Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c50864b-4423-32ac-ba9f-eb4cfb821f24.roa
File:                     4c50864b-4423-32ac-ba9f-eb4cfb821f24.roa (raw, json)
Hash identifier:          4qT9pvBf4R2c6MrYO9wxvmWh3Ft7U9FqW0J0VxL7m8s=
Subject key identifier:   8D:41:2D:DD:E1:9E:06:E9:F9:DB:9E:02:81:DF:42:17:20:F7:10:E1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DB69D25AD54D13C2C08000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c50864b-4423-32ac-ba9f-eb4cfb821f24.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.16.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:69:d2:5a:d5:4d:13:c2:c0:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=19c64da2-9582-4a4b-925d-1d2ea2d5dc23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:53:3e:05:16:34:b5:6a:8e:d3:15:09:79:
                    fc:17:de:f4:09:93:0f:9a:29:4c:9e:8d:81:48:44:
                    fd:c6:a8:15:ad:63:bb:8e:97:fd:cb:97:f8:73:7c:
                    c4:28:09:60:ff:80:08:c5:b4:a6:39:17:7f:e1:0f:
                    3f:5d:08:14:52:f5:00:e4:0a:3f:24:77:83:f7:ec:
                    af:b8:c1:d2:4a:fa:ce:0a:e6:26:67:20:82:4d:bd:
                    57:f3:d2:f4:8d:11:a9:2f:c5:0e:96:78:cc:8b:19:
                    94:94:18:08:33:2a:e6:bc:33:d6:77:9a:e0:43:96:
                    54:ea:67:c4:32:b1:0d:b7:a6:fb:84:a0:a4:46:97:
                    aa:f9:40:32:61:9a:a4:6a:e4:03:4d:8a:aa:dc:99:
                    4e:30:9e:e6:4d:7f:b1:a7:83:a6:4f:4d:5d:7c:4f:
                    92:a7:7a:36:3b:f6:3b:b9:44:0e:d6:6e:3d:d6:99:
                    95:f9:49:65:16:26:f7:cf:5e:4d:c6:3b:56:64:a8:
                    42:fa:f2:ae:f8:92:ab:d3:ec:61:77:2d:51:24:de:
                    87:27:c0:51:b2:50:f8:42:57:72:37:ed:29:23:e9:
                    96:38:28:14:7a:af:92:0d:4e:e6:d3:e5:fc:fa:bb:
                    9a:27:4a:8f:74:34:e1:19:9b:58:8f:e6:6f:18:98:
                    60:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:41:2D:DD:E1:9E:06:E9:F9:DB:9E:02:81:DF:42:17:20:F7:10:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c50864b-4423-32ac-ba9f-eb4cfb821f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b5:72:48:36:89:96:ef:53:38:cb:5e:a3:3b:89:d0:81:8c:
         c2:46:0e:16:99:b6:e1:f4:08:85:70:31:c0:28:92:6f:6b:3f:
         23:5d:1a:9b:6b:77:db:66:f3:cc:b7:2d:0c:6a:36:f4:be:1f:
         0f:a5:35:6d:f4:3f:9e:b1:87:7a:d7:bb:48:be:08:c2:69:d6:
         4d:e2:74:d6:23:16:80:fe:3d:15:8a:4a:c4:b3:2f:2c:2a:24:
         d5:7a:87:0d:75:9f:70:1c:3a:38:fd:2b:3f:84:81:54:95:60:
         c5:84:4a:c5:15:38:f8:ef:ee:c9:c5:7e:b2:6d:45:7f:eb:e5:
         e2:93:ec:2f:97:bb:5d:74:2f:eb:9f:dc:ac:34:18:4c:69:1d:
         b0:6e:2b:b8:06:b7:c3:a2:94:82:b8:02:e9:c8:2e:c4:0d:7f:
         b6:c9:b1:a3:3b:95:89:5b:67:03:ce:10:68:99:11:d2:26:b7:
         b9:55:2a:2c:fe:5a:9a:3d:88:68:42:62:18:5c:dc:77:76:f7:
         ab:35:df:21:19:50:72:3a:12:89:34:50:4e:7f:c1:4a:7b:e8:
         83:58:a9:4b:f9:ee:93:45:17:8c:17:a0:66:3a:44:09:3d:73:
         1e:71:26:4d:4a:b3:a9:2e:81:27:32:cc:b4:70:53:1a:03:7a:
         9e:1f:76:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:18:58 2025 by rpki-client