Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30eda228-7236-3666-806e-f710ee82789f.roa
File:                     30eda228-7236-3666-806e-f710ee82789f.roa (raw, json)
Hash identifier:          YzeuSA/zKQunJCXyCUSY+4wNXSBQ9z4HqqEUganhG/k=
Subject key identifier:   06:9F:F2:9E:8B:EA:4A:35:CB:FE:FF:70:D6:F5:CB:2E:04:BF:9F:1C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A841248428E40197469DC6C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30eda228-7236-3666-806e-f710ee82789f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.29.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:48:42:8e:40:19:74:69:dc:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e1272b75-a212-424f-a197-f186fba473b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dd:bc:a2:86:25:52:7d:94:1e:71:ad:f1:ea:
                    42:95:5c:6a:57:c8:00:bc:ef:8a:53:02:14:e5:e3:
                    6a:1e:07:4c:13:bf:a3:e4:ff:27:fc:51:58:41:5c:
                    8f:66:16:aa:b6:9e:eb:df:1c:c2:3e:39:7a:87:b2:
                    71:de:fd:79:76:d9:c2:4b:67:12:12:97:e8:f9:4e:
                    8d:f2:a0:ae:b2:e7:ef:1f:07:14:61:44:22:15:7a:
                    ad:9a:d0:dc:22:77:84:42:e4:a3:9e:ad:a6:76:02:
                    22:0e:8d:51:0b:e2:e5:08:bc:b3:a5:a9:62:24:3e:
                    47:e2:a2:45:9c:a1:e3:7e:f5:fd:59:e6:32:27:27:
                    8a:bd:9e:6c:00:ed:f4:fc:e3:c4:1a:6d:75:ef:db:
                    1c:ee:3e:3c:0b:1f:ec:57:0e:a2:5c:8e:07:6f:91:
                    45:eb:52:a7:13:78:d8:a0:dd:a4:6c:96:b2:a7:a6:
                    48:d6:35:72:f5:b0:92:83:6f:0b:3a:02:37:4d:20:
                    dd:bf:e9:74:72:81:36:de:44:24:94:fa:e0:6a:fb:
                    1b:2d:68:48:38:c6:d6:22:e4:a1:09:70:4d:8b:7c:
                    e5:76:09:e2:54:59:22:99:05:80:a8:0c:96:04:b7:
                    26:81:0a:7d:2f:f5:89:3e:e7:b0:e0:4a:09:c7:dc:
                    52:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9F:F2:9E:8B:EA:4A:35:CB:FE:FF:70:D6:F5:CB:2E:04:BF:9F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30eda228-7236-3666-806e-f710ee82789f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7f:1e:ed:29:19:21:e7:96:05:3e:c0:c0:52:72:87:da:ae:
         e3:b1:74:cc:20:77:50:78:83:f5:08:df:17:e5:1b:ba:77:77:
         34:9b:dd:2a:58:85:45:5e:74:9a:da:93:eb:9e:2d:15:14:a4:
         3a:05:42:71:62:da:40:6f:79:5f:ab:e9:68:8f:7a:17:db:70:
         d8:1b:19:20:ba:67:4e:1f:74:a8:4e:4f:97:f9:ab:dd:ed:eb:
         e1:79:b9:99:65:a3:83:b9:a0:2c:14:0e:78:20:44:ba:7a:82:
         41:f1:95:86:cb:c1:04:8d:f8:b4:58:7a:b5:6b:87:2b:c7:ce:
         03:04:95:63:57:2b:b0:a5:b7:0f:b1:c3:24:bf:63:6c:66:3c:
         b8:f3:05:11:7d:c2:52:58:89:af:c4:62:d4:de:d5:d4:76:8d:
         cf:3b:5c:76:49:77:4a:08:97:68:0d:b5:fb:13:6e:ed:5b:db:
         06:8f:79:9f:85:b1:21:04:1f:81:3a:52:ec:eb:26:af:1b:19:
         e8:b9:1b:a7:4c:cb:81:b2:4f:e3:b5:73:46:42:ec:d5:34:3d:
         14:dd:27:12:a8:ba:88:fe:ac:73:e5:8c:00:7d:cb:b7:c6:4a:
         92:95:05:42:ae:67:f5:1d:90:be:c9:ca:92:28:4a:5d:80:5a:
         33:0d:f3:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkhCjkAZdGncbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZTEyNzJiNzUtYTIxMi00MjRmLWExOTctZjE4NmZiYTQ3M2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN28ooYlUn2UHnGt8epClVxqV8gAvO+KUwIU
5eNqHgdME7+j5P8n/FFYQVyPZhaqtp7r3xzCPjl6h7Jx3v15dtnCS2cSEpfo+U6N
8qCusufvHwcUYUQiFXqtmtDcIneEQuSjnq2mdgIiDo1RC+LlCLyzpaliJD5H4qJF
nKHjfvX9WeYyJyeKvZ5sAO30/OPEGm1179sc7j48Cx/sVw6iXI4Hb5FF61KnE3jY
oN2kbJayp6ZI1jVy9bCSg28LOgI3TSDdv+l0coE23kQklPrgavsbLWhIOMbWIuSh
CXBNi3zldgniVFkimQWAqAyWBLcmgQp9L/WJPuew4EoJx9xSGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAaf8p6L6ko1y/7/cNb1yy4Ev58cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzBlZGEyMjgtNzIzNi0z
NjY2LTgwNmUtZjcxMGVlODI3ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR2sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHx/Hu0pGSHnlgU+wMBScofaruOxdMwgd1B4g/UI3xflG7p3dzSb3SpY
hUVedJrak+ueLRUUpDoFQnFi2kBveV+r6WiPehfbcNgbGSC6Z04fdKhOT5f5q93t
6+F5uZllo4O5oCwUDnggRLp6gkHxlYbLwQSN+LRYerVrhyvHzgMElWNXK7Cltw+x
wyS/Y2xmPLjzBRF9wlJYia/EYtTe1dR2jc87XHZJd0oIl2gNtfsTbu1b2waPeZ+F
sSEEH4E6UuzrJq8bGei5G6dMy4GyT+O1c0ZC7NU0PRTdJxKouoj+rHPljAB9y7fG
SpKVBUKuZ/UdkL7JypIoSl2AWjMN86Q=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:13 2025 by rpki-client