Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6523fb04-ac58-3fa6-b250-c98c63006ec1.roa
File:                     6523fb04-ac58-3fa6-b250-c98c63006ec1.roa (raw, json)
Hash identifier:          o0hwrwA64OPcP+Mk4mnZeXOOydMcCBzWdpziQv8CZJ0=
Subject key identifier:   65:74:87:39:50:F3:6C:F4:F0:B4:91:80:F8:CC:BA:06:AD:BE:E5:8B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584BA7CD1CD6F9A3B2D41AB0D960
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6523fb04-ac58-3fa6-b250-c98c63006ec1.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     30036
IP address blocks:        173.27.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:1c:d6:f9:a3:b2:d4:1a:b0:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=c4253af1-5c2d-4378-a32a-e410dd626797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:78:0b:0d:a4:55:5b:93:17:0b:f4:fe:83:23:
                    56:ef:c5:94:d7:57:20:45:3a:60:a2:34:31:3f:f7:
                    8c:ae:bf:84:4d:19:6b:1e:3f:60:6e:ca:f1:af:88:
                    1e:61:6f:6f:a9:f2:d9:e6:85:58:84:19:db:82:de:
                    31:be:9f:54:79:8c:89:58:dc:8e:65:5b:7b:5f:18:
                    f0:a4:1d:cb:27:2d:a3:1c:89:19:bf:83:07:bf:e1:
                    01:45:d6:b7:0a:88:5b:8f:d8:37:9f:34:89:01:45:
                    c3:b5:48:ca:cd:3b:fb:9c:e7:a7:a0:f1:c1:95:2c:
                    50:7b:b9:85:56:26:3d:92:4a:46:4e:af:97:ba:09:
                    f6:5f:7f:28:03:47:ac:70:aa:8e:33:be:d6:45:7f:
                    2f:9d:a6:d3:ce:a1:4a:3d:8c:bd:cf:7b:25:b5:94:
                    52:19:7f:2b:90:25:40:12:af:ac:9a:4a:f4:18:e1:
                    64:66:23:77:41:dc:5d:e7:7a:66:70:3e:20:ac:95:
                    e0:27:cd:06:1b:b6:03:b6:6c:b4:f7:d2:f9:80:91:
                    0b:53:68:b9:f4:be:bc:57:ef:a8:06:a8:46:33:d1:
                    22:cd:75:ac:85:9c:e5:6e:20:da:8f:6e:b9:e6:a0:
                    15:fe:4a:a1:01:9e:dc:46:0b:8a:a3:b0:58:15:28:
                    32:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:74:87:39:50:F3:6C:F4:F0:B4:91:80:F8:CC:BA:06:AD:BE:E5:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6523fb04-ac58-3fa6-b250-c98c63006ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6d:8c:ed:5c:2c:25:62:56:24:33:93:f6:d4:ce:7c:f3:40:
         8b:a8:2a:d1:bc:57:c8:f1:e5:c5:ec:73:44:5a:cd:63:7b:43:
         fd:37:13:93:80:3b:42:1b:ab:72:d0:a6:76:10:64:67:7f:75:
         55:78:f7:20:ab:87:51:39:12:eb:f5:8e:71:c4:06:b7:b7:18:
         07:a3:11:42:0f:41:39:23:ab:50:64:20:e3:0b:6a:4a:13:88:
         56:1a:34:58:17:a1:20:82:06:98:d4:ca:a1:12:37:bc:cd:e9:
         31:dd:e7:f5:a3:2a:04:15:1d:3e:d4:7a:e7:0a:dc:58:a0:53:
         c0:28:a2:cd:49:a0:00:1e:fe:3c:c5:b8:1e:71:ee:18:f1:a7:
         d5:48:35:7b:93:e8:1d:27:fd:28:25:58:cb:94:5d:5a:82:19:
         11:9e:3c:f2:70:8c:1c:1b:cc:3f:fb:2a:d5:88:67:09:ae:dd:
         a4:a7:00:a9:e2:c3:4e:56:86:8a:d6:67:b0:a6:60:c4:eb:2b:
         45:9d:e8:d7:e4:97:08:17:64:a6:1e:8a:a7:d8:cc:31:98:f5:
         4f:ee:48:2e:7b:9c:d9:ee:04:cf:d0:4a:20:20:58:3a:c1:cc:
         a4:60:f7:08:61:14:ea:7d:e6:fc:58:86:84:65:42:d2:9b:8a:
         05:f3:91:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:19:38 2025 by rpki-client