Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8bb6ca64-8c52-3c3c-a32f-410b8357653a.roa
File:                     8bb6ca64-8c52-3c3c-a32f-410b8357653a.roa (raw, json)
Hash identifier:          IiyuZ+8y2clbHhSx3+/WSurnRma567RPY5/aF7AIVzk=
Subject key identifier:   63:40:DB:01:84:F1:5C:9B:54:D6:CF:5D:20:4C:F2:A6:3A:06:74:46
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A814664617AF0336893C5ACE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8bb6ca64-8c52-3c3c-a32f-410b8357653a.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.25.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:64:61:7a:f0:33:68:93:c5:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=c3ebbff8-2015-4b5b-b96f-d9bb68c5d27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:79:7d:2b:b8:fd:21:16:48:81:52:ff:cb:
                    ca:96:2a:c1:7b:7b:a1:b1:44:0c:be:df:1b:f2:72:
                    9b:46:4b:62:14:df:be:49:e2:a0:f0:c5:27:0a:84:
                    26:df:8e:8d:79:3d:ec:49:f9:55:10:ed:c6:02:05:
                    00:c8:65:fe:5f:45:4b:b5:19:1e:85:dd:f6:30:d5:
                    3f:5c:04:8c:c2:5f:53:35:be:1d:05:d3:d7:b6:b4:
                    51:30:5e:f8:bf:73:83:83:eb:08:c8:15:1b:3c:4e:
                    51:f5:a9:93:d8:bd:3f:85:a6:ce:ee:8d:98:45:35:
                    21:69:90:83:54:40:9b:39:42:4f:ed:f2:fd:be:dc:
                    63:10:13:a7:86:92:f2:f6:40:68:e4:fd:0d:16:1a:
                    cb:fb:b3:fa:05:34:aa:2c:bc:fb:39:96:f8:42:96:
                    b0:27:b6:52:e1:30:1d:a0:da:0e:bb:ed:5f:dd:22:
                    90:ec:d3:2f:e7:fe:b6:76:eb:38:08:23:78:f2:ee:
                    f0:20:bc:3a:d7:d6:7f:ef:6b:52:1f:3b:3a:f8:85:
                    9b:ad:5d:a5:a0:23:2f:3c:d7:cb:82:9e:9d:98:e2:
                    b2:c5:1a:7c:0a:90:2b:f2:a6:78:fd:6c:ed:d3:64:
                    57:93:1b:e9:a3:4e:bf:79:30:a8:34:b7:5d:2d:be:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:40:DB:01:84:F1:5C:9B:54:D6:CF:5D:20:4C:F2:A6:3A:06:74:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8bb6ca64-8c52-3c3c-a32f-410b8357653a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:17:06:43:43:33:a7:86:c6:3f:c7:09:bb:9d:02:27:37:0c:
         3a:5d:4f:76:f3:39:bb:e2:0a:34:b1:9f:b6:df:07:48:ce:44:
         08:bf:1d:7f:1a:ae:07:bc:31:67:06:32:e9:3e:a2:76:6c:b0:
         04:d3:e5:fb:30:e7:cb:c4:78:84:ca:64:59:fe:83:a7:86:08:
         93:3e:7b:b1:7a:e9:5d:3a:37:a4:d2:e3:43:c4:dd:70:a7:d5:
         ef:21:0d:3e:6c:30:02:8f:c9:7f:50:c9:27:5b:98:19:2a:eb:
         6e:74:fd:8a:2f:0e:d5:12:b1:8d:52:bd:5d:fc:02:38:9c:1d:
         67:56:ec:0f:3e:25:b3:2e:1a:23:12:c3:e0:73:b5:54:08:70:
         47:6a:d6:f6:7e:54:c0:a8:d5:9a:f9:d7:d6:5b:78:35:10:49:
         d6:8f:2c:3e:db:a4:c0:eb:76:25:31:fa:02:4d:0c:6a:45:3e:
         bc:57:06:a7:67:3d:7e:fe:cd:38:57:0f:74:83:32:9c:e2:39:
         85:16:32:a2:97:34:0e:1f:37:50:a1:58:08:e3:90:3d:b0:d8:
         ba:12:e8:ed:82:c8:20:b7:be:ea:9c:74:3b:19:f8:91:26:52:
         6e:1d:05:08:fa:5b:6f:2b:36:ce:35:94:7a:32:a0:6f:b4:be:
         d5:a7:10:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:12:33 2025 by rpki-client