Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7041b7a4-0cca-3d1a-b060-7a4e0b3f04ad.roa
File:                     7041b7a4-0cca-3d1a-b060-7a4e0b3f04ad.roa (raw, json)
Hash identifier:          6cemmqf0NTEHhHa3ZqnMs+BE7Nfvg2fNMw3dOUphigo=
Subject key identifier:   0C:77:18:C4:E1:41:66:49:67:46:8C:CB:0D:23:C7:DF:F0:98:FC:89
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81464A5E505CA907DB26DD40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7041b7a4-0cca-3d1a-b060-7a4e0b3f04ad.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.19.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:4a:5e:50:5c:a9:07:db:26:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=876322f9-bcdb-4bbd-955b-d99759a45b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bf:97:db:7c:6f:79:24:2e:5c:22:06:e2:c2:
                    ca:1f:30:88:aa:54:08:d5:da:84:48:10:c0:3a:28:
                    ae:9e:ac:55:53:aa:93:4b:4a:14:dd:65:c5:52:c2:
                    43:0e:c0:10:89:32:f0:c6:13:f1:b8:5f:bc:7a:78:
                    1a:0e:fa:ac:3b:7a:48:56:ac:4d:82:a9:33:ab:71:
                    f2:a1:b3:ae:49:3b:e4:94:6a:4d:d4:d6:a8:0d:59:
                    2a:dd:ae:34:64:db:48:4d:f3:e6:a8:9e:61:c4:7a:
                    2d:15:a2:cc:8b:a2:77:d2:a4:a9:7f:a0:2b:3b:e9:
                    ee:c2:13:22:1f:84:9d:bc:bb:d1:f6:67:6a:db:e1:
                    c4:15:ef:f7:f0:49:2f:a8:a2:14:4b:89:da:37:f4:
                    96:45:8c:da:51:60:ed:b3:72:8f:b4:ca:3d:1c:37:
                    b0:95:7e:4d:65:32:48:e3:2c:f4:29:cc:ae:fd:83:
                    7f:8e:a2:31:41:e6:a0:4d:c9:7a:34:a1:6f:46:4e:
                    1d:b5:ff:eb:c5:e1:87:0a:8a:64:71:60:3b:18:ca:
                    52:fd:50:6a:b2:c9:bc:c1:00:df:f9:79:e1:5a:28:
                    18:14:43:03:64:a2:b3:c5:70:c3:71:95:d9:e6:84:
                    c5:1b:2a:63:27:27:57:0a:87:54:49:c0:41:7c:61:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:77:18:C4:E1:41:66:49:67:46:8C:CB:0D:23:C7:DF:F0:98:FC:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7041b7a4-0cca-3d1a-b060-7a4e0b3f04ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:12:80:ff:81:7f:96:40:1a:b9:d9:e2:da:22:db:70:4b:58:
         f7:54:45:a4:ff:e8:f4:ac:20:95:6d:8f:f7:76:f8:63:90:df:
         bc:a1:ed:f2:85:c8:65:82:11:30:83:2a:28:b1:05:87:35:80:
         35:f6:46:88:73:3c:63:eb:cb:ed:13:0a:5d:ef:32:64:34:2c:
         9f:17:6c:25:98:b2:e7:08:60:0c:b5:0f:68:24:fb:b7:b7:f0:
         25:47:35:d7:b6:8c:90:36:32:6b:4d:ad:be:c4:c7:c9:fc:1a:
         3e:5b:dc:66:dc:10:eb:ed:6d:fb:52:58:2f:16:63:b9:2b:91:
         e4:74:f3:ff:f8:04:8d:c4:c8:a0:7c:3d:02:a9:9d:cc:cc:9a:
         c7:9c:77:a7:05:d8:5c:b0:f7:fd:6b:ab:c1:33:6b:29:12:2e:
         a9:61:04:ee:ae:c2:0d:c6:0e:a8:a4:cd:b6:d8:ec:43:90:a5:
         6b:0e:80:79:85:ab:0a:ad:3a:52:e0:e4:81:74:52:dd:29:f0:
         3c:17:0a:02:76:76:10:38:51:de:f5:6a:9e:ad:e4:69:7f:37:
         3e:ab:67:d3:14:ac:16:51:91:bc:0a:4a:4f:4a:e7:f8:58:de:
         cd:af:ce:17:df:42:b8:8a:3d:42:f1:29:13:62:da:b6:40:c0:
         5a:48:e6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:10:56 2025 by rpki-client