Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3de5534a-75b8-33c8-b248-1f421d36a669.roa
File:                     3de5534a-75b8-33c8-b248-1f421d36a669.roa (raw, json)
Hash identifier:          nTKvko59KCy1Mn2lwyq/xvhCGV2wcTnR3xOcZ8UJVfQ=
Subject key identifier:   A3:46:7E:AD:A0:20:A5:46:C8:B8:57:1B:61:99:6C:2F:E9:2C:AA:66
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DC041C5FCF4BC9BCE29A60
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3de5534a-75b8-33c8-b248-1f421d36a669.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.16.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:dc:04:1c:5f:cf:4b:c9:bc:e2:9a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=34fb677d-a7fd-4bf9-bb1c-391c9d57cb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:d5:18:2c:5e:f9:0f:38:0d:5c:50:19:b7:
                    f7:78:27:08:13:74:e9:87:38:67:25:ca:d6:a5:62:
                    04:d0:d6:83:52:da:76:e9:18:14:b8:37:16:c7:ee:
                    10:90:4f:73:e2:b3:5e:60:8d:e6:c3:fd:72:dc:19:
                    4e:cd:48:93:02:3c:df:0f:b1:6c:bd:34:d3:83:cc:
                    2e:e0:bd:6b:7c:a6:2f:bf:ae:1f:32:2b:66:0b:da:
                    1a:12:0e:fa:40:61:21:52:ea:b4:1b:49:3d:25:f0:
                    ad:ae:89:4c:6b:f7:54:3d:ec:91:51:39:ba:07:2c:
                    8c:f9:a4:2c:f6:2a:3c:c6:4f:40:17:fa:42:f9:6f:
                    0a:30:ac:b8:76:46:dc:2a:65:cf:5c:e3:04:ed:56:
                    93:aa:c0:25:58:09:21:43:4a:e8:f5:15:61:83:c7:
                    25:1a:e7:86:8f:ed:fa:0c:d1:c0:1d:06:b1:5a:a4:
                    ba:55:72:13:92:09:81:04:96:9c:6b:c8:4c:a9:45:
                    ed:f8:a6:c4:f5:3d:23:9d:db:77:84:23:36:c4:88:
                    86:36:6f:b2:49:67:fa:f6:9b:98:d8:1d:50:47:d2:
                    79:c1:90:c8:4b:60:a6:ae:7c:8e:3c:b9:0c:97:c8:
                    36:a5:61:db:26:26:53:2d:3d:08:b6:f8:2b:41:dd:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:46:7E:AD:A0:20:A5:46:C8:B8:57:1B:61:99:6C:2F:E9:2C:AA:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3de5534a-75b8-33c8-b248-1f421d36a669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:9d:22:63:4a:d1:71:38:58:57:a1:af:a7:bd:94:49:39:5c:
         35:22:08:cd:90:e1:74:cb:87:b2:c3:d9:96:2c:df:80:9a:a3:
         76:64:5e:94:a0:89:cb:c1:43:38:6b:db:9d:c2:6b:58:34:b8:
         fe:a8:54:28:d5:67:fd:f7:6c:2e:60:ac:11:34:54:ef:9a:de:
         39:cc:d4:21:fa:fa:29:6e:ad:60:87:a9:2e:90:58:73:35:99:
         33:11:9b:10:3b:1b:d9:98:5d:44:ab:81:e1:09:43:aa:01:7b:
         5a:fc:d8:33:5d:be:e0:78:7e:10:46:74:64:49:1c:e4:06:32:
         4d:27:66:5f:05:65:a4:da:03:a2:83:fd:64:f1:e1:87:04:e4:
         1b:0a:45:0a:02:45:ac:b0:46:05:35:0a:82:df:ca:fb:4c:a5:
         b6:89:fb:ef:64:2c:fc:46:eb:a2:7c:73:93:fb:25:05:53:70:
         39:f0:ed:1e:33:cc:12:2a:79:76:70:63:33:86:0c:f2:44:a6:
         4d:8b:37:ad:8e:a3:84:b9:6b:bc:b0:e3:fe:ae:03:37:78:7d:
         a7:a6:2c:df:8f:ca:01:51:9a:4e:e9:5b:3d:12:20:8b:99:20:
         14:e6:d8:30:d9:8c:40:e6:a3:ea:cd:c7:82:6f:3d:ce:b3:c5:
         d2:7e:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:15 2025 by rpki-client