Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7d95cb0b-32b7-32fe-87b4-680c9535610a.roa
File:                     7d95cb0b-32b7-32fe-87b4-680c9535610a.roa (raw, json)
Hash identifier:          G7GVIAvCAmqa3TFJjmiT8k7fkG9bpnaVJrpfrHF9tBI=
Subject key identifier:   1F:D6:56:63:D7:62:02:0F:3C:E7:F9:7C:58:99:B9:E5:69:02:F7:50
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A7BB0AE2754916FC970220700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7d95cb0b-32b7-32fe-87b4-680c9535610a.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     19905
IP address blocks:        173.19.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:ae:27:54:91:6f:c9:70:22:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=b700002b-842d-48ae-a047-fb7dcd789cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e0:79:93:b7:f0:b4:4f:d2:d2:27:1b:a6:ca:
                    49:0c:88:e4:f7:33:12:57:4d:1a:3b:16:43:a9:55:
                    b9:73:04:f0:ec:39:b2:f3:ac:62:78:78:cc:12:95:
                    6e:92:70:f8:2e:ff:b9:64:01:e5:69:32:17:a0:d5:
                    63:cf:8a:25:df:98:e4:a5:97:b3:a7:22:f8:04:37:
                    c5:db:e2:ae:c9:66:21:98:81:8c:ed:c9:7f:49:bb:
                    64:de:e1:11:fb:0c:3f:8f:8c:fc:a5:39:79:90:db:
                    d4:ed:0e:6d:ab:b4:7c:a4:72:a2:ef:5f:e0:96:8f:
                    0a:97:fb:c2:56:c6:d0:8c:6a:f2:99:aa:a8:33:02:
                    91:84:6a:fd:b6:71:09:fd:ff:2f:8c:23:7c:b9:69:
                    6a:cf:0e:72:54:e4:8b:d1:d7:bc:14:94:3b:6b:96:
                    56:34:ab:07:27:7f:56:b4:54:ee:44:bd:f3:04:2c:
                    94:8e:b0:fe:96:cd:bd:72:b9:a3:8d:94:95:e1:a9:
                    2a:d2:30:1a:1b:03:62:37:ff:30:fe:63:b8:fd:0e:
                    7f:e7:1d:d9:aa:51:ea:03:af:af:e7:6d:7a:7f:d7:
                    76:ec:ff:62:4c:19:8b:96:b2:5c:69:89:56:58:b9:
                    f1:b6:1f:ad:c0:33:fc:9c:f1:51:2c:bf:34:d6:49:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D6:56:63:D7:62:02:0F:3C:E7:F9:7C:58:99:B9:E5:69:02:F7:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7d95cb0b-32b7-32fe-87b4-680c9535610a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8e:af:9d:00:c2:11:64:ab:c7:a9:8f:53:be:1a:fb:23:17:
         ba:3a:2a:92:99:b3:f2:d0:e6:5c:5a:00:1b:22:66:50:50:86:
         a6:47:ff:e7:5e:6c:99:9a:82:44:6a:74:2d:a5:88:b5:8f:60:
         a8:4f:6f:f7:17:3c:ec:ee:b9:13:96:65:d1:6d:2d:45:3b:dd:
         77:ec:e3:3b:71:5b:0b:d2:d3:bd:28:d3:2d:4c:b7:65:fc:30:
         46:0e:75:71:eb:1f:51:70:38:c2:5d:3b:c0:fc:c5:ee:c8:f6:
         86:70:87:b5:d9:55:d4:a0:cb:61:39:07:fd:64:d2:b9:0e:a6:
         13:78:05:de:d9:68:f6:46:2f:25:d5:ad:93:43:28:e8:17:30:
         ea:0e:8a:4a:b2:f4:31:c3:43:14:02:d8:a4:66:13:74:24:c5:
         96:fe:71:90:0c:fc:c1:6b:8f:f3:39:3a:7e:3b:af:2a:53:0e:
         7b:b6:55:0e:98:c3:38:ec:54:96:98:73:5c:3f:08:f5:ae:82:
         56:99:3f:3f:e4:55:4e:82:cd:1e:24:3b:c7:4a:f7:dd:e6:c6:
         74:1a:19:d1:d9:8f:4e:6e:d2:75:25:32:19:27:a1:12:61:07:
         72:64:ae:ed:af:24:90:3d:78:3f:09:ee:45:23:f6:23:e6:4a:
         b4:08:0d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:24:00 2025 by rpki-client