:a9:05:0c:9c:0f:9f:d1:2c:a7:df:0b:7f:41:
                    24:fb:8a:58:cd:4c:7b:c9:2e:a7:6b:2a:2a:76:b8:
                    85:f0:97:18:66:ac:8e:30:25:41:d8:9f:59:00:b9:
                    d9:11:97:d2:00:57:aa:62:97:3d:89:40:33:4c:54:
                    c8:3f:4a:95:31:78:fd:4d:8c:de:f8:26:43:96:f1:
                    1b:19:8b:4f:33:2a:39:1a:28:5e:4c:1e:72:c4:6c:
                    cc:de:7e:16:d0:5c:8d:ee:8f:c3:7b:04:54:d1:10:
                    37:cd:c6:97:c8:c9:10:a5:64:28:9f:2b:71:26:91:
                    51:df:e4:b5:3a:39:01:d4:83:ac:00:9c:50:c3:bb:
                    78:dc:cc:97:a0:86:2d:0d:f2:45:c2:1d:44:34:55:
                    21:87:bc:8e:ae:43:93:84:83:b4:a2:91:5b:9c:28:
                    9c:f6:60:34:cb:a2:95:b2:ea:73:96:12:14:47:7f:
                    32:47:7a:fe:2b:b2:46:31:03:2e:31:0c:58:90:5a:
                    bb:97:4b:3b:df:6c:2d:8d:ef:c3:58:b8:b4:a2:8f:
                    bc:2f:53:ba:88:08:00:e1:d3:4b:aa:b4:cc:32:1b:
                    16:49:e0:fd:a2:1f:82:f8:57:dc:91:00:55:29:17:
                    9d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8B:7D:B3:5D:94:E4:8F:50:5E:A8:54:14:88:EE:1C:95:C6:2F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2bed913e-ceaa-33a5-9f1b-8d89f95ea31a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:61:5c:4f:d1:cc:ab:6f:42:04:20:57:56:f4:89:2b:73:ca:
         36:8d:b6:35:e1:cd:73:66:fd:6e:71:88:ff:ac:b6:9e:c7:d4:
         19:9f:d7:42:3f:9c:52:2c:eb:a0:d3:85:dc:b5:9b:0a:be:be:
         bb:57:6b:1c:0c:44:54:ac:14:8e:28:ff:ec:cf:99:a7:8d:87:
         20:33:4c:04:c3:e3:6c:61:78:30:f6:e8:e8:5d:75:ca:5a:89:
         8e:7d:ba:da:14:76:2d:9f:a7:0b:44:a5:07:41:a2:11:a0:50:
         76:62:33:b3:b9:ae:d4:5c:65:87:d1:0c:50:ac:0b:04:ec:f9:
         a1:70:19:32:76:c2:e3:18:88:71:16:a0:26:09:3a:5b:f3:9e:
         52:e1:2a:27:d3:ae:1c:7a:80:d4:d3:1f:3f:76:6c:b3:15:75:
         fe:33:a7:6f:a8:c7:0d:5e:90:6e:7e:81:47:e4:31:69:cb:a2:
         a1:8a:3f:96:68:83:f7:58:35:ad:7b:43:ee:5a:e8:a2:f4:ec:
         bf:9c:d7:f2:83:b0:4a:fe:99:c8:8f:73:b9:10:41:ae:49:e1:
         a4:e8:2a:b8:88:0b:dc:9f:cc:65:df:e9:26:41:fc:01:ba:67:
         e2:09:74:cf:08:6a:79:f5:57:32:a6:4b:07:0d:ef:31:85:ea:
         ef:ac:ca:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:59:55 2025 by rpki-client