Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9df44781-4047-3c71-93d5-d36ca8cb49a0.roa
File:                     9df44781-4047-3c71-93d5-d36ca8cb49a0.roa (raw, json)
Hash identifier:          MSZdkrd8W6AooN6Cmk9+iZQhALdbTwc6BGoCgAvfAX4=
Subject key identifier:   FE:55:3B:6C:C6:1F:67:DA:2E:E8:11:84:BA:2B:DB:9F:C2:B2:66:FD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A814661308C85BADAA3795280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9df44781-4047-3c71-93d5-d36ca8cb49a0.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.28.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:61:30:8c:85:ba:da:a3:79:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=55f595bc-1644-4bbb-a686-a598ba8f5a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c9:b0:aa:09:f9:3e:57:bb:57:ff:b7:e9:45:
                    47:38:43:a0:5f:c2:34:70:a8:f7:8a:18:49:73:c8:
                    08:12:ad:55:3a:42:22:1a:42:1d:96:52:45:f7:28:
                    e9:d1:65:f7:ca:03:54:c6:9c:dc:e1:ce:7b:29:96:
                    ad:28:d5:c9:c8:24:e8:a0:87:9e:7d:e1:f5:d2:57:
                    3e:48:67:13:f3:b7:94:e5:f9:57:a9:b0:59:14:21:
                    96:d7:a9:f0:ca:0f:f4:ad:83:02:9b:52:b0:4e:ef:
                    8e:a6:af:0c:50:aa:f5:b7:a6:d2:1f:d2:58:4d:1f:
                    d0:b7:91:56:5b:22:ae:e3:de:0c:71:f9:1e:a7:35:
                    77:a8:d8:23:fd:fd:fd:48:16:ec:e4:5d:d2:b7:4c:
                    64:ca:9b:0b:39:04:b3:99:a2:ad:df:04:3e:e1:de:
                    20:3b:4a:d3:2f:c8:c5:77:a9:ae:3f:08:d2:a5:e5:
                    e1:b7:d7:e0:59:a7:cf:89:b8:56:4d:66:ea:b1:52:
                    de:43:56:18:3c:d4:79:cb:9b:88:bb:32:03:c0:5e:
                    d5:7a:68:60:07:5a:94:b4:99:f8:49:ee:10:a2:40:
                    9d:9d:a9:43:40:68:b1:ca:f4:0d:c7:36:82:91:eb:
                    16:f1:01:19:42:37:85:40:54:08:76:22:6d:1c:8b:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:55:3B:6C:C6:1F:67:DA:2E:E8:11:84:BA:2B:DB:9F:C2:B2:66:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9df44781-4047-3c71-93d5-d36ca8cb49a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b4:1c:21:9b:51:c6:15:79:ed:62:37:30:cb:57:39:c4:93:
         fd:bc:48:de:f1:54:ce:10:ce:29:3d:14:a5:1d:7a:be:f6:a0:
         81:ec:ee:f9:a3:24:2c:97:b9:fb:78:fc:1f:4a:57:22:e9:d9:
         ee:8e:2e:e1:77:d5:ae:c3:46:89:1a:db:b7:32:b9:84:92:a0:
         f1:7d:e7:6a:fa:05:71:bc:5b:c4:ee:72:e4:23:eb:bc:21:d1:
         dd:4e:3d:dc:92:b5:99:68:ef:10:eb:9a:c9:fe:26:7d:ac:1a:
         82:5b:cd:a7:b3:b0:87:30:d2:f8:8b:5a:17:15:2f:31:93:82:
         8c:4c:bb:14:8c:9d:f9:56:40:72:21:27:63:9c:1b:e1:96:32:
         9a:51:b9:92:51:6d:b2:5a:01:02:0b:7a:e4:0c:ac:f7:01:0d:
         45:10:08:f4:e1:57:8f:5e:47:77:f7:3f:42:13:6c:39:d4:b6:
         9a:90:01:ad:d2:a4:49:dd:e8:dc:51:6e:5e:a3:68:ef:fb:66:
         e5:82:bc:c4:cb:42:94:47:05:d5:d1:fa:8d:87:8d:d0:8c:23:
         18:a2:02:9f:50:29:89:bc:49:ad:01:a7:2e:65:6f:2f:99:c6:
         a0:69:ec:d1:f0:a4:96:f3:15:39:c4:d5:2a:a2:13:f4:f6:24:
         26:d5:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:18 2025 by rpki-client