Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa
File:                     b8d06be2-2497-387b-b093-f9161a79abe6.roa (raw, json)
Hash identifier:          WBvrh62m62nhpRbt5Mc9UsMP9vI93gl1QAvMYpK4pe4=
Subject key identifier:   C3:F5:40:5C:AC:25:32:73:1B:C5:7D:BC:EB:E0:9B:65:41:6A:5E:7F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84124DD4D15D9FA74FF56900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.21.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:4d:d4:d1:5d:9f:a7:4f:f5:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a793401c-3485-4311-90dd-1f00715f2233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f6:04:a2:d8:9e:51:f8:86:86:a4:9d:40:90:
                    0d:69:8d:6f:59:1a:32:8a:ac:da:06:af:9c:a0:6b:
                    26:f5:f1:c0:b0:37:a2:07:b5:fe:b9:69:ce:7e:a6:
                    be:aa:90:99:d4:16:0e:bf:93:20:9b:7d:ad:b3:50:
                    c9:74:e6:32:91:be:9f:98:08:52:51:c2:fd:7f:24:
                    3a:8c:b4:7f:c5:5b:9c:04:d1:05:be:1c:3e:01:24:
                    72:5c:f2:a6:28:01:cd:66:a3:31:e9:4c:7b:3b:b4:
                    6f:e4:b7:8b:7a:30:d1:5d:04:20:fc:a3:85:60:95:
                    ae:92:10:5d:b6:bf:8d:d2:bb:f3:6c:ae:70:07:2e:
                    44:5d:6c:78:5b:8e:da:3d:98:65:13:e9:34:1b:c8:
                    c7:60:32:6e:e1:a3:d9:43:29:74:df:4d:f2:96:a2:
                    11:9d:d2:d9:e0:37:cc:cd:0a:eb:99:45:2e:98:17:
                    ef:64:35:77:9b:44:60:3d:b7:9c:63:2a:c2:bc:73:
                    65:b7:03:f7:88:82:1e:8e:83:42:64:98:24:78:08:
                    d6:88:b0:c2:0f:50:28:42:c9:de:6e:e8:ce:84:dd:
                    09:82:09:af:c1:eb:f1:87:45:eb:e1:27:bb:e4:b4:
                    a9:22:a6:a1:8d:d6:12:4a:30:53:8d:59:38:53:5d:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F5:40:5C:AC:25:32:73:1B:C5:7D:BC:EB:E0:9B:65:41:6A:5E:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b0:2c:1e:d0:3d:19:b7:4b:5c:20:33:0d:ed:e7:60:41:e1:
         83:fa:12:6a:67:82:12:21:e0:13:04:42:a7:d4:d5:4f:a1:0c:
         99:a4:26:4d:d6:27:87:19:b2:15:8c:84:5a:12:e1:e2:f9:92:
         ed:1c:f6:eb:a8:48:b4:e0:3d:7d:06:d0:0e:d2:87:cc:93:9d:
         38:af:b3:c7:6d:c0:d3:df:d3:8a:b3:30:96:cd:11:01:dc:fe:
         8e:2c:d8:c1:fa:8f:df:9b:35:d9:05:30:6e:35:f6:34:f5:42:
         d9:57:a5:bd:4b:8d:15:df:bd:80:2e:38:fc:4b:54:fe:44:d4:
         8e:cf:4c:24:86:49:39:d2:ec:ea:53:cb:20:d0:44:3b:54:68:
         5e:6c:9e:ae:43:be:d9:be:66:4f:76:05:26:fe:bb:3a:c6:36:
         47:04:97:3b:75:6d:35:ed:bc:65:1c:19:82:b1:06:43:4b:f8:
         b9:73:64:a7:65:75:b1:8b:73:94:17:c6:08:7e:85:39:c8:47:
         cd:8b:8f:61:fa:2d:06:72:43:70:1d:b7:13:2d:14:c5:aa:80:
         c8:4e:57:a7:56:8a:42:e7:54:9b:14:ce:8b:fa:f0:1f:47:50:
         a9:df:af:65:77:d5:41:7e:c3:ae:83:cd:2d:a8:d5:24:06:66:
         5e:d0:ae:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:49:56 2025 by rpki-client