Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/096a7e45-abfa-31e1-92c0-6fe213cb45f5.roa
File:                     096a7e45-abfa-31e1-92c0-6fe213cb45f5.roa (raw, json)
Hash identifier:          DhYfMsoR0HHZ1SJh0wig1DOuDJ9F3gD6zMuN3oGrKTQ=
Subject key identifier:   B2:01:B8:F0:0F:97:A7:28:AA:BC:9A:26:AE:D8:E9:89:92:46:33:F7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DC054D0AAE629B721F6E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/096a7e45-abfa-31e1-92c0-6fe213cb45f5.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.19.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:dc:05:4d:0a:ae:62:9b:72:1f:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=1062f2d7-06bf-4c63-ae45-b1b4f92ad4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:6c:f0:f3:c2:8f:15:07:d4:49:ee:3d:d6:
                    26:4d:d0:46:d0:d5:6a:07:b8:98:2f:4b:ee:7a:05:
                    a1:5d:22:19:46:55:da:8b:17:e4:c8:0a:98:58:b6:
                    d5:35:b1:b1:d6:91:91:b0:1d:45:d7:36:99:d9:09:
                    fc:f0:5c:fd:a3:eb:08:95:f5:d6:d2:b2:e7:37:96:
                    04:86:09:d8:ea:1b:43:b0:f0:69:9b:b0:e0:32:a7:
                    32:ba:d8:51:84:d2:fe:d3:08:e2:5c:d3:a8:1a:4e:
                    c1:e2:51:b6:9b:ac:1e:35:3b:2f:3f:92:a4:6d:08:
                    16:e7:5f:18:91:9a:54:a4:4c:aa:e7:eb:e7:94:1e:
                    2d:2e:cd:62:c7:23:b5:92:8d:11:d7:70:40:fb:70:
                    63:d4:da:d0:a7:82:c7:9d:e0:3b:49:46:d6:21:ae:
                    ab:c8:26:c8:7b:c7:e6:ef:22:c7:f8:e3:78:95:10:
                    a3:79:26:ac:b2:4b:33:b1:af:cb:e8:2b:d1:9b:6d:
                    a4:85:ef:2d:49:5e:c4:e6:5d:8a:48:01:0a:23:a2:
                    a1:45:24:fc:11:bc:37:95:0e:5b:38:79:4e:75:43:
                    3e:f1:4a:3d:e4:18:52:9c:a4:5e:d5:8f:15:3b:80:
                    5a:cd:8d:cb:15:0a:a4:56:7b:0a:60:2b:12:6d:70:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:01:B8:F0:0F:97:A7:28:AA:BC:9A:26:AE:D8:E9:89:92:46:33:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/096a7e45-abfa-31e1-92c0-6fe213cb45f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:64:be:43:79:59:18:cd:c3:99:e6:6e:84:14:eb:7d:c4:59:
         7a:20:d1:10:6f:31:7d:c7:94:de:b3:09:0d:ab:b7:e8:ed:f0:
         34:c9:41:6c:f6:62:f2:ab:5d:34:48:17:64:bb:88:dc:f1:bb:
         dd:88:1c:f1:53:3c:00:02:0a:f8:97:eb:58:ba:fb:9a:30:12:
         5d:ef:c5:a8:27:bb:5a:8b:38:0b:f2:03:30:32:33:9e:7a:64:
         16:52:2b:16:e5:3b:9d:97:06:7d:ac:8f:ba:25:e9:32:ac:04:
         dc:22:e1:11:d9:19:9e:a5:69:1c:0e:51:cc:02:fb:06:2d:76:
         57:5b:f3:bc:fc:76:dd:a4:34:84:9f:5d:53:80:dc:fe:1b:76:
         04:be:18:80:2a:dd:1a:5c:db:6f:11:57:53:44:ea:74:98:5b:
         c6:12:74:32:e3:16:64:90:10:70:60:34:f0:09:71:6e:21:58:
         69:d9:84:f0:af:b1:f0:8e:0b:8e:1e:55:c8:81:3a:89:d8:c0:
         77:12:a7:ec:85:36:9f:ee:b4:2b:db:c8:a6:22:38:e8:10:6f:
         57:b2:2b:e1:e2:d7:d5:b9:c2:99:2c:a5:2d:be:af:a9:ed:a0:
         4e:b8:d7:c5:3b:08:b5:03:aa:7c:5e:51:ea:2e:34:af:a5:4a:
         52:a7:0e:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG3AVNCq5im3IfbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
MTA2MmYyZDctMDZiZi00YzYzLWFlNDUtYjFiNGY5MmFkNGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOds8PPCjxUH1EnuPdYmTdBG0NVqB7iYL0vu
egWhXSIZRlXaixfkyAqYWLbVNbGx1pGRsB1F1zaZ2Qn88Fz9o+sIlfXW0rLnN5YE
hgnY6htDsPBpm7DgMqcyuthRhNL+0wjiXNOoGk7B4lG2m6weNTsvP5KkbQgW518Y
kZpUpEyq5+vnlB4tLs1ixyO1ko0R13BA+3Bj1NrQp4LHneA7SUbWIa6ryCbIe8fm
7yLH+ON4lRCjeSasskszsa/L6CvRm22khe8tSV7E5l2KSAEKI6KhRST8Ebw3lQ5b
OHlOdUM+8Uo95BhSnKRe1Y8VO4BazY3LFQqkVnsKYCsSbXBM6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLIBuPAPl6coqryaJq7Y6YmSRjP3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDk2YTdlNDUtYWJmYS0z
MWUxLTkyYzAtNmZlMjEzY2I0NWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRMIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRkvkN5WRjNw5nmboQU633EWXog0RBvMX3HlN6zCQ2rt+jt8DTJQWz2
YvKrXTRIF2S7iNzxu92IHPFTPAACCviX61i6+5owEl3vxagnu1qLOAvyAzAyM556
ZBZSKxblO52XBn2sj7ol6TKsBNwi4RHZGZ6laRwOUcwC+wYtdldb87z8dt2kNISf
XVOA3P4bdgS+GIAq3Rpc228RV1NE6nSYW8YSdDLjFmSQEHBgNPAJcW4hWGnZhPCv
sfCOC44eVciBOonYwHcSp+yFNp/utCvbyKYiOOgQb1eyK+Hi19W5wpkspS2+r6nt
oE6418U7CLUDqnxeUeouNK+lSlKnDr0=
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:36 2025 by rpki-client