Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda720f6-f1fe-3a7c-ba27-823efa456cc4.roa
File:                     bda720f6-f1fe-3a7c-ba27-823efa456cc4.roa (raw, json)
Hash identifier:          P0IzxIPCi1s+hKEHWzHvyeqMc4j+xTl8xX0sFGRhyto=
Subject key identifier:   F2:0F:C4:06:AB:AD:EF:AB:30:6A:6C:0B:37:70:4E:9C:E6:70:3F:05
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410D8C174CEF330C9277C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda720f6-f1fe-3a7c-ba27-823efa456cc4.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.30.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:d8:c1:74:ce:f3:30:c9:27:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=9a0be695-c799-4c6f-a015-2f758730a14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:20:81:26:9e:89:8b:2f:16:c9:ea:72:e7:dc:
                    e7:e0:3a:b3:7c:19:1d:cc:0e:66:23:f5:9a:b3:7d:
                    86:7e:67:6e:1a:bb:80:b3:9c:6e:56:73:c7:bd:a2:
                    85:e2:cb:cc:ea:17:73:e5:ef:08:b4:72:8c:d6:44:
                    31:fe:2d:fd:75:4e:87:ff:59:53:d0:3e:ec:35:51:
                    60:51:14:4c:24:12:e7:ab:69:34:bf:69:21:ee:9c:
                    64:b8:f7:bd:93:57:9d:cf:ac:1f:7e:1b:7a:6f:da:
                    c4:6f:66:f4:69:12:04:6d:79:1d:d4:cd:f4:d5:4b:
                    95:53:44:0e:6e:80:56:30:93:bc:e7:18:66:89:2e:
                    7d:ba:50:39:03:96:37:67:7c:fd:c1:40:92:d9:50:
                    c0:37:75:27:2e:54:d0:60:5b:e8:4c:a5:fd:83:63:
                    8e:e7:3c:d9:c1:33:14:bd:ba:84:f8:50:60:5c:c7:
                    3b:e6:3c:d5:86:2f:80:f2:e7:c8:3b:5f:29:4b:f0:
                    df:d7:f1:56:9d:cf:6a:a0:e7:e1:18:33:e1:b2:7b:
                    05:e4:e2:df:28:de:75:12:17:e8:56:f6:b9:da:0f:
                    cd:70:d8:d5:bf:76:4d:cd:2d:66:6a:74:3a:b3:85:
                    45:13:7b:ef:ce:3a:c2:50:d4:08:0f:12:fe:88:b4:
                    7a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0F:C4:06:AB:AD:EF:AB:30:6A:6C:0B:37:70:4E:9C:E6:70:3F:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda720f6-f1fe-3a7c-ba27-823efa456cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:28:61:4f:70:17:94:75:12:34:66:62:22:48:da:62:45:11:
         06:d7:2f:52:36:06:11:66:f0:65:7a:59:f5:b4:a6:ba:60:f9:
         c5:a4:e3:5f:06:34:83:03:1f:da:96:51:78:02:a8:86:a3:76:
         44:4f:1d:b3:7c:ba:a1:5a:3e:2a:fc:55:c0:de:bf:29:7e:80:
         f8:97:de:c9:40:fd:1a:43:94:9c:5c:13:ec:f8:8c:25:cd:5f:
         57:b0:2b:29:df:92:78:87:a3:59:cf:e3:f5:9b:41:6e:e1:35:
         b8:78:29:60:3a:56:93:be:d2:25:c3:6c:c6:c0:4f:72:c6:fa:
         71:20:31:17:89:b4:4f:c8:c5:7c:a5:46:b9:b8:8f:f5:0a:93:
         bd:3a:15:0a:a2:b3:41:35:c3:4d:f5:ec:a7:6d:d0:a3:be:82:
         d0:a5:b9:0c:3e:f8:51:62:ae:dc:cc:34:89:fb:02:17:a1:a5:
         19:a5:7b:3c:64:95:41:ba:c4:9f:65:54:be:74:e1:29:3a:a6:
         16:c2:ed:78:76:60:7a:c5:43:6b:0b:a9:e7:57:81:13:5a:0a:
         ef:94:85:07:f6:df:87:6b:16:77:b6:ef:82:17:fc:00:40:c8:
         43:38:a7:c8:22:54:22:7f:c2:ce:6d:1f:e5:3a:3c:70:18:75:
         ef:45:b7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:08 2025 by rpki-client