Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65ff724-a00a-310f-bd57-fdb035451d61.roa
File:                     a65ff724-a00a-310f-bd57-fdb035451d61.roa (raw, json)
Hash identifier:          Fz6yhmF8NORPOQKdp0oP8uqmYwRpRo8Ywc3/b1c97MA=
Subject key identifier:   F4:27:F3:73:9E:16:11:73:DC:80:9D:69:94:CA:0A:A6:0B:69:02:CF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DC05D0C6F0F1364A5CA240
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65ff724-a00a-310f-bd57-fdb035451d61.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.18.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:dc:05:d0:c6:f0:f1:36:4a:5c:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=909361d7-97aa-4d19-b8ec-cb6f9589a234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b9:0f:81:b7:e4:4d:e3:ab:40:11:a0:95:bd:
                    d3:87:d1:e5:1e:e8:ce:4e:6f:b7:32:5d:14:47:e0:
                    92:83:8d:74:80:da:f0:8b:13:42:8e:9b:ce:f3:f0:
                    d3:95:2a:0c:76:4f:9e:4d:f0:f1:1c:65:43:72:de:
                    a5:03:50:6c:8b:51:97:a7:f7:f6:62:d5:ac:a7:63:
                    58:5c:cc:87:df:78:e7:33:58:80:26:2e:02:97:c2:
                    bd:c9:02:51:c1:3f:9b:63:f7:93:f3:4c:b8:00:c7:
                    eb:63:c9:87:39:6e:69:56:76:9d:d3:fc:92:ed:c3:
                    74:e5:46:7f:36:25:94:1b:c0:3c:8a:70:bd:4d:c7:
                    71:f8:07:f5:b7:b3:f0:61:dd:10:90:80:54:37:83:
                    fe:14:30:bc:13:a5:b0:a3:dc:92:60:d7:9d:99:13:
                    79:1c:4b:77:17:ab:eb:86:42:be:27:b0:ee:22:c6:
                    18:fc:56:78:cc:d6:fe:19:93:5c:4c:da:f8:56:86:
                    cd:15:74:bd:67:7e:10:fe:84:77:e4:15:fb:3d:86:
                    45:4a:e3:c3:b0:48:55:c8:2b:7a:a9:0d:2d:f5:39:
                    61:29:7c:89:b9:74:a5:2b:bb:44:9a:1b:4b:dc:a6:
                    82:1f:44:ab:9a:25:c0:9a:54:87:32:b3:49:02:81:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:F3:73:9E:16:11:73:DC:80:9D:69:94:CA:0A:A6:0B:69:02:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65ff724-a00a-310f-bd57-fdb035451d61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:92:1d:b3:8f:8f:22:5f:c9:95:8d:ff:b3:77:a0:0d:4c:62:
         46:b8:2d:de:f3:e2:96:2b:35:ee:01:27:4d:55:71:7c:e6:6b:
         14:c4:f4:43:01:84:aa:7e:c6:a5:43:39:57:fd:dc:37:c5:7f:
         2a:33:dc:06:e2:db:d9:8b:00:97:8c:5c:4c:e4:41:83:a3:69:
         4c:3e:51:01:99:de:84:a2:c5:2b:63:1c:36:b0:80:35:9b:14:
         b0:c7:d2:46:e9:19:8c:14:da:77:76:91:de:ae:6f:ba:44:b9:
         20:77:b7:bb:53:56:12:e0:0f:36:2b:f3:5a:63:f4:4c:75:c7:
         45:7f:28:10:52:ed:1f:c5:cd:86:e7:95:c2:74:5c:10:84:76:
         e3:84:37:65:36:11:e4:90:70:ce:96:4c:36:15:7e:7c:75:74:
         ae:d5:22:9c:74:4d:5d:e3:37:a5:d3:84:0a:27:b3:88:46:f3:
         a0:1c:d4:16:c0:ac:66:bc:2f:f3:70:c9:88:7e:f2:48:22:61:
         70:d5:ef:86:7b:57:29:05:21:33:31:d1:82:9f:59:6d:71:2a:
         dd:cf:42:09:9a:9e:f6:c1:ed:ef:4b:35:1f:2d:23:8d:c9:f1:
         df:93:5d:2f:96:00:16:ab:70:da:9c:53:d2:c5:a9:e6:81:1c:
         40:4d:12:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:08:51 2025 by rpki-client