Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67fd574b-9fe8-3ee4-b05a-cabf4bfdd2ff.roa
File:                     67fd574b-9fe8-3ee4-b05a-cabf4bfdd2ff.roa (raw, json)
Hash identifier:          69I2t/kE0fieFty9WCK/YnloKT268zYsdyDL8W2Lv8k=
Subject key identifier:   F0:0C:D2:A8:C8:27:60:C1:AB:34:E2:1E:E7:A6:A9:57:32:A0:18:02
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8CDBE79A2408C3DB8E9C80C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67fd574b-9fe8-3ee4-b05a-cabf4bfdd2ff.roa
Signing time:             Thu 17 Jul 2025 16:37:01 +0000
ROA not before:           Thu 17 Jul 2025 16:37:01 +0000
ROA not after:            Wed 15 Oct 2025 16:37:01 +0000
asID:                     30036
IP address blocks:        173.24.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:db:e7:9a:24:08:c3:db:8e:9c:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 17 16:37:01 2025 GMT
            Not After : Oct 15 16:37:01 2025 GMT
        Subject: CN=2a3735f1-862b-495e-bd57-087b31d6900a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:bb:6a:ac:08:2f:c9:c1:af:93:3f:2e:b2:
                    ba:15:44:35:0f:89:f6:12:a1:71:32:da:f4:5a:9d:
                    5b:be:1f:f7:dc:58:55:b0:bd:9b:1a:e6:8d:e5:64:
                    91:9c:04:1d:5b:34:a7:49:93:15:96:1d:9d:60:c4:
                    e5:3c:ee:fe:1b:47:b3:ab:78:53:b6:8a:c4:1a:57:
                    a1:92:19:7b:14:c2:4e:65:fd:0e:8d:0f:1f:a4:95:
                    e0:35:a6:a6:35:af:63:82:2a:34:ca:f8:86:bb:7f:
                    07:b4:9c:8d:d7:df:18:89:1b:43:be:58:cf:17:57:
                    cb:91:0c:89:47:28:ac:c2:bb:92:b7:26:9f:26:5d:
                    9b:37:da:9c:f1:d8:43:ad:d3:6b:8b:74:57:3c:58:
                    9c:c2:f0:7f:4f:10:93:4f:7b:9e:6a:b7:28:8a:96:
                    f2:f0:d2:61:3a:79:2c:15:8d:de:9e:d6:1c:c9:4a:
                    82:35:69:2c:0f:87:02:7f:28:4c:44:b7:ff:5f:32:
                    7c:ad:3d:28:de:ff:a0:35:99:9e:2f:f5:6a:99:1e:
                    0f:ed:24:5e:d6:c7:57:f7:59:ff:dc:65:d4:d6:a6:
                    74:f8:70:f5:ee:25:30:3d:8e:4a:ee:11:44:dc:d0:
                    79:77:2b:9b:b3:94:ef:59:12:ed:44:93:dd:99:5d:
                    e6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0C:D2:A8:C8:27:60:C1:AB:34:E2:1E:E7:A6:A9:57:32:A0:18:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67fd574b-9fe8-3ee4-b05a-cabf4bfdd2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e8:7c:98:32:cb:f7:84:f1:bb:71:33:e7:f0:30:01:47:49:
         36:a4:31:c3:1c:db:e7:11:19:26:a0:0b:4e:09:ff:44:ef:ce:
         7b:9c:66:54:9a:13:90:75:15:26:f2:bf:89:37:1b:7a:cd:88:
         dc:b7:78:e5:70:01:ee:92:89:5e:13:ee:ee:d8:20:b6:23:a2:
         03:d6:cc:df:41:34:48:ae:5f:db:45:8e:08:d5:eb:ca:be:e4:
         01:49:f7:05:33:ad:d6:fd:6d:40:b9:b4:dc:0f:b5:56:94:ee:
         27:c2:20:dc:a8:bd:67:6c:a9:4f:7d:36:73:82:34:49:41:1c:
         2e:30:1d:2b:cb:50:3a:a2:cd:04:b9:f1:b1:76:4d:2b:01:8c:
         0d:7d:b1:c1:bb:00:1c:d3:43:f2:89:9a:52:b1:95:a6:6b:2d:
         5d:f8:4b:57:8f:2b:b7:70:7d:2b:7b:36:d4:ab:2d:92:5c:fe:
         c2:2f:ca:b5:a2:5e:91:1a:97:ff:3b:bc:37:ce:49:2a:cc:11:
         58:29:f4:94:5c:e0:57:2e:34:3c:74:d9:c1:8c:13:a9:60:a1:
         bc:7f:45:7f:00:bf:da:e8:98:8e:09:5c:c4:1c:a0:53:3c:11:
         ce:ec:ae:2a:3a:2b:95:f0:66:11:cc:4f:e0:fe:08:6d:b1:f9:
         50:a5:f2:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqM2+eaJAjD246cgMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNzE2MzcwMVoXDTI1MTAxNTE2MzcwMVowLzEtMCsGA1UEAxMk
MmEzNzM1ZjEtODYyYi00OTVlLWJkNTctMDg3YjMxZDY5MDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupu7aqwIL8nBr5M/LrK6FUQ1D4n2EqFxMtr0
Wp1bvh/33FhVsL2bGuaN5WSRnAQdWzSnSZMVlh2dYMTlPO7+G0ezq3hTtorEGleh
khl7FMJOZf0OjQ8fpJXgNaamNa9jgio0yviGu38HtJyN198YiRtDvljPF1fLkQyJ
RyiswruStyafJl2bN9qc8dhDrdNri3RXPFicwvB/TxCTT3uearcoipby8NJhOnks
FY3entYcyUqCNWksD4cCfyhMRLf/XzJ8rT0o3v+gNZmeL/VqmR4P7SRe1sdX91n/
3GXU1qZ0+HD17iUwPY5K7hFE3NB5dyubs5TvWRLtRJPdmV3mMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPAM0qjIJ2DBqzTiHuemqVcyoBgCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjdmZDU3NGItOWZlOC0z
ZWU0LWIwNWEtY2FiZjRiZmRkMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRj8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACLofJgyy/eE8btxM+fwMAFHSTakMcMc2+cRGSagC04J/0TvznucZlSa
E5B1FSbyv4k3G3rNiNy3eOVwAe6SiV4T7u7YILYjogPWzN9BNEiuX9tFjgjV68q+
5AFJ9wUzrdb9bUC5tNwPtVaU7ifCINyovWdsqU99NnOCNElBHC4wHSvLUDqizQS5
8bF2TSsBjA19scG7ABzTQ/KJmlKxlaZrLV34S1ePK7dwfSt7NtSrLZJc/sIvyrWi
XpEal/87vDfOSSrMEVgp9JRc4FcuNDx02cGME6lgobx/RX8Av9romI4JXMQcoFM8
Ec7srio6K5XwZhHMT+D+CG2x+VCl8no=
-----END CERTIFICATE-----
Generated at Wed Aug 6 03:57:12 2025 by rpki-client