Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29f2a17c-513f-314f-bffe-5b39b0ff383e.roa
File:                     29f2a17c-513f-314f-bffe-5b39b0ff383e.roa (raw, json)
Hash identifier:          OzebXTNIFvlL3n/6lxSBW1buCr5qXgrBvvaWDDTVyik=
Subject key identifier:   DD:F6:F2:5C:E4:D5:0B:1B:37:D9:68:39:8F:1B:D5:A0:C4:E7:31:C1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84125476B3B14A76C4482F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29f2a17c-513f-314f-bffe-5b39b0ff383e.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.27.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:54:76:b3:b1:4a:76:c4:48:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=bf0acab0-b219-4b28-886b-287d69dec05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:db:a6:95:d7:b8:87:0d:16:f5:de:3d:59:
                    98:e8:ca:69:6b:ff:77:0e:36:11:05:b0:08:a4:f2:
                    71:99:d2:61:86:53:b4:41:7a:e4:de:1e:ff:2e:e8:
                    97:8e:ce:84:16:b8:43:d0:d0:91:5a:26:99:56:cc:
                    b6:fb:4f:71:22:87:e3:57:58:73:8c:c4:06:d8:8e:
                    e5:37:31:71:3a:70:b0:66:7a:5d:33:dc:39:2c:52:
                    09:c2:08:37:a3:ea:fb:93:71:47:0f:f3:da:a3:45:
                    15:44:00:f8:b2:bf:0a:2b:de:34:b8:30:c6:76:55:
                    30:ee:78:f2:69:9c:6c:85:35:ca:50:6e:95:51:81:
                    9b:16:8e:1d:55:a5:bf:bd:73:ab:be:75:3b:4f:22:
                    ff:65:cf:e7:bf:87:95:04:a0:04:ad:a9:d5:0a:2e:
                    19:fb:12:d2:a7:8f:de:4f:7b:6a:a4:53:46:09:14:
                    7d:0c:44:1f:e4:f8:6e:d7:44:f0:d9:8a:76:02:e5:
                    12:72:c8:d4:f4:8b:09:c4:ce:1d:fe:5c:a4:d0:d6:
                    25:a9:c2:4e:3c:3a:ba:ad:5c:c7:6c:69:5a:a0:e1:
                    9f:03:90:3e:b0:d6:64:8a:57:56:f5:40:59:e2:48:
                    7c:ce:d4:33:76:f0:cf:e3:d3:0b:fb:3f:bc:ce:8a:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F6:F2:5C:E4:D5:0B:1B:37:D9:68:39:8F:1B:D5:A0:C4:E7:31:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29f2a17c-513f-314f-bffe-5b39b0ff383e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:52:f0:9e:bf:7b:1d:89:0b:81:ee:9d:e0:50:86:b1:53:66:
         67:9f:0f:3f:db:6a:c0:22:80:11:33:ce:fb:3e:d6:43:3f:c0:
         83:c6:d3:d1:5a:25:ef:ca:50:5e:81:de:7e:88:de:8c:57:45:
         ef:5d:a1:ac:0e:05:0d:ba:93:e9:dc:68:9e:2d:33:92:bf:87:
         9d:90:92:eb:59:1b:49:4a:59:c4:16:b6:2b:28:11:2d:48:4c:
         b4:14:53:73:17:db:bd:68:67:23:3c:01:b0:a3:ce:92:29:91:
         f2:3b:c1:e6:f7:12:f7:82:14:2a:9f:63:36:6b:65:dd:83:3a:
         96:87:33:a3:2a:64:09:d2:57:f0:96:ea:bc:46:31:a1:66:83:
         e9:b7:81:f0:f3:2a:77:d4:49:48:1b:70:52:70:c5:0d:f1:37:
         47:73:03:a6:e1:36:46:e1:ea:c2:6d:f8:6f:cb:29:52:27:3e:
         66:d6:e8:cf:c1:e8:5c:8e:e1:1b:9c:6b:97:1d:25:ee:0b:c9:
         69:94:ae:be:f1:63:35:63:05:e1:34:33:d0:bd:5f:7f:d5:62:
         a4:30:03:a1:41:80:be:27:92:64:08:d6:e5:16:e2:0d:a8:c3:
         93:3e:ae:bd:ba:bc:9e:ce:50:14:bd:f1:fe:e6:62:4e:8f:a5:
         f6:55:a3:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElR2s7FKdsRIL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YmYwYWNhYjAtYjIxOS00YjI4LTg4NmItMjg3ZDY5ZGVjMDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLbbppXXuIcNFvXePVmY6Mppa/93DjYRBbAI
pPJxmdJhhlO0QXrk3h7/LuiXjs6EFrhD0NCRWiaZVsy2+09xIofjV1hzjMQG2I7l
NzFxOnCwZnpdM9w5LFIJwgg3o+r7k3FHD/Pao0UVRAD4sr8KK940uDDGdlUw7njy
aZxshTXKUG6VUYGbFo4dVaW/vXOrvnU7TyL/Zc/nv4eVBKAEranVCi4Z+xLSp4/e
T3tqpFNGCRR9DEQf5Phu10Tw2Yp2AuUScsjU9IsJxM4d/lyk0NYlqcJOPDq6rVzH
bGlaoOGfA5A+sNZkildW9UBZ4kh8ztQzdvDP49ML+z+8zoqMXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN328lzk1QsbN9loOY8b1aDE5zHBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjlmMmExN2MtNTEzZi0z
MTRmLWJmZmUtNWIzOWIwZmYzODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRuZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVS8J6/ex2JC4HuneBQhrFTZmefDz/basAigBEzzvs+1kM/wIPG09Fa
Je/KUF6B3n6I3oxXRe9doawOBQ26k+ncaJ4tM5K/h52QkutZG0lKWcQWtisoES1I
TLQUU3MX271oZyM8AbCjzpIpkfI7web3EveCFCqfYzZrZd2DOpaHM6MqZAnSV/CW
6rxGMaFmg+m3gfDzKnfUSUgbcFJwxQ3xN0dzA6bhNkbh6sJt+G/LKVInPmbW6M/B
6FyO4Ruca5cdJe4LyWmUrr7xYzVjBeE0M9C9X3/VYqQwA6FBgL4nkmQI1uUW4g2o
w5M+rr26vJ7OUBS98f7mYk6PpfZVowE=
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:10:15 2025 by rpki-client