Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfada9d9-01a0-38ca-8d0e-3c4e2459dc26.roa
File:                     cfada9d9-01a0-38ca-8d0e-3c4e2459dc26.roa (raw, json)
Hash identifier:          UVmyBhw+8BttUy00FH3zurmU9kGlwSHuciG+CGC+GBQ=
Subject key identifier:   5B:F5:E7:FA:4B:52:51:7B:CC:98:41:99:89:36:89:91:F5:FD:E4:93
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A56004B3587CD1C6202F50C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfada9d9-01a0-38ca-8d0e-3c4e2459dc26.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     19905
IP address blocks:        173.25.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:4b:35:87:cd:1c:62:02:f5:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=ad55d032-3ed7-40c2-8ff0-a7dfe6425e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:85:7e:3b:42:94:5b:af:ea:e8:8c:10:86:
                    41:25:c1:b7:35:42:79:84:02:08:97:65:cf:fe:28:
                    a3:be:6f:3f:90:7a:6d:84:0b:35:ac:51:68:ea:21:
                    6a:6b:64:5d:da:29:22:79:d1:39:33:6c:d8:f7:b0:
                    a2:5e:f2:05:68:f4:99:3b:88:a1:e0:10:0b:05:e1:
                    84:c5:07:6f:76:04:2f:b3:09:67:b0:58:0b:9f:99:
                    31:68:d2:16:64:53:28:88:ef:1d:30:74:e2:08:69:
                    45:94:ea:60:a4:c6:7a:28:0e:9b:b5:67:db:2e:fe:
                    f1:d6:a4:30:bd:15:78:19:a4:00:45:e2:8a:aa:a1:
                    f9:0f:8f:3a:dc:2f:ed:af:4e:d8:fc:e0:39:da:ef:
                    9f:b6:4a:8a:38:84:7c:0b:28:e7:64:ab:b1:b8:f3:
                    a6:35:03:c4:06:84:3c:06:5e:67:ce:5b:ca:73:9d:
                    b3:b1:a9:bc:e1:5f:9b:72:b2:49:a3:ce:4b:8f:d0:
                    86:3a:e7:5c:4d:f9:1b:48:26:f6:b8:dc:f7:6a:07:
                    b9:6d:91:25:19:60:74:c8:1c:da:38:99:17:86:81:
                    22:cb:f6:96:32:4a:93:4a:c4:20:7c:6a:63:3e:23:
                    94:ef:a5:84:e2:7e:f3:c4:56:2d:e5:d9:04:af:5a:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F5:E7:FA:4B:52:51:7B:CC:98:41:99:89:36:89:91:F5:FD:E4:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfada9d9-01a0-38ca-8d0e-3c4e2459dc26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:0f:72:f0:cb:f8:da:73:a9:f5:8e:76:ee:14:2a:2d:3f:
         62:0e:05:f7:51:22:38:28:a0:6b:49:30:c7:f3:ea:ef:9e:e2:
         35:98:7c:34:97:8f:49:fa:0a:7f:45:ee:10:d4:26:8a:db:85:
         5c:03:c7:fc:91:66:3b:ff:5f:7b:75:21:3c:a9:3c:ef:61:1f:
         37:7e:24:6f:e5:e2:e1:52:ed:37:e0:48:9f:ee:45:c9:17:af:
         58:b3:4e:86:89:38:df:35:28:b3:a5:06:34:c1:13:d8:d1:94:
         5b:3f:dc:49:81:d6:bc:30:47:97:ba:fa:2b:9c:0c:55:4b:6b:
         9c:77:80:62:d2:e8:30:55:4b:98:cd:8a:be:48:41:4f:66:92:
         71:97:b3:25:ea:d3:f1:c6:ad:9e:4c:40:dd:80:66:1a:09:ee:
         d7:e7:04:24:90:5e:cc:3d:d7:28:c6:1f:1c:f1:c8:8b:22:55:
         9f:b9:92:51:a2:4b:0d:fb:3d:a3:14:e1:5e:c0:a1:0b:cb:66:
         3d:a4:a0:ac:e3:dc:6f:80:56:00:5e:4d:1d:4a:67:21:2e:6b:
         0a:94:4d:eb:ad:28:de:48:56:ea:e1:bc:7a:0a:4d:4a:f5:ef:
         6e:b4:1d:a5:cc:32:52:98:e0:f9:05:a2:d2:0a:49:4f:91:eb:
         2c:e2:84:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:25:50 2025 by rpki-client