Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/112c1701-846b-3a55-ae39-1b407fae75a1.roa
File:                     112c1701-846b-3a55-ae39-1b407fae75a1.roa (raw, json)
Hash identifier:          sxbSdr29Cc5xQX4iu0bPyn9/Uzja85rUiyb3PdAlkfY=
Subject key identifier:   74:5C:4E:1B:FB:55:3D:28:55:55:E6:84:C4:7E:23:43:84:67:0D:39
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059C65FCF80412C901721F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/112c1701-846b-3a55-ae39-1b407fae75a1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.24.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:65:fc:f8:04:12:c9:01:72:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=65425fdc-7df7-4dcc-944a-e28d1c17763e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:ed:65:2e:c0:70:70:07:56:55:5b:b3:6e:
                    76:17:32:c7:21:f6:b7:e8:ff:cd:f2:0b:31:37:ae:
                    84:e7:22:96:32:07:51:38:90:b0:ef:f1:2d:6b:f9:
                    39:0e:da:34:db:9c:2f:a0:ad:d7:78:df:53:e4:56:
                    3f:06:64:4c:d3:99:fa:d8:22:2e:cc:f9:16:a4:69:
                    1c:25:45:59:4f:db:c3:7a:da:38:21:47:e1:69:5b:
                    b1:92:d6:fb:95:ea:ba:2b:1b:b2:89:03:8e:7c:ed:
                    89:1f:c9:97:ca:ef:c7:eb:e1:97:b4:d8:c9:ee:a2:
                    f8:b5:d1:3d:b6:bb:d8:cc:fd:45:d2:12:dc:50:60:
                    fb:6f:61:46:62:aa:9c:24:21:70:dd:7d:af:fc:fb:
                    0f:88:18:db:64:77:45:bb:c8:20:0e:2a:2a:84:e4:
                    20:29:d6:44:ad:33:2e:50:d3:44:85:79:7d:d7:11:
                    e1:0d:48:fb:6b:5e:5a:1f:f4:dd:ba:72:02:d7:6a:
                    19:04:2b:a9:b3:17:15:20:b2:09:2f:a9:c4:f2:42:
                    77:91:e1:db:f0:cf:32:92:50:a5:88:3c:a7:01:16:
                    57:4f:52:50:28:f9:72:f0:bb:80:4b:fa:e9:1b:87:
                    9a:81:ff:8b:ae:34:1c:62:a3:75:f8:e2:e9:ab:61:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5C:4E:1B:FB:55:3D:28:55:55:E6:84:C4:7E:23:43:84:67:0D:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/112c1701-846b-3a55-ae39-1b407fae75a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:44:a9:da:ad:03:d5:79:a4:ee:c1:12:1e:28:8f:f6:40:d7:
         4f:49:84:3a:f3:ea:07:a4:3a:cb:40:c1:02:cb:fa:66:52:96:
         09:93:dd:6d:53:51:a4:8e:73:af:cf:8e:a3:a8:fc:04:f3:27:
         52:8b:db:15:f2:e6:1a:87:7a:f9:e3:ae:d2:9c:3b:a2:42:76:
         26:0d:b0:17:e5:36:66:dd:cf:92:02:85:d6:f9:b5:69:78:6e:
         f2:78:89:71:03:c8:c1:e9:05:44:70:ec:62:4b:c9:31:f7:01:
         da:e2:79:f6:9b:90:8d:e4:ad:b8:47:bc:1c:01:5a:ae:70:2f:
         04:e4:4c:83:08:8b:1f:de:34:4a:6d:22:03:eb:29:0f:5f:03:
         f5:91:be:08:c3:33:27:e6:10:16:1b:2f:a5:2a:fe:fe:64:0a:
         8a:1e:d9:c5:42:3c:8a:05:62:b3:7d:cb:e8:4d:f5:7e:0d:9e:
         5b:b3:53:5b:d1:e8:cb:32:e3:9c:0f:ab:18:3f:7e:a8:ca:58:
         93:7f:69:e8:da:b2:fd:ca:ef:8b:c0:7b:90:db:b7:3c:d7:be:
         26:f9:56:5b:0f:54:c1:18:de:43:6c:b4:ed:99:7d:04:32:40:
         d9:41:9e:47:8d:f2:26:0b:f0:8b:ec:e2:a7:eb:78:a0:86:11:
         cd:cb:6f:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnGX8+AQSyQFyHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
NjU0MjVmZGMtN2RmNy00ZGNjLTk0NGEtZTI4ZDFjMTc3NjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6DtZS7AcHAHVlVbs252FzLHIfa36P/N8gsx
N66E5yKWMgdROJCw7/Eta/k5Dto025wvoK3XeN9T5FY/BmRM05n62CIuzPkWpGkc
JUVZT9vDeto4IUfhaVuxktb7leq6KxuyiQOOfO2JH8mXyu/H6+GXtNjJ7qL4tdE9
trvYzP1F0hLcUGD7b2FGYqqcJCFw3X2v/PsPiBjbZHdFu8ggDioqhOQgKdZErTMu
UNNEhXl91xHhDUj7a15aH/TdunIC12oZBCupsxcVILIJL6nE8kJ3keHb8M8yklCl
iDynARZXT1JQKPly8LuAS/rpG4eagf+LrjQcYqN1+OLpq2HSuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRcThv7VT0oVVXmhMR+I0OEZw05MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTEyYzE3MDEtODQ2Yi0z
YTU1LWFlMzktMWI0MDdmYWU3NWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRiBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAClEqdqtA9V5pO7BEh4oj/ZA109JhDrz6gekOstAwQLL+mZSlgmT3W1T
UaSOc6/PjqOo/ATzJ1KL2xXy5hqHevnjrtKcO6JCdiYNsBflNmbdz5IChdb5tWl4
bvJ4iXEDyMHpBURw7GJLyTH3AdriefabkI3krbhHvBwBWq5wLwTkTIMIix/eNEpt
IgPrKQ9fA/WRvgjDMyfmEBYbL6Uq/v5kCooe2cVCPIoFYrN9y+hN9X4NnluzU1vR
6Msy45wPqxg/fqjKWJN/aejasv3K74vAe5DbtzzXvib5VlsPVMEY3kNstO2ZfQQy
QNlBnkeN8iYL8Ivs4qfreKCGEc3Lb2U=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:37:57 2026 by rpki-client