Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d7ebec5-b742-3eae-ab47-4019418d6098.roa
File:                     2d7ebec5-b742-3eae-ab47-4019418d6098.roa (raw, json)
Hash identifier:          N8Nqfx0m4M7YO2n1jiTjHar3SzfU6S/b/LVbrs7UlYA=
Subject key identifier:   83:BC:8A:C2:CF:BD:CD:9F:C1:DA:E2:8B:03:F3:10:05:3F:1F:27:29
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A7BB0AE62F5B773D1696B10C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d7ebec5-b742-3eae-ab47-4019418d6098.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     19905
IP address blocks:        173.19.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:ae:62:f5:b7:73:d1:69:6b:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=c6e2fb18-d64b-4052-85ba-ad07401bad4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:8c:ab:de:44:c9:00:2d:f6:2e:01:c9:f5:
                    28:f1:e5:f2:40:57:1c:bb:a2:9e:ee:9b:40:d6:7f:
                    f4:ce:8c:38:6d:9c:32:89:c9:d5:96:2c:20:1f:c4:
                    35:7d:c0:dd:f6:b8:a8:76:37:85:dc:87:f7:6b:f4:
                    c4:b0:d7:5c:4a:59:21:a7:95:3b:df:39:b2:64:ce:
                    df:99:50:89:1e:c7:5e:a4:25:4c:54:2f:85:7b:3c:
                    f5:3b:6c:96:0e:ec:2c:ba:4d:96:78:b6:f0:ed:12:
                    57:bb:34:bd:02:40:73:95:e0:93:96:73:a1:b7:70:
                    e7:d6:0a:ef:8e:c4:6c:63:a5:80:51:fb:27:c0:4e:
                    a8:52:16:9b:1d:51:92:a4:4c:17:41:25:57:b7:8e:
                    53:b8:49:d1:3d:e5:6f:1c:90:8c:a6:2d:a5:c3:c3:
                    66:14:f5:61:0a:0e:a3:da:d5:c4:91:0a:3e:26:5a:
                    5d:8d:ac:89:44:8a:61:64:82:3d:3b:9b:1b:65:6c:
                    77:03:63:69:49:cb:a4:cb:46:f0:fb:f6:ef:da:05:
                    6a:f3:0a:99:3b:b2:8b:d4:14:e1:f6:9d:cc:74:e1:
                    7a:8e:28:be:e5:0a:3d:6a:0e:c8:48:4d:65:e8:37:
                    ed:9c:ee:06:46:94:02:78:dd:e7:b0:c1:42:78:cb:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BC:8A:C2:CF:BD:CD:9F:C1:DA:E2:8B:03:F3:10:05:3F:1F:27:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d7ebec5-b742-3eae-ab47-4019418d6098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4e:3f:70:8e:ff:db:73:00:5c:59:16:11:93:ff:c3:db:80:
         62:78:fd:a9:96:58:fd:5d:d8:80:2c:45:57:1d:c6:08:f0:a6:
         66:55:12:95:72:6b:66:11:96:bf:c1:1c:d6:02:c1:0c:95:ff:
         b8:de:31:18:b3:9c:f5:8a:eb:ef:4d:5a:76:22:6a:e1:9b:a2:
         e0:c6:5f:27:09:f3:f6:fc:3b:69:da:29:07:3d:6a:b8:29:17:
         c9:9c:42:5c:a1:c9:6a:90:56:d6:ba:26:14:c2:d8:27:97:3a:
         07:05:3f:51:0e:bc:83:07:6e:b9:09:f0:0d:94:f6:a2:51:0f:
         7c:66:75:fa:61:c4:f0:c1:c5:b1:01:ca:17:47:81:e5:8a:c6:
         6e:1b:13:66:d6:16:39:4b:ba:1e:88:93:5e:9e:c3:c5:74:8b:
         f3:57:b6:d1:ed:ce:d6:1d:eb:09:fb:cb:dd:a6:a1:87:0c:6d:
         67:df:26:39:92:d8:d5:83:23:ae:59:db:88:66:27:c4:26:c7:
         61:97:cc:2f:5b:bc:01:aa:bb:e9:e5:63:29:bf:96:0c:99:aa:
         f9:d2:05:d0:e6:24:82:c7:b9:b5:70:f1:36:7a:dc:61:76:f8:
         a2:32:b8:46:53:f6:96:70:7b:ae:ff:59:82:0c:83:77:81:39:
         ec:3b:95:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:49 2025 by rpki-client