Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1710914b-c25c-3692-ad92-7cc11587e8ef.roa
File:                     1710914b-c25c-3692-ad92-7cc11587e8ef.roa (raw, json)
Hash identifier:          d/lMfxgo7uS46y6j+Pgb2JB+EVIFdbTZ7Yfw7A90t1s=
Subject key identifier:   90:DC:F2:86:80:EC:3A:AD:BB:47:16:62:0E:B9:B3:ED:E1:10:77:C0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A56004AEC5616CAC111D290C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1710914b-c25c-3692-ad92-7cc11587e8ef.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     19905
IP address blocks:        173.24.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:4a:ec:56:16:ca:c1:11:d2:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=03ab1797-ffa7-4da2-87a6-d7c3f8bdeddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:93:ed:ec:e3:2b:c2:38:f6:b5:54:6f:99:
                    e8:a1:01:a2:ef:18:45:02:06:ab:ef:f2:dd:38:f8:
                    74:0e:15:15:98:50:9c:80:21:95:1f:60:b2:f3:07:
                    b2:e2:4e:ae:ef:c5:f9:f9:b6:91:15:c6:06:af:5d:
                    5e:4e:94:87:20:38:6a:25:19:f2:ea:96:98:8a:da:
                    85:ee:c1:be:32:cd:86:1c:e4:c8:a7:90:ed:d0:fd:
                    15:5b:76:ec:bb:e8:c2:eb:ab:01:2f:d2:11:38:3e:
                    3a:e7:4c:81:a0:1d:e4:c9:6c:6e:c3:b6:8a:d6:e6:
                    27:5c:b6:de:38:88:ba:12:dc:c6:b5:4f:4a:bb:62:
                    d1:5d:c0:d9:d7:b8:a2:9b:d5:60:8e:2c:f6:0f:29:
                    dc:3a:2e:4d:49:93:55:d4:83:00:97:b2:31:ff:37:
                    f5:44:df:5a:e8:0b:fd:e7:da:ca:0f:1e:47:f3:3b:
                    6c:21:80:e8:0f:89:8f:92:bd:bc:fd:b7:84:76:b5:
                    5b:05:21:18:3b:bf:74:58:e0:95:e3:e0:d0:ba:f9:
                    84:5f:79:a6:8d:50:9a:e5:df:d9:80:30:6f:16:46:
                    e5:fc:94:f9:10:a8:28:04:02:2f:2f:1d:e0:6f:42:
                    1c:a4:94:7f:e2:dd:05:b4:23:2c:4d:da:42:bb:f7:
                    c8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DC:F2:86:80:EC:3A:AD:BB:47:16:62:0E:B9:B3:ED:E1:10:77:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1710914b-c25c-3692-ad92-7cc11587e8ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:4d:2a:f4:52:e1:05:15:67:21:da:68:3b:c9:fe:4c:0a:b0:
         a7:a7:a2:fa:e3:7f:a9:f4:04:b5:ee:3a:c3:04:f2:07:9a:16:
         df:58:67:50:5f:00:1f:8a:32:3c:b8:ad:f4:00:1b:1e:41:47:
         20:5e:cc:7b:65:76:af:56:29:22:b4:68:95:24:54:dd:15:ec:
         74:b9:46:62:4b:ea:c1:dd:0c:93:45:31:80:3c:7e:d4:61:da:
         ce:d9:f1:1a:fb:51:e0:a2:f6:99:78:07:62:43:58:b1:ed:93:
         0c:3f:a2:20:b0:27:37:c6:ab:5b:3c:2d:41:d4:c8:80:09:b1:
         fe:1a:47:ab:7d:c2:a6:33:7d:01:c4:6e:a9:6f:b4:af:bb:6e:
         4b:e8:a5:ad:6a:6b:11:2e:57:a7:b0:6e:8b:18:bd:4d:c2:cb:
         95:54:6b:32:fc:5a:a9:98:7c:5b:cd:41:57:97:8a:a4:44:62:
         87:4d:9c:2e:05:91:4e:1e:7d:48:58:2c:89:36:10:8c:36:be:
         7a:dc:37:fe:f1:ce:3d:f5:5d:11:b6:a1:b0:3f:2d:7f:29:a7:
         0a:02:5b:43:f6:8b:cb:07:34:3b:99:30:ec:8a:23:f3:1c:39:
         71:d7:d8:5f:43:66:d9:40:88:75:8a:40:a4:58:b2:56:45:c2:
         ca:7a:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:24:09 2025 by rpki-client