Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1d79f2c-48dd-3e7c-b4db-e94cdb4b466c.roa
File:                     b1d79f2c-48dd-3e7c-b4db-e94cdb4b466c.roa (raw, json)
Hash identifier:          yOLAfZclV5TJclpSPLGnrUMXaqBtpBMvwb5sKyPcgSI=
Subject key identifier:   8B:A5:DF:C5:E8:F1:80:3C:E0:F8:18:87:0F:F7:B6:04:48:B5:AD:B6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410F29E225975B6B5B65120
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1d79f2c-48dd-3e7c-b4db-e94cdb4b466c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.22.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f2:9e:22:59:75:b6:b5:b6:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d5569156-14b0-4023-ad3f-1f2b62bee176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bb:ee:cc:ee:f4:3b:7b:30:0b:cc:27:29:c9:
                    05:c7:b1:b0:b5:50:2f:c8:fb:51:6f:0c:25:e4:08:
                    30:d2:db:fa:c9:0e:05:ab:98:91:bb:cd:15:2b:f0:
                    8f:47:f0:6f:cc:96:93:5b:46:ee:f8:26:7c:eb:0d:
                    66:66:27:52:c3:45:41:75:e4:a3:b3:06:ee:ea:fd:
                    b6:58:2d:cd:eb:1d:fd:83:c6:a7:1b:32:f8:13:8c:
                    c8:3a:99:aa:c8:69:44:31:c0:47:40:4c:61:a3:27:
                    b8:9f:c9:ec:08:14:37:55:6a:5f:e1:46:ab:00:30:
                    a9:02:fc:b1:80:c3:f1:61:11:be:1b:35:eb:10:d8:
                    e9:16:58:05:61:2e:04:2a:d6:be:ff:1e:fd:f7:c5:
                    dd:14:f8:ef:41:30:3f:78:9e:54:f8:ba:c0:a4:e7:
                    20:7a:de:5c:bd:5d:8c:55:c8:3f:7f:bf:64:ed:15:
                    f4:06:cd:40:bc:80:61:83:ab:5d:9c:c2:92:9c:37:
                    90:7e:d7:15:f9:c1:4c:79:63:2f:97:7d:6f:5f:4b:
                    d8:30:15:fe:7d:25:e1:2e:14:df:78:ac:36:4b:c6:
                    9c:d9:72:22:2a:73:6a:87:ec:11:4f:a5:b3:ec:51:
                    30:2b:b0:31:3e:65:6d:15:f5:9c:81:df:8e:f0:f8:
                    1a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A5:DF:C5:E8:F1:80:3C:E0:F8:18:87:0F:F7:B6:04:48:B5:AD:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1d79f2c-48dd-3e7c-b4db-e94cdb4b466c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:0e:5c:1f:3a:65:07:f1:0f:24:46:52:24:b5:d6:e8:9a:aa:
         81:b3:f9:07:39:4f:83:79:1a:5e:f5:67:37:9f:84:57:20:d2:
         65:1c:5a:8d:47:30:05:df:cd:60:1d:23:6d:e6:85:a0:6b:13:
         b7:eb:04:05:be:39:c5:e0:4a:8c:02:09:dd:14:fc:3b:73:c2:
         1a:67:76:8b:dd:84:2f:d4:eb:69:94:72:13:66:13:ab:13:25:
         61:78:88:df:1c:88:b7:d5:8c:f1:bd:06:0a:11:8a:2b:18:1d:
         a8:76:92:36:a1:7c:60:5a:c8:5f:a6:3e:3f:d3:aa:70:14:4d:
         55:60:82:7c:e5:10:10:1d:dc:06:7d:5a:42:d4:a4:a4:0a:12:
         ee:55:80:d3:51:c2:ab:07:6a:2f:69:56:aa:e1:67:c2:6f:73:
         53:47:34:56:1d:90:83:e8:e6:3d:0a:f8:78:a0:06:73:6d:e6:
         99:43:bc:ec:dc:55:80:bb:10:e1:93:54:6d:c6:58:9d:a9:de:
         39:1b:2c:5f:14:8e:7b:cb:9d:be:26:75:ef:79:28:04:a3:59:
         19:6d:3f:2c:8c:ef:fc:d6:fb:2c:02:4b:3f:df:09:5f:09:31:
         7a:a9:03:92:95:38:23:5e:30:c4:f2:9d:1c:e3:cd:2f:7f:aa:
         b4:06:5a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:55:57 2025 by rpki-client