Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a4121a-a44e-3a44-951c-be4fd4286fee.roa
File:                     a3a4121a-a44e-3a44-951c-be4fd4286fee.roa (raw, json)
Hash identifier:          fKXJvF02IyQj1A5ddbrcSlQJmgPk8nG9PzY2dVHvqj4=
Subject key identifier:   8A:B3:D0:B4:A0:20:7D:11:66:D7:5C:0A:86:64:32:43:CB:E7:E8:F5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DB6C96E1728661B97C06C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a4121a-a44e-3a44-951c-be4fd4286fee.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.22.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:6c:96:e1:72:86:61:b9:7c:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=04a1453e-cee1-4664-9703-56583b82a612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:f2:90:00:22:34:2b:91:03:37:34:cf:8c:
                    a0:6f:d3:76:bb:1f:34:4b:69:ef:b6:43:3e:f3:13:
                    bd:41:35:5d:2b:c7:35:b4:f0:ae:d8:44:d8:e9:03:
                    33:8e:85:17:99:90:7e:34:73:bd:eb:e0:e7:d8:6d:
                    d1:52:91:4d:d4:88:ff:1f:61:de:77:66:8f:b4:6f:
                    01:2d:36:c7:a6:1d:bf:84:de:55:38:6b:ff:e5:98:
                    77:11:e6:30:33:12:79:6e:fd:cf:bb:d6:94:7d:96:
                    7b:c8:2b:61:b1:e6:fd:88:16:9f:c8:da:37:9f:f4:
                    f6:c3:43:b1:f8:92:fa:22:f8:e8:d1:f6:e8:72:5a:
                    9b:d1:3b:a1:27:ee:18:57:c5:98:47:98:5a:4c:ca:
                    53:6c:d9:ed:0d:09:53:39:25:37:70:ac:3c:8f:55:
                    81:06:80:d1:50:f4:03:31:af:b8:94:0d:86:41:d0:
                    08:3c:69:b1:2d:34:ce:b2:92:e2:3a:e3:85:6f:c0:
                    c4:e2:ca:8e:ec:fd:50:89:78:eb:08:fc:41:b6:6e:
                    5c:8f:55:80:da:46:77:59:16:74:f8:bb:27:ab:5c:
                    94:51:f1:bd:ca:32:8d:2f:da:85:e4:73:34:e6:2a:
                    93:e5:10:48:dd:7c:9e:91:1e:b9:5b:cd:61:ba:b7:
                    6b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B3:D0:B4:A0:20:7D:11:66:D7:5C:0A:86:64:32:43:CB:E7:E8:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a4121a-a44e-3a44-951c-be4fd4286fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7c:af:c5:8b:e9:78:e5:d8:ba:35:22:de:92:03:9b:e2:cb:
         df:90:07:85:02:d3:2a:c6:8c:ce:d3:cd:7e:1d:4c:cd:8d:98:
         7b:b1:bd:73:e2:97:e6:1d:4f:a1:22:5d:e0:1b:dc:c2:67:cd:
         38:24:9a:4d:32:a9:1f:6d:92:a3:1c:48:09:00:5e:41:c3:33:
         a6:86:d7:fd:9d:a7:71:a8:14:bc:61:a5:46:76:e8:42:42:84:
         7d:6e:fa:cf:63:2c:75:69:32:bf:8e:e6:a6:24:ea:56:6b:fd:
         31:27:f5:b4:14:35:e3:2a:f5:34:e2:03:c7:ce:c5:b1:48:7a:
         60:0b:9b:db:dc:9e:90:96:56:75:3b:ad:c7:be:ff:4f:74:c6:
         76:6f:d3:bf:62:14:29:0e:9f:30:df:b4:74:fe:a1:0b:60:ad:
         eb:d3:e7:6f:21:e6:a1:4c:bd:34:2b:82:a4:9b:fa:ba:6a:a6:
         98:ca:09:71:48:9e:c0:b6:e6:3f:53:08:b5:f9:b4:f9:c6:3b:
         66:71:98:26:39:91:d7:fd:03:7e:8a:64:2b:25:c9:22:08:b5:
         da:de:27:d5:4f:89:11:99:63:fe:bf:36:94:c7:f4:1c:b5:de:
         d3:a0:01:4c:9c:98:24:e5:64:5c:66:b4:df:71:b0:7c:10:7f:
         cb:ca:2c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:27:08 2025 by rpki-client