Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa
File:                     968256d3-cb78-314c-bb42-530413b2968f.roa (raw, json)
Hash identifier:          EYDbEPmtkCfnSsz6+hRnPU4CoMU9hfiGlq5vTc3JEbw=
Subject key identifier:   B7:8D:E2:B5:7E:D0:35:20:9A:5F:E9:81:35:B0:19:4A:B4:F3:E6:EA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410E62DD2708A8AB0F6A800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.28.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:e6:2d:d2:70:8a:8a:b0:f6:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=aa80fbbe-0a77-4bb1-b01a-5c90a484d226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:73:32:72:fa:12:64:04:71:d9:08:fd:05:66:
                    0b:fc:60:71:a3:93:c2:70:9c:49:50:4a:4e:67:c2:
                    42:b1:01:f7:c6:f2:0e:1a:7c:65:c7:3a:cf:43:94:
                    2b:54:19:1b:73:e7:78:80:c4:cd:85:c5:40:0a:9d:
                    5a:da:bd:60:41:7a:c1:43:35:04:f3:7a:fe:7f:a6:
                    f6:83:b0:d6:39:7a:d5:e8:76:ca:be:5a:5e:81:85:
                    85:c9:11:34:73:d8:97:f5:61:27:6c:7c:6e:aa:2b:
                    ee:bd:be:cc:58:37:ed:22:75:31:4c:5b:d0:54:da:
                    70:d8:ad:b3:20:4a:8c:ed:5a:75:58:e8:49:32:13:
                    42:80:bd:6c:d8:fe:fb:4f:60:0b:54:bd:74:b8:52:
                    c1:1d:ac:27:66:fa:3a:8e:ad:c0:9e:07:24:c8:78:
                    1e:90:be:7f:0a:d6:f6:95:e0:43:6d:9a:95:51:05:
                    26:18:db:da:5a:84:fa:ee:21:9d:03:de:a5:42:5e:
                    c0:08:2e:d9:99:6c:4a:ed:64:95:fb:3d:be:ca:f6:
                    35:de:4b:cc:0d:ca:dc:b1:d1:be:14:99:10:4c:0a:
                    bb:06:cb:c5:01:ef:48:8e:66:1d:bc:94:27:ff:8c:
                    b9:8a:6e:2d:74:ae:0c:7b:a4:8f:76:1b:14:3b:26:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8D:E2:B5:7E:D0:35:20:9A:5F:E9:81:35:B0:19:4A:B4:F3:E6:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0b:23:8c:93:5d:9a:1c:60:a4:98:60:34:a6:4f:d1:9a:79:
         3e:34:b6:ca:ae:49:e3:58:73:21:b7:1f:04:15:23:4b:8c:fe:
         75:4b:02:53:2f:8e:13:06:4b:ec:36:9f:c9:41:cc:2a:ae:ef:
         cc:58:4d:b9:90:85:7b:8b:6d:e2:a2:38:55:d3:d7:4f:55:21:
         44:ff:c3:56:38:66:0a:34:6e:ea:32:77:43:09:2e:f6:35:29:
         3f:0c:5c:ae:49:64:97:bf:1f:cc:f4:d5:13:6d:8a:4b:d4:e3:
         37:67:8a:f5:17:34:d7:c5:b8:9e:70:1d:a6:d1:d4:3d:d6:04:
         f3:25:7a:e3:76:91:cb:c2:4c:33:17:44:6f:01:f9:bc:aa:94:
         a0:e7:e4:99:6d:5f:d1:63:bf:f7:6f:d4:94:a6:23:59:f6:9e:
         67:10:b8:68:04:69:93:e5:21:2c:c4:68:f5:6f:17:1f:98:3b:
         10:08:85:d9:c1:01:e1:b9:a5:b3:2c:43:44:9a:6b:a9:17:40:
         38:3f:ec:61:f0:52:9e:f0:a7:a4:98:8f:48:c8:4b:95:e1:16:
         46:8a:15:06:96:21:94:90:64:2e:db:39:3a:75:6b:82:8e:89:
         da:c5:de:7c:e6:c6:4a:33:f1:80:70:0f:2f:80:47:b0:5b:ec:
         02:f2:ac:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:40 2025 by rpki-client