Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ef047c8-a88e-3686-a62b-79f6c48536e9.roa
File:                     4ef047c8-a88e-3686-a62b-79f6c48536e9.roa (raw, json)
Hash identifier:          IybOw0982gMWawu0KOZQvFDvgNVxnnRzeze1WIEFFp4=
Subject key identifier:   AE:4D:39:3F:50:CD:07:09:DD:00:B4:A8:2D:D6:86:33:BC:28:38:55
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B45FB6E07359EBC18DE00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ef047c8-a88e-3686-a62b-79f6c48536e9.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.23.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:45:fb:6e:07:35:9e:bc:18:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=91fb2cc0-875e-44ae-9474-96fb62fe6a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:23:09:22:e6:ef:dd:b4:bd:ae:ed:85:d7:ad:
                    d4:db:45:ae:26:ab:c4:7c:a9:eb:10:6a:f2:de:56:
                    63:60:9f:49:0c:d7:87:df:f3:bd:23:fa:92:42:93:
                    11:a3:28:2b:74:94:40:d3:83:71:1d:54:5b:94:d2:
                    a9:c2:e0:5d:bd:88:b1:fb:36:cd:82:76:50:21:6b:
                    8c:b3:bb:43:34:32:14:50:f0:32:fa:83:e4:da:e3:
                    90:72:5c:2b:ae:b3:7d:c1:03:44:ad:be:3b:19:fb:
                    5d:8a:67:23:94:78:ac:ac:2b:a4:a6:17:02:a2:10:
                    01:a1:9d:40:db:fc:f0:b6:44:4d:74:a8:54:b7:0f:
                    51:84:c1:ed:db:8c:1f:08:5f:1a:2a:50:0b:ec:79:
                    a0:28:62:bd:ef:ea:a6:de:f1:52:a2:24:d7:df:38:
                    e1:f4:6e:d4:6c:dc:eb:07:9a:a3:35:b7:61:79:e5:
                    46:e7:e4:2c:0a:e2:f0:90:40:df:33:ad:fb:58:f9:
                    b8:6b:4f:0f:1d:5f:bd:fc:26:93:d0:f4:ba:16:7c:
                    81:75:12:15:68:3d:a9:7f:84:30:6e:fd:8d:30:c0:
                    c5:1e:66:29:28:f9:e6:a8:55:6a:7e:52:15:d4:98:
                    25:e4:13:bf:97:07:a0:c0:9b:7a:6b:87:3b:ad:4a:
                    b8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4D:39:3F:50:CD:07:09:DD:00:B4:A8:2D:D6:86:33:BC:28:38:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ef047c8-a88e-3686-a62b-79f6c48536e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9c:e3:be:ef:c6:7a:5c:68:86:04:10:df:bb:c1:a9:26:70:
         17:77:df:0e:15:dd:6a:c9:70:b0:98:bb:3d:d5:45:35:19:e1:
         80:da:9a:87:c2:94:2a:b9:29:35:73:dc:35:77:28:30:8b:8f:
         78:08:7d:7e:68:81:f2:75:5d:36:ea:88:31:dc:ff:66:cb:8a:
         75:d1:17:18:5a:b5:c1:60:54:7e:0a:64:3a:bb:25:ad:65:71:
         79:2b:8f:8a:e2:13:05:10:d5:ed:fd:4e:16:f0:21:a2:eb:95:
         fd:dc:c7:36:f4:c4:61:3b:64:e0:b9:78:2f:8a:9b:76:c9:45:
         0c:77:3d:72:62:61:75:55:81:08:d7:34:fd:19:c4:a8:c9:3a:
         53:f8:d3:17:e9:72:1e:b0:7b:f1:9f:0f:b7:b2:26:9b:48:b9:
         03:5c:01:12:1d:47:3f:7b:a0:44:ae:d3:26:21:ab:ae:18:4b:
         3a:aa:02:87:0a:56:51:8e:11:b5:12:60:7e:77:cd:2b:45:78:
         17:df:a5:19:2a:39:47:36:11:ab:62:20:03:75:3b:8e:6a:62:
         15:a7:8b:cf:4c:9c:88:c4:f8:69:b0:85:4d:18:a5:2a:ff:6c:
         ca:a0:97:94:7b:0a:a1:6f:b0:67:77:6d:28:d8:e9:c6:7e:5a:
         94:82:5d:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm0X7bgc1nrwY3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
OTFmYjJjYzAtODc1ZS00NGFlLTk0NzQtOTZmYjYyZmU2YTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyMJIubv3bS9ru2F163U20WuJqvEfKnrEGry
3lZjYJ9JDNeH3/O9I/qSQpMRoygrdJRA04NxHVRblNKpwuBdvYix+zbNgnZQIWuM
s7tDNDIUUPAy+oPk2uOQclwrrrN9wQNErb47GftdimcjlHisrCukphcCohABoZ1A
2/zwtkRNdKhUtw9RhMHt24wfCF8aKlAL7HmgKGK97+qm3vFSoiTX3zjh9G7UbNzr
B5qjNbdheeVG5+QsCuLwkEDfM637WPm4a08PHV+9/CaT0PS6FnyBdRIVaD2pf4Qw
bv2NMMDFHmYpKPnmqFVqflIV1Jgl5BO/lwegwJt6a4c7rUq4gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK5NOT9QzQcJ3QC0qC3WhjO8KDhVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGVmMDQ3YzgtYTg4ZS0z
Njg2LWE2MmItNzlmNmM0ODUzNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHic477vxnpcaIYEEN+7wakmcBd33w4V3WrJcLCYuz3VRTUZ4YDamofC
lCq5KTVz3DV3KDCLj3gIfX5ogfJ1XTbqiDHc/2bLinXRFxhatcFgVH4KZDq7Ja1l
cXkrj4riEwUQ1e39ThbwIaLrlf3cxzb0xGE7ZOC5eC+Km3bJRQx3PXJiYXVVgQjX
NP0ZxKjJOlP40xfpch6we/GfD7eyJptIuQNcARIdRz97oESu0yYhq64YSzqqAocK
VlGOEbUSYH53zStFeBffpRkqOUc2EatiIAN1O45qYhWni89MnIjE+GmwhU0YpSr/
bMqgl5R7CqFvsGd3bSjY6cZ+WpSCXQ8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:11:09 2026 by rpki-client