Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e5fac33-83f1-3fd6-84ec-9244c59acbae.roa
File:                     3e5fac33-83f1-3fd6-84ec-9244c59acbae.roa (raw, json)
Hash identifier:          pKdgP7mF7hyjYfxaKrdbE4m1PgAzNhHmxUTyk15hJtk=
Subject key identifier:   B2:4A:99:18:EB:15:A9:92:E9:18:CA:4B:F7:D4:24:5A:AD:D6:14:50
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81464C40CBFD0825D47F9780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e5fac33-83f1-3fd6-84ec-9244c59acbae.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.24.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:4c:40:cb:fd:08:25:d4:7f:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=6df35cdb-d288-4866-84f2-12422dc1160f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:99:c6:84:ea:4e:5e:9f:42:97:e8:74:ad:
                    82:c0:99:77:5e:db:c8:37:b5:4c:e5:86:37:e1:c3:
                    55:da:5a:c4:11:84:bd:0d:5a:4a:1c:d8:e5:ea:cc:
                    f1:a5:57:68:78:37:cb:4b:ea:6d:e9:6e:19:37:51:
                    e0:91:4c:81:47:db:28:17:30:b1:bf:85:11:57:c5:
                    35:e3:8f:05:a7:70:8b:ed:5b:48:91:a6:01:a0:95:
                    e0:e0:f2:e6:4e:f6:36:8e:90:24:a5:5b:0f:27:27:
                    1e:69:54:7c:61:64:4f:d6:97:26:5a:58:ca:d6:47:
                    a3:fe:1a:df:7d:0a:68:d0:a2:4f:ac:c4:48:31:55:
                    19:7d:a4:5e:d9:f9:6b:4f:78:dd:c7:d3:90:70:6a:
                    11:8a:da:3e:36:f6:35:ea:22:da:2c:b7:4f:74:92:
                    cf:d1:ee:07:d3:77:82:3f:1b:cf:f2:64:97:3d:ae:
                    83:89:a8:13:da:62:67:cc:67:6d:29:b9:d3:57:37:
                    ea:8f:84:33:17:cc:19:37:f8:c9:c6:dc:2e:38:fe:
                    10:26:3a:c0:f3:3d:e9:23:92:e4:86:d0:de:2b:ea:
                    12:10:5b:49:17:4b:b3:ce:95:9a:06:eb:fd:7f:4a:
                    ef:4f:33:4b:69:7a:93:32:4f:49:f0:d3:48:cf:78:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4A:99:18:EB:15:A9:92:E9:18:CA:4B:F7:D4:24:5A:AD:D6:14:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e5fac33-83f1-3fd6-84ec-9244c59acbae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:ad:d3:31:85:10:9f:4c:9e:c1:46:f3:26:e8:47:98:04:59:
         44:cb:eb:a3:b5:d5:87:44:20:bf:cb:7c:7e:04:65:b8:ff:da:
         f0:07:c3:65:25:a2:dc:39:11:ab:52:3a:8b:b8:12:8a:21:85:
         fc:72:87:d4:b2:07:2b:05:9e:e8:69:bd:a1:13:4d:58:49:ff:
         63:b6:53:39:66:bd:1e:85:d3:6c:3a:16:d3:af:5f:52:cb:f8:
         1d:1e:5e:26:7a:bd:56:b1:99:78:cb:e3:e0:4d:77:26:eb:db:
         c9:c2:81:51:f5:5b:08:1e:4d:37:e2:bc:39:ec:29:c3:b7:f2:
         43:fe:3c:e3:a9:76:3a:5f:e4:22:56:ec:a4:6b:85:1e:11:9e:
         7e:62:ee:10:ca:85:7a:b8:59:e2:eb:c0:2b:45:47:9f:33:36:
         9f:20:b2:20:fa:a6:ea:b2:14:f9:a1:17:0a:59:00:8d:dd:84:
         a4:51:46:af:fb:b7:73:f5:54:e8:c9:e3:29:21:52:4b:70:b7:
         57:3e:12:8d:84:ea:61:63:03:34:05:24:45:08:eb:4c:41:46:
         50:6d:39:d2:30:f7:bf:20:78:9a:b1:6b:5f:98:4c:49:e4:e4:
         09:73:69:cf:33:7d:fc:cc:d8:3e:5f:9e:bd:2e:a3:58:b6:2b:
         8c:e2:b4:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRkxAy/0IJdR/l4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
NmRmMzVjZGItZDI4OC00ODY2LTg0ZjItMTI0MjJkYzExNjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCWZxoTqTl6fQpfodK2CwJl3XtvIN7VM5YY3
4cNV2lrEEYS9DVpKHNjl6szxpVdoeDfLS+pt6W4ZN1HgkUyBR9soFzCxv4URV8U1
448Fp3CL7VtIkaYBoJXg4PLmTvY2jpAkpVsPJyceaVR8YWRP1pcmWljK1kej/hrf
fQpo0KJPrMRIMVUZfaRe2flrT3jdx9OQcGoRito+NvY16iLaLLdPdJLP0e4H03eC
PxvP8mSXPa6DiagT2mJnzGdtKbnTVzfqj4QzF8wZN/jJxtwuOP4QJjrA8z3pI5Lk
htDeK+oSEFtJF0uzzpWaBuv9f0rvTzNLaXqTMk9J8NNIz3iCTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJKmRjrFamS6RjKS/fUJFqt1hRQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2U1ZmFjMzMtODNmMS0z
ZmQ2LTg0ZWMtOTI0NGM1OWFjYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+t0zGFEJ9MnsFG8yboR5gEWUTL66O11YdEIL/LfH4EZbj/2vAHw2Ul
otw5EatSOou4Eoohhfxyh9SyBysFnuhpvaETTVhJ/2O2UzlmvR6F02w6FtOvX1LL
+B0eXiZ6vVaxmXjL4+BNdybr28nCgVH1WwgeTTfivDnsKcO38kP+POOpdjpf5CJW
7KRrhR4Rnn5i7hDKhXq4WeLrwCtFR58zNp8gsiD6puqyFPmhFwpZAI3dhKRRRq/7
t3P1VOjJ4ykhUktwt1c+Eo2E6mFjAzQFJEUI60xBRlBtOdIw978geJqxa1+YTEnk
5Alzac8zffzM2D5fnr0uo1i2K4zitM0=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:50:01 2025 by rpki-client