Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d44f2ce-1866-3716-8267-16aa02f5a02c.roa
File:                     8d44f2ce-1866-3716-8267-16aa02f5a02c.roa (raw, json)
Hash identifier:          wj3JAvt8Y2QmycbLBVEOx9qa5okRoTWBZiANPkXmObo=
Subject key identifier:   A6:BF:58:91:5F:90:8E:53:57:D6:56:22:75:4F:C2:28:D9:A0:1B:7B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84124283D8772D022A3F2140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d44f2ce-1866-3716-8267-16aa02f5a02c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.24.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:42:83:d8:77:2d:02:2a:3f:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c712f206-bb97-4a29-abd1-cad086166ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:41:02:ff:de:ac:a9:0e:9c:ed:44:eb:5c:
                    c4:dd:14:f6:ca:ef:18:4e:6b:9e:aa:ad:bf:44:41:
                    b1:62:3e:4b:63:95:a2:00:15:81:9f:9d:82:b1:83:
                    94:37:13:f3:12:f7:06:94:0c:40:47:b6:7f:b1:cc:
                    db:11:fe:5f:f7:0b:78:67:95:5e:65:b1:36:73:c2:
                    f8:2e:eb:eb:c8:e0:40:a7:b8:54:ba:91:a5:20:0b:
                    b4:64:b7:95:23:81:c6:ec:c0:1b:fd:f5:8a:9a:0b:
                    0e:a5:92:eb:38:d1:7b:65:e7:a1:24:16:dd:5e:9c:
                    8e:6a:99:5b:92:82:f8:02:9d:18:98:03:df:37:84:
                    86:1d:aa:86:a8:e1:bf:82:0b:3a:c2:6e:29:47:d7:
                    89:8a:83:57:be:ea:06:ac:df:96:0e:4b:d4:1a:58:
                    a0:0e:0b:70:95:a2:15:6f:a7:e3:e3:74:62:c3:0c:
                    d0:40:69:9a:15:fb:4b:e6:cd:12:c3:4d:80:f7:d8:
                    1a:36:37:c9:4b:29:a8:bd:58:a5:e7:98:81:0c:66:
                    01:c2:18:39:00:22:4a:30:bc:07:90:15:90:c3:87:
                    7e:b7:9b:e3:f2:e8:66:4e:e8:85:e2:4e:b6:50:d0:
                    57:52:23:eb:78:e6:f6:1f:61:6e:81:06:da:ec:8e:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BF:58:91:5F:90:8E:53:57:D6:56:22:75:4F:C2:28:D9:A0:1B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d44f2ce-1866-3716-8267-16aa02f5a02c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:6a:5f:cd:e7:7d:b0:37:bb:80:f4:7b:c2:93:19:20:0b:04:
         5b:e8:fc:ed:ae:ed:40:fe:d5:54:48:1d:1a:9e:c1:e8:7f:13:
         88:13:a1:ae:7e:96:be:21:a7:e7:53:33:ce:94:0f:e4:ce:97:
         5d:11:3d:d7:05:43:be:10:a2:43:96:eb:cc:31:82:94:a3:69:
         a2:7a:48:5b:8a:b1:d7:3d:29:8f:e0:77:f1:9b:19:7d:55:fb:
         c7:b9:c1:ee:2d:bd:23:61:b0:e2:21:f2:52:6d:d5:fd:fe:fe:
         f7:35:a9:53:d5:d3:5f:4d:7c:56:c7:88:fa:d0:ca:3a:c1:e0:
         52:1c:4c:38:e1:71:40:4a:e7:12:61:a5:a4:a0:21:62:fd:2f:
         d8:3a:b4:60:65:90:9c:dd:b4:d7:3f:3d:4c:4f:ad:7b:0f:40:
         a3:1a:3e:28:2d:05:5d:da:1b:07:02:3f:97:a6:a3:97:48:e4:
         d4:89:22:0c:dc:a8:dc:b8:cd:db:75:a8:ed:4d:71:25:86:0e:
         e9:14:91:64:2f:5b:af:a8:ba:1f:01:b1:97:ee:60:03:6d:51:
         16:75:5c:b3:be:20:83:c9:d3:7a:62:7c:d7:fd:cc:05:d3:a3:
         b4:51:46:a6:31:8f:eb:8c:bb:85:be:e2:84:3e:6c:37:9a:3c:
         dc:cb:75:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:33:49 2025 by rpki-client