Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4307e788-aff7-34c6-b3ab-058fbd98151d.roa
File:                     4307e788-aff7-34c6-b3ab-058fbd98151d.roa (raw, json)
Hash identifier:          1LInnlmX6bVmayV/cZKgxt7O7hkE2EXp9kR6EA/VfKc=
Subject key identifier:   E4:B5:59:B0:8F:22:B4:94:E9:87:D4:20:B0:6D:65:FB:0A:F0:E0:DC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A18953D9F855F6B2030CA9880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4307e788-aff7-34c6-b3ab-058fbd98151d.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     30036
IP address blocks:        173.19.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:3d:9f:85:5f:6b:20:30:ca:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=3f963c23-8fd5-49cb-9136-79cfceada34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:4e:f8:f8:26:25:2f:67:a0:17:1c:0e:da:
                    5d:95:96:93:88:a2:ad:17:26:19:89:40:4d:05:fc:
                    85:fa:1a:3f:b4:69:84:09:4d:6f:81:84:c4:54:53:
                    df:b0:d3:be:3c:43:51:e5:2b:54:35:59:09:31:84:
                    1b:fc:6a:b7:25:2e:f6:34:5c:d6:82:2d:bf:2f:be:
                    aa:da:c6:f4:99:00:31:fa:9b:d5:7c:e0:99:06:8e:
                    18:ba:c3:a8:fe:93:93:f6:65:51:a9:2d:34:da:71:
                    b9:df:35:33:97:b0:aa:32:4a:d2:a4:b7:31:9a:59:
                    5a:19:1e:19:a0:65:68:4e:4e:ac:64:48:1f:be:39:
                    b6:ad:d6:5d:c0:08:88:db:cb:02:f6:d3:56:64:9d:
                    55:13:43:36:af:9a:3e:9f:19:9c:f0:e5:36:79:b1:
                    53:8d:c9:f1:ef:21:3d:87:eb:b3:2b:34:6b:86:1e:
                    c3:81:86:65:15:3a:6a:37:79:4d:d7:6b:11:a2:ab:
                    b8:42:6e:de:db:be:92:64:d9:04:4b:73:4f:03:fd:
                    c9:3a:09:e2:87:eb:6d:73:ba:80:74:90:df:6e:4c:
                    bc:f0:06:b8:46:eb:19:ce:d3:07:c1:98:45:cd:07:
                    73:da:6a:1a:f9:02:35:62:50:ca:9d:26:a4:06:a9:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B5:59:B0:8F:22:B4:94:E9:87:D4:20:B0:6D:65:FB:0A:F0:E0:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4307e788-aff7-34c6-b3ab-058fbd98151d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:16:98:a7:cb:ea:e3:9a:54:4f:9e:73:ae:62:f2:83:6e:80:
         c9:5b:c5:93:e8:bd:fb:f3:26:3a:66:8d:29:5c:8d:3a:0c:b9:
         c0:bb:a9:13:3b:85:53:c2:6d:db:0f:37:82:b9:0c:6b:1e:03:
         04:30:34:62:cd:90:4e:53:f1:aa:aa:6f:80:4d:6a:01:30:c1:
         1f:3e:08:f0:e1:db:e5:5e:30:50:09:37:5b:08:3a:2d:3d:1a:
         95:7b:eb:ea:5b:8b:1d:c2:9c:95:00:ab:12:6f:e9:f6:bb:ec:
         02:54:d8:04:03:9a:4f:fe:bf:f6:cf:ac:cb:ce:e4:2a:16:43:
         df:65:af:f4:0e:2b:27:45:56:04:4a:f0:c6:cf:df:94:e9:2f:
         ac:73:da:28:e0:42:c8:96:77:e5:10:d6:13:2a:12:32:57:5f:
         5d:92:b5:84:dc:0b:8d:88:32:38:6d:fd:81:d2:3a:a3:4c:b8:
         6c:70:2e:5e:35:72:8f:a9:26:09:03:05:89:f7:d6:7c:1b:c5:
         ef:2a:60:b5:2a:8a:85:1f:fe:ca:11:c4:98:33:42:97:63:cb:
         41:76:e2:b7:ab:e3:f5:2d:2b:1f:39:26:2f:3d:72:08:16:95:
         ed:7a:9c:ff:5d:ab:56:c2:2b:31:54:80:56:b6:ed:21:d7:38:
         c7:22:66:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlT2fhV9rIDDKmIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
M2Y5NjNjMjMtOGZkNS00OWNiLTkxMzYtNzljZmNlYWRhMzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTRO+PgmJS9noBccDtpdlZaTiKKtFyYZiUBN
BfyF+ho/tGmECU1vgYTEVFPfsNO+PENR5StUNVkJMYQb/Gq3JS72NFzWgi2/L76q
2sb0mQAx+pvVfOCZBo4YusOo/pOT9mVRqS002nG53zUzl7CqMkrSpLcxmllaGR4Z
oGVoTk6sZEgfvjm2rdZdwAiI28sC9tNWZJ1VE0M2r5o+nxmc8OU2ebFTjcnx7yE9
h+uzKzRrhh7DgYZlFTpqN3lN12sRoqu4Qm7e276SZNkES3NPA/3JOgnih+ttc7qA
dJDfbky88Aa4RusZztMHwZhFzQdz2moa+QI1YlDKnSakBqkPkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOS1WbCPIrSU6YfUILBtZfsK8ODcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDMwN2U3ODgtYWZmNy0z
NGM2LWIzYWItMDU4ZmJkOTgxNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRMoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAWmKfL6uOaVE+ec65i8oNugMlbxZPovfvzJjpmjSlcjToMucC7qRM7
hVPCbdsPN4K5DGseAwQwNGLNkE5T8aqqb4BNagEwwR8+CPDh2+VeMFAJN1sIOi09
GpV76+pbix3CnJUAqxJv6fa77AJU2AQDmk/+v/bPrMvO5CoWQ99lr/QOKydFVgRK
8MbP35TpL6xz2ijgQsiWd+UQ1hMqEjJXX12StYTcC42IMjht/YHSOqNMuGxwLl41
co+pJgkDBYn31nwbxe8qYLUqioUf/soRxJgzQpdjy0F24rer4/UtKx85Ji89cggW
le16nP9dq1bCKzFUgFa27SHXOMciZr0=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:52 2025 by rpki-client