Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5c538d34-cd76-3416-a331-41a290082f08.roa
File:                     5c538d34-cd76-3416-a331-41a290082f08.roa (raw, json)
Hash identifier:          y/A+P/EUOlF7lWZN6g6pQhRxNtIe3Vi6tykN/x0Fjww=
Subject key identifier:   C7:E3:3F:2A:EE:C7:C7:C2:FB:E1:35:46:CA:F9:30:2D:66:9B:F8:EA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A857603D25264DE46DCBE6E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5c538d34-cd76-3416-a331-41a290082f08.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        173.20.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:76:03:d2:52:64:de:46:dc:be:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=e505c0dc-3675-4bf8-a6a7-d8c7e868bf59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:86:80:4a:c0:20:c2:51:c8:05:0e:b0:e9:10:
                    ae:8a:59:d1:42:f6:18:4c:39:2c:db:f9:14:b7:bc:
                    2e:3c:a5:64:d4:b9:fd:f0:5a:5f:9b:ab:29:52:48:
                    a3:f5:2e:b2:1a:7e:ba:6f:12:53:ee:fe:dd:19:44:
                    42:01:ed:64:c6:e5:79:ba:12:94:2c:07:8a:1c:50:
                    39:8d:6d:4b:12:7c:e3:83:3f:14:b2:79:7e:3f:5d:
                    e5:8a:70:93:65:1f:9c:1d:37:d3:51:c7:87:a3:ca:
                    bb:46:ef:38:54:52:69:8b:90:b6:62:73:e9:75:7a:
                    e6:00:bd:c0:09:44:38:f1:9b:77:93:4d:70:50:ae:
                    66:41:79:0b:e2:da:43:18:17:16:06:6e:c1:b6:dd:
                    5d:2f:04:5d:e0:d9:7e:e0:ed:81:f1:40:bf:3d:69:
                    3a:fa:39:47:11:00:bc:f6:a0:83:26:4e:92:76:f3:
                    97:63:86:54:0c:63:bc:04:29:9f:c7:1f:95:0e:cc:
                    d8:c7:ad:70:d1:24:bc:29:0a:e9:1a:7d:87:8e:80:
                    99:a4:5f:a4:54:b3:a2:02:95:45:41:31:ff:c1:76:
                    7b:1f:24:6f:bb:f9:8a:92:4a:5e:8b:a6:7c:8f:33:
                    3a:b1:46:1b:2c:a0:5b:fb:17:94:54:0e:d9:31:e9:
                    20:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E3:3F:2A:EE:C7:C7:C2:FB:E1:35:46:CA:F9:30:2D:66:9B:F8:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5c538d34-cd76-3416-a331-41a290082f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:44:09:e8:a3:83:18:9c:a9:50:2f:80:dc:93:27:b2:48:b7:
         9a:af:4e:07:03:d0:3d:ec:52:6d:b8:16:5b:bb:94:2e:18:b7:
         62:18:35:0c:65:1b:43:c3:2a:fa:7d:d7:bd:f3:4a:b5:01:87:
         57:35:74:be:c1:4f:f3:9e:70:40:9a:be:3c:38:2b:03:88:cd:
         81:36:bc:ca:ae:9c:14:fc:d6:8d:bf:1d:c2:42:c7:88:45:c8:
         c3:1f:ce:f9:9c:c6:8e:35:46:b6:d3:8a:51:c5:24:b6:19:e9:
         54:07:78:c4:16:42:6a:ff:29:cb:48:c8:be:5f:08:2c:ef:c3:
         95:d0:d2:68:64:cc:30:82:ec:dc:35:31:45:8a:ee:35:6e:0d:
         35:d1:c1:71:16:78:8f:c9:1e:ae:4b:f3:b5:94:19:fd:ad:e1:
         07:cc:4b:00:70:ba:4b:9f:0a:14:b4:2b:85:10:70:a8:0d:46:
         c1:65:8e:78:65:93:43:d4:a9:f8:51:b3:03:bf:0a:41:62:70:
         14:13:26:25:61:cb:86:2e:60:26:40:d0:c7:0f:f5:b9:8d:57:
         d0:4d:06:d9:3d:9d:c4:bd:05:43:cb:f2:28:d7:26:48:8b:64:
         f6:d0:2c:88:30:f4:74:4c:1a:de:8c:99:b4:ad:5c:52:10:aa:
         17:71:a0:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdgPSUmTeRty+boAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk
ZTUwNWMwZGMtMzY3NS00YmY4LWE2YTctZDhjN2U4NjhiZjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoaASsAgwlHIBQ6w6RCuilnRQvYYTDks2/kU
t7wuPKVk1Ln98Fpfm6spUkij9S6yGn66bxJT7v7dGURCAe1kxuV5uhKULAeKHFA5
jW1LEnzjgz8Usnl+P13linCTZR+cHTfTUceHo8q7Ru84VFJpi5C2YnPpdXrmAL3A
CUQ48Zt3k01wUK5mQXkL4tpDGBcWBm7Btt1dLwRd4Nl+4O2B8UC/PWk6+jlHEQC8
9qCDJk6SdvOXY4ZUDGO8BCmfxx+VDszYx61w0SS8KQrpGn2HjoCZpF+kVLOiApVF
QTH/wXZ7HyRvu/mKkkpei6Z8jzM6sUYbLKBb+xeUVA7ZMekgSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfjPyrux8fC++E1Rsr5MC1mm/jqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWM1MzhkMzQtY2Q3Ni0z
NDE2LWEzMzEtNDFhMjkwMDgyZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElECeijgxicqVAvgNyTJ7JIt5qvTgcD0D3sUm24Flu7lC4Yt2IYNQxl
G0PDKvp9173zSrUBh1c1dL7BT/OecECavjw4KwOIzYE2vMqunBT81o2/HcJCx4hF
yMMfzvmcxo41RrbTilHFJLYZ6VQHeMQWQmr/KctIyL5fCCzvw5XQ0mhkzDCC7Nw1
MUWK7jVuDTXRwXEWeI/JHq5L87WUGf2t4QfMSwBwukufChS0K4UQcKgNRsFljnhl
k0PUqfhRswO/CkFicBQTJiVhy4YuYCZA0McP9bmNV9BNBtk9ncS9BUPL8ijXJkiL
ZPbQLIgw9HRMGt6MmbStXFIQqhdxoKQ=
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:07 2025 by rpki-client