Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bb006df-a700-36ad-a9ca-fcb4257aecb4.roa
File:                     4bb006df-a700-36ad-a9ca-fcb4257aecb4.roa (raw, json)
Hash identifier:          2u2amKmV5v/5+OIvKFVF2bWB9yUVMmyAEaAZn8fEo/A=
Subject key identifier:   17:4C:10:09:C7:69:77:91:60:56:98:3B:E7:10:DA:33:0D:FA:79:F9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DB67EE3F47C88EAE35F060
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bb006df-a700-36ad-a9ca-fcb4257aecb4.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.20.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:67:ee:3f:47:c8:8e:ae:35:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=b7e9a1f7-c775-4999-bc2a-0694318b98f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:96:50:5e:5e:96:bc:d7:13:3a:54:50:79:f4:
                    36:8b:85:96:fe:5a:df:31:d3:5b:83:d6:06:31:4d:
                    c7:88:fa:17:4b:7c:b7:18:02:3e:56:f2:54:3d:9d:
                    67:f4:ea:4f:db:8c:e1:69:a1:02:8e:9a:20:66:ee:
                    bb:53:34:5d:fa:76:18:fa:7e:51:6e:e4:87:35:67:
                    37:53:09:4d:19:f1:c4:8f:98:79:ec:1e:48:21:79:
                    f8:3c:8e:fe:9d:8d:dc:b4:69:4c:6a:b6:e3:6d:9a:
                    32:44:a4:a7:fd:8c:19:e4:73:d1:9e:fb:25:f3:69:
                    1c:7f:5e:a8:d4:f4:b7:ca:12:d1:18:cb:56:13:93:
                    22:33:eb:49:90:07:d0:f2:af:45:30:45:16:9a:52:
                    10:30:b5:07:89:43:dd:6d:51:fa:f2:0a:c0:e3:d9:
                    67:53:aa:e0:51:75:dc:91:1d:13:b4:c5:d2:c9:ab:
                    1a:4d:8e:6b:60:e3:dd:8a:ab:c6:a9:2d:ad:f5:26:
                    e6:42:2e:21:cd:f2:2b:7e:21:a0:c1:32:11:a2:7a:
                    10:a4:8d:36:18:45:b1:c1:d2:49:83:62:24:ac:ba:
                    10:8d:57:87:e4:63:58:41:bd:b6:c0:30:0c:fe:c7:
                    c0:0b:57:78:c7:fb:43:a8:cd:a7:7d:1a:76:72:eb:
                    d8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4C:10:09:C7:69:77:91:60:56:98:3B:E7:10:DA:33:0D:FA:79:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4bb006df-a700-36ad-a9ca-fcb4257aecb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ee:2c:9c:fa:58:06:d0:a0:e0:bf:6e:fa:14:8b:7b:a6:60:
         d8:e3:84:9a:db:33:e5:69:18:e3:26:78:89:3b:3a:01:d0:0a:
         43:d6:bb:a6:6f:d0:f7:94:17:e0:25:31:d1:e3:23:1e:00:41:
         03:24:eb:ee:5c:0b:04:ba:f7:c3:96:ca:af:13:07:df:60:a8:
         f3:b8:e7:06:55:e7:26:39:f8:09:ce:5a:e0:51:7b:b7:20:24:
         97:d3:c7:42:80:3d:33:69:af:c2:09:a6:f8:a5:80:4e:67:73:
         25:3b:46:6e:15:f6:87:ba:68:0f:da:16:45:97:61:18:a9:c5:
         ad:2b:bd:91:2c:92:ad:00:5e:69:10:ab:65:f2:5e:23:2b:af:
         70:f6:7c:f4:d3:bf:06:91:d6:13:bd:5e:4e:36:7d:67:ce:ca:
         65:fd:b9:5a:50:8a:fc:a1:c4:ee:86:15:3b:72:e6:dd:db:fe:
         19:4f:d9:c9:bb:3d:3a:b7:96:70:1c:89:e6:d4:48:b5:e1:5d:
         b0:22:78:fc:ce:05:fd:27:db:b3:84:cf:9b:72:7e:91:2a:5d:
         91:cc:80:c0:17:df:af:20:40:08:e5:ca:99:e0:bc:4a:18:bc:
         e5:96:90:c2:79:53:af:09:ce:cc:0e:9f:c8:ab:99:64:05:1b:
         e5:ca:d6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:39 2025 by rpki-client