Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d7952d29-caa4-3015-9677-c0e15c556386.roa
File:                     d7952d29-caa4-3015-9677-c0e15c556386.roa (raw, json)
Hash identifier:          O7sIY6XVoIjpwkhpbjQlQ7XI0jl7l+O4TrEnc15YXsc=
Subject key identifier:   51:79:53:84:2D:27:A8:42:F6:E9:EE:9D:A3:F6:F7:2C:C1:BC:7B:B6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81466809B7757450E5178100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d7952d29-caa4-3015-9677-c0e15c556386.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.31.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:68:09:b7:75:74:50:e5:17:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=9facf897-fe9d-4697-93e9-dcbfaac120c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:5f:83:50:d0:65:5e:b6:85:21:20:4d:df:
                    de:f5:3e:be:86:fe:03:55:28:15:2c:a7:ef:09:5d:
                    07:fe:d5:a2:11:8c:c8:54:6d:31:a6:c8:0c:8b:c5:
                    0b:6e:f8:0a:a5:8e:1c:bf:fa:ca:e7:9e:f4:8b:e5:
                    5f:94:e5:08:06:3b:53:6d:a2:3e:73:4d:0b:43:f9:
                    8c:e8:01:8e:8c:f7:51:b3:56:d7:8d:0c:09:03:29:
                    bd:6b:22:0e:5f:ce:c2:a1:9e:c4:ec:1d:3e:8a:22:
                    56:56:e5:46:a4:11:00:14:e6:dc:e9:e0:c5:d1:7c:
                    a2:dc:1f:05:13:a4:2e:b8:a5:ce:1d:ea:53:58:df:
                    6b:37:23:4e:c2:f8:47:e0:dc:29:20:62:5a:03:7b:
                    5d:14:4c:89:22:d3:d1:34:b2:f3:86:23:7b:07:b3:
                    e7:23:04:24:0d:d3:21:f4:f9:1d:07:62:a9:3d:a8:
                    2b:90:27:1f:13:4b:89:49:32:42:41:03:ec:1d:f7:
                    26:a2:2b:82:09:4d:76:02:10:3d:7d:37:d6:df:90:
                    db:fc:a4:bd:41:65:9a:2d:14:4a:47:4d:2f:d8:8f:
                    d3:81:38:db:23:8a:9c:d5:d3:1c:2a:56:db:ce:09:
                    a9:e7:32:37:f6:a4:31:3a:8e:1b:3c:75:20:e2:cd:
                    b2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:79:53:84:2D:27:A8:42:F6:E9:EE:9D:A3:F6:F7:2C:C1:BC:7B:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d7952d29-caa4-3015-9677-c0e15c556386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:cf:51:93:69:ff:eb:71:ed:d5:42:34:64:c5:b9:0e:a8:
         8c:d0:c7:6f:13:43:6c:f4:f2:20:fe:c3:11:1f:18:9f:34:3b:
         d9:25:8c:6f:27:03:02:42:aa:51:5b:e8:d0:28:b2:36:6c:c0:
         6f:99:80:3a:f6:cc:3f:e1:c1:63:b9:0b:5d:6f:83:4a:1b:ec:
         f1:7f:60:b7:a9:78:09:2e:b1:6b:01:6f:70:38:9e:ce:f6:4a:
         54:7d:62:60:15:9f:a3:b7:c1:f4:63:f0:6b:f7:f9:88:a4:57:
         b1:29:63:c1:a3:27:34:7d:5a:9f:83:8e:0a:57:a6:8a:66:c4:
         ba:a9:d1:3f:5c:fe:97:12:64:1e:bd:76:c5:7c:83:73:15:0c:
         57:14:e4:af:6b:70:ed:f0:5e:9d:41:38:03:72:20:7b:35:67:
         11:5a:1d:b8:11:1e:98:ea:23:a5:d6:a2:71:3c:40:ae:7a:e9:
         f4:f6:08:30:c8:c3:83:c0:a9:06:6c:6f:72:8e:fc:46:af:e2:
         b0:29:be:0c:f9:96:bf:00:fd:2c:5e:6a:33:45:05:8d:9f:e9:
         d8:81:03:e6:aa:76:03:09:bc:d3:3d:3e:92:76:a8:bf:e8:83:
         ae:38:40:8a:d5:4e:44:7b:22:aa:d1:4e:2f:f3:e1:37:b1:53:
         ea:c2:59:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:46:47 2025 by rpki-client