Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b76184b-fdfb-37c3-8bed-b6f805075280.roa
File:                     4b76184b-fdfb-37c3-8bed-b6f805075280.roa (raw, json)
Hash identifier:          KNdS+w694+QPmM3NmnmO5dAakFszPsrHdSg099zoPJI=
Subject key identifier:   7A:58:E3:E2:E1:46:F8:75:45:55:A9:59:B2:1B:D4:68:F5:E7:AE:54
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81464937FB84E36E8DFFD980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b76184b-fdfb-37c3-8bed-b6f805075280.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.20.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:49:37:fb:84:e3:6e:8d:ff:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=4623a953-24c3-4648-80ab-c7b6b9fe3d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f3:d3:55:f3:f9:f0:8a:36:70:95:43:3f:01:
                    2a:58:8d:e6:98:d3:3e:4e:69:58:68:22:73:95:62:
                    32:cd:81:f1:81:22:c2:95:b5:70:31:93:fb:d6:5e:
                    da:13:2d:80:de:e6:98:f1:72:51:4e:f4:bc:26:5c:
                    a9:61:0b:f4:4c:0f:41:b6:d7:d4:b5:c1:7b:4e:7d:
                    21:ca:33:57:3f:11:8f:a0:a9:55:53:d1:f9:26:6f:
                    d8:aa:63:af:1b:14:8d:67:b2:5a:f7:c0:cc:62:8e:
                    a3:81:1d:68:34:f1:29:b1:3b:07:21:b8:66:e7:0a:
                    26:f2:5e:16:f0:fc:af:29:ed:a8:67:25:bd:50:22:
                    5a:13:32:da:96:9f:5d:0f:af:ee:6b:8e:d5:c2:dc:
                    22:12:26:75:10:4a:69:42:f0:0e:31:d4:c7:29:08:
                    d7:dc:ac:8e:37:7a:36:af:9d:b1:d5:b4:97:76:12:
                    36:e0:fd:72:ac:2d:e1:a6:ea:7b:9a:f3:e3:69:ed:
                    ed:b9:c0:f2:57:5e:80:47:f1:e7:7c:26:70:98:a8:
                    18:a4:cd:05:14:67:28:bd:c9:e4:6d:4d:f3:f3:5a:
                    5a:a4:da:da:ae:f5:b2:e4:97:9b:5d:81:55:09:59:
                    74:e5:dc:d5:ac:4b:b6:3a:95:b2:63:80:f5:c5:9f:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:58:E3:E2:E1:46:F8:75:45:55:A9:59:B2:1B:D4:68:F5:E7:AE:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b76184b-fdfb-37c3-8bed-b6f805075280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:11:bf:96:15:19:d0:ac:15:62:82:aa:45:02:2c:5f:aa:9f:
         25:83:61:55:df:5a:4a:22:0e:9d:12:b5:91:63:40:b3:46:a0:
         da:b0:a8:6d:bb:f6:ea:00:b4:9d:a9:3d:7c:66:ad:ac:ec:3a:
         5c:27:4b:c8:5d:48:33:ad:45:9a:b6:05:22:07:e2:16:a5:d5:
         7d:49:ec:6b:ef:73:5a:89:08:93:7b:cb:38:50:ec:d0:c6:93:
         83:7d:6b:ad:74:b0:1a:c9:bd:d7:68:22:5d:c5:cb:ce:cc:01:
         a0:f5:36:80:05:4e:d3:26:e3:a3:c8:58:6a:80:52:08:d5:9e:
         37:c6:86:51:3a:e7:28:05:43:05:74:9d:39:36:63:fd:18:9f:
         ac:49:70:44:70:f1:af:1f:fa:5b:83:3a:48:d2:51:75:06:70:
         9e:46:4b:ac:bb:9e:e3:49:5a:bf:3d:25:d8:9b:59:5f:77:aa:
         d9:fa:b3:45:48:89:d1:43:cf:4c:43:a8:58:b5:ff:1a:49:de:
         1c:54:dc:3d:27:20:57:84:14:ee:a6:17:77:59:c5:c1:1f:5c:
         fc:db:44:a2:0b:38:15:69:80:98:6c:58:a6:fb:c2:20:25:35:
         45:c1:9f:01:0c:eb:3d:60:af:fe:a3:f2:b4:41:13:51:8e:76:
         fc:0b:ac:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRkk3+4Tjbo3/2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
NDYyM2E5NTMtMjRjMy00NjQ4LTgwYWItYzdiNmI5ZmUzZDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfPTVfP58Io2cJVDPwEqWI3mmNM+TmlYaCJz
lWIyzYHxgSLClbVwMZP71l7aEy2A3uaY8XJRTvS8JlypYQv0TA9BttfUtcF7Tn0h
yjNXPxGPoKlVU9H5Jm/YqmOvGxSNZ7Ja98DMYo6jgR1oNPEpsTsHIbhm5wom8l4W
8PyvKe2oZyW9UCJaEzLalp9dD6/ua47VwtwiEiZ1EEppQvAOMdTHKQjX3KyON3o2
r52x1bSXdhI24P1yrC3hpup7mvPjae3tucDyV16AR/HnfCZwmKgYpM0FFGcovcnk
bU3z81papNrarvWy5JebXYFVCVl05dzVrEu2OpWyY4D1xZ8yfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHpY4+LhRvh1RVWpWbIb1Gj1565UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGI3NjE4NGItZmRmYi0z
N2MzLThiZWQtYjZmODA1MDc1MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQ2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMRv5YVGdCsFWKCqkUCLF+qnyWDYVXfWkoiDp0StZFjQLNGoNqwqG27
9uoAtJ2pPXxmrazsOlwnS8hdSDOtRZq2BSIH4hal1X1J7Gvvc1qJCJN7yzhQ7NDG
k4N9a610sBrJvddoIl3Fy87MAaD1NoAFTtMm46PIWGqAUgjVnjfGhlE65ygFQwV0
nTk2Y/0Yn6xJcERw8a8f+luDOkjSUXUGcJ5GS6y7nuNJWr89JdibWV93qtn6s0VI
idFDz0xDqFi1/xpJ3hxU3D0nIFeEFO6mF3dZxcEfXPzbRKILOBVpgJhsWKb7wiAl
NUXBnwEM6z1gr/6j8rRBE1GOdvwLrHo=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:26 2025 by rpki-client