Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0623dec-9013-3c88-bb8d-5a0830414483.roa
File:                     d0623dec-9013-3c88-bb8d-5a0830414483.roa (raw, json)
Hash identifier:          c3XiByZt+nK1MLAYZogc0DNYKZCrw0ILGy6+dBZ0qpQ=
Subject key identifier:   9A:F5:67:10:28:76:50:17:A1:F3:8E:84:89:97:06:A1:E0:41:BF:14
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DB6E3C18CDBB5EC6FDB1C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0623dec-9013-3c88-bb8d-5a0830414483.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.22.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:6e:3c:18:cd:bb:5e:c6:fd:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=d3ec98e4-67b0-44e5-a1d7-cd6065469d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:1f:f3:63:0f:c2:3d:79:92:c8:ef:dc:62:
                    e9:1e:9d:fa:26:06:28:71:c9:eb:c4:90:85:04:c9:
                    b9:27:85:fd:af:74:b4:e1:37:34:00:c9:3c:68:e2:
                    b2:e0:23:3e:e6:6e:e0:04:3a:30:f5:0d:b1:3d:91:
                    b8:be:0a:be:03:66:b0:eb:03:92:be:ed:3b:33:60:
                    8f:cb:75:87:59:54:ff:d0:93:4c:8e:df:0e:5a:1d:
                    8b:af:ea:20:ad:56:84:0e:8f:d6:c6:5e:b8:1e:b6:
                    6a:cc:fc:b3:eb:14:28:06:7e:16:1d:5e:5f:21:bb:
                    ac:cf:59:6d:25:31:2d:ab:d7:50:1a:b0:6e:1a:92:
                    68:55:c1:4d:00:5a:bf:23:28:2e:1a:8c:fa:df:11:
                    a0:b1:47:bb:21:97:bf:f0:fa:cc:89:cd:ef:0d:08:
                    6b:cf:8e:9a:b4:98:3d:70:a7:2b:a7:77:c4:31:db:
                    0a:97:ab:41:fd:ff:5f:a2:c6:34:9b:2a:47:85:d5:
                    f8:b3:54:70:78:79:0e:86:46:4d:6c:4e:3c:92:15:
                    bc:1d:77:91:35:f9:1a:44:87:63:27:b7:f8:90:ad:
                    31:8b:6a:91:ac:4c:58:04:12:c4:25:83:be:48:a5:
                    df:3a:21:37:5a:70:d4:c0:df:aa:df:a7:81:00:74:
                    e7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F5:67:10:28:76:50:17:A1:F3:8E:84:89:97:06:A1:E0:41:BF:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0623dec-9013-3c88-bb8d-5a0830414483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:36:a4:1b:f8:7f:68:32:a3:c4:fb:d4:cd:3f:87:86:29:05:
         8b:03:56:8e:ab:6f:ee:49:87:94:f8:b8:ea:91:57:9a:b7:f2:
         cd:14:5b:20:56:eb:7d:83:f4:79:d5:6c:7a:b3:0f:c6:bc:8f:
         d7:a7:d7:70:31:bd:d1:45:e0:7b:e4:68:a7:37:b6:4d:9e:f8:
         84:59:cb:cd:06:e7:d0:3f:5d:ef:9f:57:39:25:19:d9:cd:67:
         2b:f5:52:8f:c1:63:c6:f1:90:42:03:8d:b5:40:92:0f:26:a8:
         64:39:5d:03:df:91:21:31:c9:ce:be:56:ce:70:cb:32:51:c8:
         d5:f9:fd:af:fa:c5:6d:b9:89:37:d6:5b:82:77:9c:9c:50:38:
         55:03:b9:c0:00:b9:ac:a7:ae:f7:e4:98:b3:16:d1:67:9c:67:
         5d:0f:5a:84:78:9a:7b:31:96:d5:f2:57:23:a0:72:e3:36:a8:
         3a:39:f4:4c:1a:aa:9b:10:d2:b6:a4:dc:bb:42:cb:e1:6f:12:
         c7:67:7c:ec:a0:61:4c:50:35:0e:ec:56:04:90:13:0a:4a:30:
         c2:8d:ec:be:3d:36:70:a0:c2:27:b9:95:2b:72:84:b1:b9:b4:
         f8:87:28:3c:3e:c9:7e:f6:ba:b4:71:02:36:39:33:e0:70:9a:
         4b:ec:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:43:14 2025 by rpki-client