Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86904349-f07e-3073-9f05-8546aacd61f6.roa
File:                     86904349-f07e-3073-9f05-8546aacd61f6.roa (raw, json)
Hash identifier:          z1MjY4Pop6yYq0jKmEUL4lLqjfgvcSaSLKekCwoOD0M=
Subject key identifier:   7F:DE:6F:43:0F:FB:CD:51:4E:9F:64:FA:49:69:CF:15:F1:9D:A5:00
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584ACCA692318C820D841F9D91B0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86904349-f07e-3073-9f05-8546aacd61f6.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     30036
IP address blocks:        173.29.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:92:31:8c:82:0d:84:1f:9d:91:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=153242e6-138f-483d-9ad8-2d25103af1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f5:ba:38:8e:c5:52:1f:94:77:1f:f2:a8:03:
                    ba:af:8b:52:e6:d0:bd:27:b1:71:e3:64:ab:c2:d8:
                    46:06:4e:db:07:76:4c:5d:54:7d:fc:24:36:8c:0a:
                    8d:c9:01:ac:2b:e0:ba:6b:cc:b8:12:e4:52:bf:25:
                    24:4b:80:59:d3:de:c4:5f:a8:80:12:13:75:46:04:
                    ee:c1:10:ec:ac:b1:27:1c:8d:af:cc:09:70:51:16:
                    e1:3c:e0:f0:f3:bd:b6:3a:0e:33:5b:95:c1:54:21:
                    5c:91:85:b3:43:4f:fb:77:05:c9:c0:cb:e6:1d:28:
                    f2:56:c6:18:2a:2a:b5:df:0c:33:f2:9b:2a:8d:2e:
                    d1:b1:59:8b:88:28:08:dd:22:13:78:84:08:03:d0:
                    69:69:e2:90:20:46:74:f1:bc:8f:0a:47:64:22:4c:
                    0e:3a:b6:ac:88:f9:44:a3:5d:49:de:f2:c0:97:b9:
                    e4:91:f2:1f:cc:67:c5:ba:13:62:86:fa:5b:6d:01:
                    c3:c5:ae:49:fe:a0:2d:48:a8:a3:18:f0:64:64:44:
                    8c:91:eb:38:bd:37:af:72:46:cf:08:9e:97:33:cb:
                    be:22:a9:a0:14:a1:55:08:d1:e7:8e:24:5c:38:7d:
                    bd:76:1d:33:8a:f6:ef:63:0a:0a:b0:e9:60:bd:aa:
                    be:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DE:6F:43:0F:FB:CD:51:4E:9F:64:FA:49:69:CF:15:F1:9D:A5:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86904349-f07e-3073-9f05-8546aacd61f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:8f:eb:92:07:9e:c0:8b:56:9d:a0:2f:1b:5f:cb:18:b2:b1:
         8f:6b:fe:49:cc:bd:98:44:04:75:a1:f2:31:86:3f:ac:d9:4b:
         4d:56:d9:5d:9c:60:a2:13:46:58:2a:60:8f:f4:33:71:f3:58:
         0b:ae:be:43:0a:b2:96:a0:0b:83:1d:c1:09:f7:df:e8:20:78:
         a1:f1:d7:d0:73:4b:f5:cb:75:6e:e4:17:43:76:20:cd:28:51:
         dd:46:21:51:5c:c6:41:09:f4:4d:ea:de:4b:c0:a2:5f:37:9c:
         4a:00:de:e9:98:88:06:25:79:46:b1:30:19:a3:96:84:81:9a:
         e5:8b:80:dd:fb:b2:52:11:f3:2d:00:4a:51:04:63:e1:f0:54:
         e9:3b:40:ef:d7:95:38:27:13:d7:3f:11:65:31:b0:19:c8:ac:
         1b:29:9f:12:15:ed:22:f2:b9:59:c5:d4:35:d6:e5:a5:6b:f0:
         31:60:7a:34:b2:8f:87:b6:29:e4:96:01:8c:a9:93:c4:3d:ac:
         e3:23:79:36:b8:b2:f9:0a:b2:e1:bf:a4:6e:73:d3:f5:eb:ba:
         07:9b:f7:27:16:2a:0f:b3:94:3a:6b:80:3f:52:37:85:44:12:
         a9:9e:32:35:88:94:42:90:de:24:d0:e6:2e:ea:20:54:df:97:
         50:5d:e4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:46 2025 by rpki-client