Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a77a3a4-187f-3516-b157-98be2c04b6f9.roa
File:                     3a77a3a4-187f-3516-b157-98be2c04b6f9.roa (raw, json)
Hash identifier:          obT9vsSEYzv1yELGPzsxKwaG7AgXVPvtt+s1PsAUBOQ=
Subject key identifier:   FA:5E:B5:FA:5B:2E:FD:B5:01:7D:50:6E:6E:D8:ED:7F:AD:2D:94:A2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410DAFD5BDEE34E20E94B44
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a77a3a4-187f-3516-b157-98be2c04b6f9.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.31.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:da:fd:5b:de:e3:4e:20:e9:4b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=da54c7ed-6ed0-46d6-8aaf-e89b00391cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f2:e3:1b:34:05:b7:dd:4b:cf:f4:97:f3:1c:
                    67:47:ce:29:5a:31:92:61:75:51:27:60:a1:4f:77:
                    b3:dd:26:52:6c:f1:06:ba:09:f8:95:18:e4:ca:5f:
                    86:e2:23:28:13:25:37:4a:68:31:8a:38:73:fa:43:
                    8f:fc:ef:a3:c3:67:fc:b0:62:1d:53:b5:4e:13:46:
                    cb:c4:30:47:0d:04:8b:7e:e6:0c:cd:2b:83:1d:e1:
                    23:8d:bf:42:2e:0b:40:27:b9:11:09:f7:7f:82:95:
                    7c:96:f2:f9:6e:0b:1f:a8:0b:40:97:eb:da:71:b7:
                    8b:03:b5:18:43:5e:80:fa:92:1c:cc:06:c1:0d:69:
                    22:b0:eb:ab:11:37:2d:6e:56:0a:d0:78:4c:1e:af:
                    23:fe:b9:06:78:69:3f:4a:7d:5e:00:73:e8:13:ed:
                    f0:50:c8:47:c3:06:b5:7a:7b:7c:00:f6:00:a0:ce:
                    52:0d:db:67:be:4b:6d:06:20:0a:0e:7f:80:10:35:
                    0c:04:ad:8b:50:18:f0:09:68:ea:26:fe:06:ba:a4:
                    9c:da:ab:2c:82:9a:c1:38:82:1b:38:fa:ea:69:ac:
                    ef:3e:3b:f9:20:fb:53:5e:d5:20:e4:3d:a8:18:78:
                    0e:8d:9f:68:16:3a:18:26:70:a6:35:b2:ce:7d:f3:
                    fa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5E:B5:FA:5B:2E:FD:B5:01:7D:50:6E:6E:D8:ED:7F:AD:2D:94:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a77a3a4-187f-3516-b157-98be2c04b6f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:13:1e:f3:92:11:fa:60:27:40:27:bb:a4:47:8b:cb:71:31:
         7a:5d:0b:57:8e:b0:93:2f:ab:f1:17:3e:5e:32:62:3f:01:1d:
         4b:88:bc:bd:b5:47:96:76:63:2c:e4:7c:b9:92:15:21:c3:80:
         4c:29:7e:34:63:f5:4c:6c:e8:92:b5:e3:8f:c6:79:d9:f6:06:
         c3:02:c1:7f:35:1c:00:df:56:92:6c:a0:40:00:bd:f7:d1:ad:
         2b:dc:5d:fe:87:aa:da:60:b7:79:55:7e:e3:ba:84:d7:a7:b6:
         43:1a:6a:e4:84:b0:31:48:de:1a:01:f3:c2:9b:b8:3d:d0:25:
         9a:a6:cf:02:7f:f5:32:be:86:f8:91:03:ee:b2:ba:64:0f:a1:
         19:22:e7:ff:64:8c:9a:da:ae:4c:e7:76:70:ae:57:67:6c:6f:
         22:7d:fb:1d:69:09:e3:54:2b:c3:33:af:46:02:27:21:81:a9:
         e1:d2:02:83:6e:df:69:a9:b7:6e:97:77:d6:8a:23:af:59:e0:
         fb:96:a2:1b:8e:bb:ce:f8:c6:95:5d:66:e8:69:33:45:6f:f8:
         42:1d:51:a1:af:e0:f3:ba:46:f1:8d:03:c8:89:53:05:35:17:
         58:55:66:a3:c5:69:d0:45:dd:20:61:ff:b5:4b:aa:75:46:5f:
         38:cd:3c:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEENr9W97jTiDpS0QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZGE1NGM3ZWQtNmVkMC00NmQ2LThhYWYtZTg5YjAwMzkxY2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfLjGzQFt91Lz/SX8xxnR84pWjGSYXVRJ2Ch
T3ez3SZSbPEGugn4lRjkyl+G4iMoEyU3Smgxijhz+kOP/O+jw2f8sGIdU7VOE0bL
xDBHDQSLfuYMzSuDHeEjjb9CLgtAJ7kRCfd/gpV8lvL5bgsfqAtAl+vacbeLA7UY
Q16A+pIczAbBDWkisOurETctblYK0HhMHq8j/rkGeGk/Sn1eAHPoE+3wUMhHwwa1
ent8APYAoM5SDdtnvkttBiAKDn+AEDUMBK2LUBjwCWjqJv4GuqSc2qssgprBOIIb
OPrqaazvPjv5IPtTXtUg5D2oGHgOjZ9oFjoYJnCmNbLOffP6ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPpetfpbLv21AX1Qbm7Y7X+tLZSiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2E3N2EzYTQtMTg3Zi0z
NTE2LWIxNTctOThiZTJjMDRiNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsTHvOSEfpgJ0Anu6RHi8txMXpdC1eOsJMvq/EXPl4yYj8BHUuIvL21
R5Z2YyzkfLmSFSHDgEwpfjRj9Uxs6JK144/Gedn2BsMCwX81HADfVpJsoEAAvffR
rSvcXf6Hqtpgt3lVfuO6hNentkMaauSEsDFI3hoB88KbuD3QJZqmzwJ/9TK+hviR
A+6yumQPoRki5/9kjJrarkzndnCuV2dsbyJ9+x1pCeNUK8Mzr0YCJyGBqeHSAoNu
32mpt26Xd9aKI69Z4PuWohuOu874xpVdZuhpM0Vv+EIdUaGv4PO6RvGNA8iJUwU1
F1hVZqPFadBF3SBh/7VLqnVGXzjNPI8=
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:10:54 2025 by rpki-client