Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04531ec8-10ef-3a67-9389-268cb99a57b3.roa
File:                     04531ec8-10ef-3a67-9389-268cb99a57b3.roa (raw, json)
Hash identifier:          0jzKmdpUdYs9nzkiHgJHLLs0BvKA7LnqzXkIVyFKX3c=
Subject key identifier:   0B:61:0D:2C:AD:64:91:54:F0:03:4F:49:72:EC:46:38:38:18:6C:4F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DB6A1510E75405B4B83D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04531ec8-10ef-3a67-9389-268cb99a57b3.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.30.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:6a:15:10:e7:54:05:b4:b8:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=e0d0117d-0514-4883-a255-e123ba5c31e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fa:2f:0e:5c:8f:cf:ff:09:ef:39:a9:43:49:
                    0a:2d:26:74:b1:24:f3:61:f1:67:c3:f1:98:e4:d9:
                    e3:4c:06:56:6a:62:99:bc:83:69:8a:ed:b5:9f:5d:
                    29:9c:7a:12:cc:b0:ba:53:34:bf:3d:ed:10:a9:b1:
                    28:bf:7c:df:a0:33:56:8a:c6:d9:28:ef:00:5b:c3:
                    a2:e2:5c:ea:b6:89:0b:c9:f9:e4:71:16:d3:01:bb:
                    65:37:ec:fa:38:27:28:80:77:36:13:a1:ec:fc:45:
                    5e:cf:98:c7:86:c1:af:00:bb:28:ce:1d:f7:9d:0f:
                    7c:be:60:8a:bf:76:d2:fb:35:3b:a7:55:b8:20:49:
                    1a:13:00:e5:ea:50:82:fe:7a:70:3f:bc:26:49:2d:
                    73:cb:b6:c4:f3:d2:07:ef:09:e7:45:ed:2a:6b:98:
                    22:43:22:4f:97:33:43:bb:11:8b:df:ea:fe:94:5f:
                    19:83:21:2f:a2:14:27:16:d2:06:08:d1:18:8d:a5:
                    d2:22:3a:09:df:a2:27:69:ab:89:70:0b:7a:db:94:
                    be:03:27:d8:68:96:d9:10:03:c9:c7:3e:96:59:1a:
                    eb:9b:18:1e:c3:9a:99:cf:de:d8:01:97:47:50:a5:
                    e6:dd:61:5c:c4:35:95:04:b7:7c:d7:86:bc:68:7c:
                    c2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:61:0D:2C:AD:64:91:54:F0:03:4F:49:72:EC:46:38:38:18:6C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04531ec8-10ef-3a67-9389-268cb99a57b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:6e:fe:d8:8e:fc:ff:91:ea:05:c6:9a:60:c0:c9:85:70:83:
         2d:09:49:90:44:70:5e:23:f4:f1:28:c5:db:3c:0a:a5:a4:94:
         f7:28:54:9a:20:57:3f:61:8b:09:af:59:3d:6e:71:ea:72:c9:
         c2:98:53:4b:57:94:99:8b:e2:ae:83:dd:bd:c8:8d:65:65:d9:
         6d:f2:e3:46:94:a3:6a:9a:54:0a:49:ac:f9:b9:39:99:49:54:
         fa:ba:8d:01:e1:a9:6c:6c:be:32:14:7c:ba:56:93:cf:52:bc:
         fd:49:11:e7:90:05:38:2f:1a:3c:41:d7:2f:fa:65:fd:12:94:
         8d:cb:9e:20:6c:81:80:dd:8c:e6:bb:f1:cb:9d:b6:3e:06:0b:
         8d:ec:f2:6b:62:ba:64:4f:2a:a1:e7:dc:3a:2b:66:f0:0b:57:
         a3:4e:6b:b1:4b:ef:e1:a8:68:6a:99:7e:1f:5a:aa:27:66:3d:
         1b:30:ca:c8:dd:c5:e1:03:28:23:25:ce:77:91:0c:2a:d7:a8:
         4d:bd:76:26:d2:83:23:d0:13:6d:ba:74:9e:59:fa:19:81:04:
         27:68:a1:08:d1:7f:75:7c:30:f6:4f:7a:6b:09:a2:ca:ce:bc:
         cc:26:54:a2:29:d4:6e:ed:6b:4c:1d:f4:e7:d7:14:e9:68:cb:
         c8:6a:61:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG22oVEOdUBbS4PQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
ZTBkMDExN2QtMDUxNC00ODgzLWEyNTUtZTEyM2JhNWMzMWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifovDlyPz/8J7zmpQ0kKLSZ0sSTzYfFnw/GY
5NnjTAZWamKZvINpiu21n10pnHoSzLC6UzS/Pe0QqbEov3zfoDNWisbZKO8AW8Oi
4lzqtokLyfnkcRbTAbtlN+z6OCcogHc2E6Hs/EVez5jHhsGvALsozh33nQ98vmCK
v3bS+zU7p1W4IEkaEwDl6lCC/npwP7wmSS1zy7bE89IH7wnnRe0qa5giQyJPlzND
uxGL3+r+lF8ZgyEvohQnFtIGCNEYjaXSIjoJ36InaauJcAt625S+AyfYaJbZEAPJ
xz6WWRrrmxgew5qZz97YAZdHUKXm3WFcxDWVBLd814a8aHzCLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAthDSytZJFU8ANPSXLsRjg4GGxPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDQ1MzFlYzgtMTBlZi0z
YTY3LTkzODktMjY4Y2I5OWE1N2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR7xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJu/tiO/P+R6gXGmmDAyYVwgy0JSZBEcF4j9PEoxds8CqWklPcoVJog
Vz9hiwmvWT1ucepyycKYU0tXlJmL4q6D3b3IjWVl2W3y40aUo2qaVApJrPm5OZlJ
VPq6jQHhqWxsvjIUfLpWk89SvP1JEeeQBTgvGjxB1y/6Zf0SlI3LniBsgYDdjOa7
8cudtj4GC43s8mtiumRPKqHn3DorZvALV6NOa7FL7+GoaGqZfh9aqidmPRswysjd
xeEDKCMlzneRDCrXqE29dibSgyPQE226dJ5Z+hmBBCdooQjRf3V8MPZPemsJosrO
vMwmVKIp1G7ta0wd9OfXFOloy8hqYVw=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:12:25 2025 by rpki-client