Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57f2e4cf-86e8-3755-9979-2fa5dbfc901d.roa
File:                     57f2e4cf-86e8-3755-9979-2fa5dbfc901d.roa (raw, json)
Hash identifier:          8DTKmXn8YMCM6Th18sZdX5faLJvC+jp91lBsqXdRfvA=
Subject key identifier:   3B:82:82:65:73:4E:FA:2F:30:A6:20:21:07:F5:46:A7:8E:E7:D2:30
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81462D3ECD72E41BA48A8360
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57f2e4cf-86e8-3755-9979-2fa5dbfc901d.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        173.24.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:2d:3e:cd:72:e4:1b:a4:8a:83:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=20420f95-841b-4c5c-b2ed-c5324f21f77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:cd:15:dd:f4:56:b9:c1:aa:23:9f:dd:77:
                    ce:c5:9d:20:ff:9c:fc:f3:47:a5:e0:72:7a:33:8d:
                    04:7d:2e:1b:81:7a:94:ad:04:fb:1c:62:9a:ff:4e:
                    58:51:64:f3:7c:e8:89:1b:75:c4:25:13:fe:ce:ce:
                    b7:27:69:e4:59:ca:bc:96:ca:6f:8d:99:39:6c:2e:
                    30:94:3a:57:ae:08:6e:b2:7a:52:3a:ff:83:f7:5d:
                    6b:82:18:3a:99:59:e5:ea:62:df:af:99:db:69:b1:
                    a2:87:54:d2:93:1d:15:21:21:5b:05:56:31:b9:98:
                    dd:3b:c8:8a:3c:b0:1c:be:ab:a9:a7:90:34:ff:1c:
                    e3:a0:e3:7a:22:1d:81:ef:ae:2b:b9:9d:ac:af:d5:
                    bd:b9:ad:2b:a4:ac:61:df:e7:d4:13:9a:b3:e3:77:
                    28:4f:a3:d8:71:ba:94:c7:87:43:d1:59:6e:e8:22:
                    dd:6e:23:9d:bf:19:77:5c:b1:92:f8:7b:58:fc:ba:
                    6d:25:2c:39:a3:30:9b:36:94:c8:ee:5d:0d:e5:01:
                    ba:c3:b4:cd:69:23:0f:78:a3:59:2a:10:f0:d7:1d:
                    da:c6:09:2c:f3:66:77:2a:2d:38:b1:d7:d4:a1:69:
                    aa:e6:3d:3d:60:52:25:96:14:79:bc:6a:51:da:35:
                    65:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:82:82:65:73:4E:FA:2F:30:A6:20:21:07:F5:46:A7:8E:E7:D2:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57f2e4cf-86e8-3755-9979-2fa5dbfc901d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:05:cc:fc:3b:3c:14:f0:a2:54:bc:18:2b:76:14:00:ac:2b:
         7a:20:fc:b5:a9:34:83:af:c5:45:c1:64:e8:8f:0e:66:5b:73:
         52:6a:2c:8c:fd:bb:91:f8:f5:7a:0d:ce:40:d6:b5:1d:9e:1e:
         bd:31:25:0a:0a:bb:9d:93:e3:a2:77:32:93:90:b8:81:2c:3b:
         01:b0:c4:a8:14:bf:40:e7:d5:a0:a2:98:29:8a:43:98:7e:f5:
         d1:75:64:83:ab:1d:63:d7:07:ef:1e:62:a3:92:3c:6c:d1:3c:
         10:08:b4:a7:65:61:70:37:c9:3c:7b:38:b2:08:41:1a:89:79:
         37:b7:f6:35:22:dd:db:fc:9b:04:53:15:39:69:bb:78:d7:b1:
         72:e0:ff:a4:81:b9:35:9f:71:20:d3:64:03:a5:8c:d2:e8:67:
         14:ab:9c:57:f4:1d:e8:b0:d4:1e:ac:96:7f:aa:79:f9:59:0e:
         45:f1:7e:82:eb:f5:63:bf:7d:41:b7:be:89:21:1c:26:2e:1d:
         63:30:65:3c:f0:a4:24:d3:b4:72:c7:3f:26:33:48:1a:c7:2a:
         0a:f1:42:d7:b5:9d:48:60:e6:61:b2:08:b4:e1:73:3f:69:b6:
         84:f8:10:d8:ac:d9:bf:e7:f2:c4:b0:5f:47:1a:16:e4:c5:95:
         b9:05:95:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:35 2025 by rpki-client