Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9444cfb2-0ff6-34d8-b4f1-bac825ccf79c.roa
File:                     9444cfb2-0ff6-34d8-b4f1-bac825ccf79c.roa (raw, json)
Hash identifier:          qEg3veyLpMtcK/7HaaaynbjBjEknoWf9FmzebRiXrqc=
Subject key identifier:   4A:8F:51:F1:D3:69:9C:5A:7B:B2:98:AF:05:7F:D5:F1:53:72:06:AA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84124E67BC2E07BAFAA5E840
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9444cfb2-0ff6-34d8-b4f1-bac825ccf79c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.23.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:4e:67:bc:2e:07:ba:fa:a5:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=184dafba-44d1-4e57-b379-819a2666e63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:29:cd:1e:8b:e2:5f:fb:b3:57:83:81:04:
                    a1:f0:67:fd:e4:2d:5e:ec:3f:f9:61:85:c5:a8:5d:
                    2e:82:f3:ce:00:bf:65:53:0c:aa:f1:4f:59:02:27:
                    59:71:4a:56:c1:eb:e2:f8:5a:68:48:4c:44:dd:0f:
                    6d:fd:94:67:62:55:6a:2c:00:5b:da:8d:bd:04:40:
                    a2:f6:c9:cf:74:1a:35:8a:c0:de:16:66:40:98:79:
                    1f:82:82:2b:91:6f:ec:6b:b4:f3:16:d2:0c:44:ad:
                    51:b8:64:91:f1:70:94:b5:02:03:ee:29:0c:20:2a:
                    98:64:5c:27:e8:98:78:2a:e9:84:5b:94:88:b9:2e:
                    2f:bc:0c:20:22:1e:f7:9f:5d:84:cb:10:12:ac:01:
                    86:e6:47:a5:74:0d:75:3c:d7:5f:c2:1b:4b:20:7a:
                    ab:17:79:e1:c7:e8:ff:d7:5d:df:70:6c:cc:02:e2:
                    39:3e:5d:71:be:b8:fa:a2:ef:bf:f5:84:98:1f:47:
                    97:94:30:76:4f:f0:26:48:59:1e:ad:b5:4e:bc:13:
                    1c:47:0d:0c:b8:28:34:9b:e4:c2:d4:25:87:ac:16:
                    ff:bc:f8:53:55:c5:87:7a:08:80:05:cf:ae:60:31:
                    df:14:d3:2d:8c:37:90:19:3d:bf:db:e5:69:99:41:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8F:51:F1:D3:69:9C:5A:7B:B2:98:AF:05:7F:D5:F1:53:72:06:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9444cfb2-0ff6-34d8-b4f1-bac825ccf79c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f3:47:8c:b3:cd:bd:c6:dd:ba:bf:ad:a9:03:a5:3e:89:35:
         80:37:04:f3:45:c7:c3:76:96:a1:c8:a3:7b:a4:5f:9a:e9:23:
         36:92:53:0d:23:67:b4:44:69:c6:c6:92:2a:0a:5d:cd:51:db:
         34:a6:7f:78:33:dc:0c:2e:50:c7:c6:f3:96:22:f0:82:96:73:
         6e:95:3b:06:a0:97:d9:41:32:40:01:25:4e:71:fb:38:6a:fa:
         41:bc:0b:5b:59:b2:3c:42:f9:e2:a8:b2:1d:94:62:9b:32:4b:
         32:c6:b7:c5:49:20:18:a7:4c:97:b7:47:8f:df:97:5a:f3:9d:
         9d:22:2a:89:5c:1a:06:69:cb:3c:c6:ab:7f:0f:ef:c1:dc:95:
         df:20:a6:55:93:82:60:30:8c:4a:d3:88:b1:05:66:ab:6a:93:
         d2:93:18:7c:1b:0c:5d:a7:e3:18:a5:cb:b1:e7:99:aa:d8:1e:
         46:c8:91:be:7f:58:df:6f:66:39:3c:4f:84:0b:fb:2e:ad:05:
         c7:d3:97:be:0a:02:9b:f4:27:ae:f0:4c:09:67:fe:a4:73:17:
         67:a1:3d:ad:24:b2:32:06:09:9f:fb:be:12:d7:5c:0b:9a:92:
         14:78:c8:56:7f:6c:ed:05:bd:b9:d1:bb:ed:11:67:bd:04:2a:
         fa:8b:c9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:25 2025 by rpki-client