Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b4c2f46a-5c84-325b-befe-becef2227b02.roa
File:                     b4c2f46a-5c84-325b-befe-becef2227b02.roa (raw, json)
Hash identifier:          UC/LQzS+16s1z8/97+64CItE3QuWHpkQUC9X3kyEWPU=
Subject key identifier:   69:A2:A1:1A:64:B7:36:43:33:BA:C8:D7:DB:03:95:90:8D:08:E4:4C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A814667A798A2F28596E54C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b4c2f46a-5c84-325b-befe-becef2227b02.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.20.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:67:a7:98:a2:f2:85:96:e5:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=2d3b9329-df52-41cb-818c-40a95495ee89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:87:bc:8f:bb:12:06:1b:3e:20:10:b7:0f:10:
                    17:78:50:f2:e0:47:62:42:12:eb:a7:64:fa:cb:7b:
                    7b:5f:f0:73:98:e3:96:16:da:df:4c:2c:3c:8d:ba:
                    54:2a:34:4c:61:f5:6b:fd:81:4f:65:9b:9d:53:39:
                    d1:20:84:6d:72:ad:67:24:3b:fc:77:fe:27:83:7d:
                    4b:a1:9e:d5:27:24:4c:40:38:9f:e5:1d:ee:6e:3a:
                    fe:d2:87:f0:cf:f4:f5:6e:9f:82:72:95:62:63:b8:
                    99:d4:90:7c:61:f5:3b:f7:fb:3c:70:5e:4e:d1:b1:
                    f6:f0:f7:f3:dd:be:5c:81:34:68:09:56:8b:45:01:
                    28:39:25:7a:94:90:28:b0:e8:86:de:c1:1e:a3:7a:
                    d0:e0:29:88:fc:b5:aa:37:22:19:cf:1a:49:57:1b:
                    54:a2:32:13:1b:db:5d:7d:3b:32:b0:1f:0c:16:3a:
                    80:36:3d:a8:0e:21:17:4b:2b:59:b7:7e:64:94:fa:
                    00:2d:b5:e4:7a:eb:06:b5:11:ba:03:e2:dd:f1:02:
                    ac:ee:06:8a:24:50:cb:57:19:7e:f2:7d:23:ab:62:
                    ce:2c:99:29:7c:6f:05:92:8e:87:99:75:c3:3e:d0:
                    e5:ba:89:2e:72:33:a4:9f:36:73:0c:54:c2:9b:6e:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A2:A1:1A:64:B7:36:43:33:BA:C8:D7:DB:03:95:90:8D:08:E4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b4c2f46a-5c84-325b-befe-becef2227b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:0c:c1:5e:51:16:39:3c:73:26:11:e8:9c:8a:83:79:80:bd:
         49:0a:60:91:40:89:45:42:21:89:2f:c2:ca:27:b8:71:ce:8d:
         af:3e:20:a2:1b:5f:a0:19:2f:3b:33:39:53:91:5b:81:9c:ea:
         5f:9d:eb:81:b3:57:e9:ab:a4:68:ed:b0:df:cd:28:a1:cc:63:
         71:d2:05:17:08:ad:2c:0e:e3:f0:0b:02:f6:5d:3e:1a:5f:97:
         75:c7:c2:6e:c9:b7:91:c3:e9:fb:32:c3:2f:08:fd:e1:63:51:
         53:e7:b6:4a:86:2d:75:51:11:fb:1c:b7:64:04:ff:8d:1c:07:
         99:1a:11:e2:e0:43:8a:27:43:19:e9:90:97:37:7c:d2:2b:9b:
         0e:57:23:8b:70:59:ae:81:67:b5:8a:c0:d5:a2:8c:d8:fa:9a:
         73:11:92:d8:d6:c7:a0:12:03:51:24:51:6d:27:e1:92:6b:c7:
         ef:0c:5f:97:b5:8a:e6:e0:9f:64:c0:a8:ba:41:68:d4:32:72:
         b6:e1:1d:a8:d9:fa:94:7f:0d:9d:d4:ac:9f:58:ff:6c:8c:0f:
         b8:29:10:3f:bc:82:9e:f0:6f:94:52:fc:bd:ee:9c:cf:7e:b7:
         c4:e3:ae:6e:ad:10:55:34:f3:d5:d7:6c:3e:90:aa:1d:d3:f9:
         e4:60:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:58 2025 by rpki-client