Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afec6122-08f7-3246-b5eb-0f189a84e3a7.roa
File:                     afec6122-08f7-3246-b5eb-0f189a84e3a7.roa (raw, json)
Hash identifier:          O0w/0mNEx9n65R+wbnJ/6vmFrZNxVe5YytDTK48rjZ8=
Subject key identifier:   1D:5F:84:6F:F7:5C:75:3A:34:68:68:81:49:02:D1:04:4B:C4:BF:09
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A2EEABAAFF3BEDBB31E408700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afec6122-08f7-3246-b5eb-0f189a84e3a7.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        173.17.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:ba:af:f3:be:db:b3:1e:40:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=536ac364-6da9-412d-b7db-e45f6713de4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:24:72:3e:10:d3:3b:5e:e3:3b:fe:df:3a:
                    04:a9:b3:a6:5c:25:a2:4c:62:27:79:55:66:3d:a9:
                    41:3d:66:e2:56:33:ff:4e:de:6d:c1:3b:9a:16:a7:
                    25:79:c0:99:f6:c1:8b:2b:1b:dd:39:72:40:49:1f:
                    23:1f:b9:8d:1a:75:b6:f0:dd:57:3b:b4:06:c9:b6:
                    47:c5:9a:bd:dd:f8:68:0c:91:93:5a:64:5f:60:f8:
                    0e:fb:78:3f:e6:db:23:73:00:1b:03:92:e1:82:c4:
                    20:a7:48:0f:7d:5c:71:fb:09:d8:ca:c4:d2:7b:c3:
                    38:da:33:7f:83:f2:27:b1:ab:b2:33:ac:7b:a0:89:
                    32:a7:27:9b:e8:16:46:35:dd:25:e1:c8:f4:73:3e:
                    49:af:bb:43:1b:b6:7a:77:d1:fc:37:f5:18:5c:bc:
                    fb:2b:d1:08:04:a9:c8:4b:bc:fd:c8:fc:b7:6c:40:
                    f0:67:c4:74:61:31:c0:49:01:58:f5:8e:2c:00:55:
                    c2:39:20:bd:1e:4b:c5:e1:3a:74:7c:95:95:40:59:
                    fb:dc:be:f6:a0:1e:0d:fc:d7:91:65:19:5e:ef:ed:
                    1e:23:13:7a:c9:bd:ff:58:7e:e0:dd:90:21:f5:05:
                    f5:83:b9:b7:8f:80:32:14:8d:1b:8c:68:71:be:37:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5F:84:6F:F7:5C:75:3A:34:68:68:81:49:02:D1:04:4B:C4:BF:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afec6122-08f7-3246-b5eb-0f189a84e3a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:77:b4:bf:1a:8b:e2:c5:8a:b2:97:1f:ba:c6:4c:0a:30:78:
         ac:7b:76:d8:34:6d:1f:31:42:ce:7c:ef:d9:5a:77:03:c9:35:
         48:24:f0:66:3e:0b:f3:ae:4a:3d:f4:e0:d0:58:bb:23:f1:ab:
         67:1d:e1:04:4e:32:15:01:b4:09:1c:62:46:c3:63:3d:bf:24:
         04:f7:36:f0:8f:b3:8b:79:3c:40:c4:67:56:65:5b:45:92:35:
         89:7e:6e:33:26:27:82:6f:bc:42:79:00:0c:9d:88:ba:67:6a:
         38:6c:fd:8b:92:e6:72:0a:ee:2b:b8:89:48:55:7e:a4:99:5a:
         9b:8c:68:f8:69:65:f3:4a:83:b1:3d:fb:5f:2d:ee:03:74:cd:
         93:17:3f:0d:8a:6c:93:74:5a:31:c7:87:73:11:83:5f:e4:ed:
         62:16:78:6f:76:61:3d:66:3f:e1:55:62:8d:a7:cf:37:3e:1f:
         ec:a3:2c:12:08:99:de:f5:22:5e:5a:bd:87:ad:fe:10:fe:20:
         f8:c2:94:27:6f:ad:5e:37:92:e7:e2:a0:d7:31:a7:bc:33:ac:
         bf:4e:c1:95:ae:ab:a6:b8:91:c3:89:a7:2d:fe:f4:6e:15:c1:
         eb:e2:14:f0:bd:3a:f0:a0:98:6c:14:a6:f8:8c:bb:a0:42:f9:
         68:ca:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:32:03 2025 by rpki-client