Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa
File:                     84e3b569-c77e-369f-9d81-aa06c2742984.roa (raw, json)
Hash identifier:          fFR3GxQ4odrKG9WsywzrnhIbRZzezrU4v+K5h5kJd3U=
Subject key identifier:   53:41:F8:E9:6F:71:A4:2E:0D:69:FD:F8:E5:35:63:6E:81:8B:19:6B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81465D2F704834E1ED906D40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.23.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:5d:2f:70:48:34:e1:ed:90:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=c85ddaed-1845-4595-beec-2e081978c1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:0d:8f:fc:69:24:5a:97:e7:ae:a0:5a:d9:
                    9d:a7:46:0d:43:6b:0c:c9:92:94:a3:ea:9c:5e:59:
                    10:4d:50:8c:16:67:f9:2e:5a:a1:4b:34:1a:82:2d:
                    fc:ee:65:7b:aa:df:7b:7d:d4:dc:53:89:f2:55:da:
                    7d:20:27:27:04:37:af:37:8c:e1:29:16:ef:8e:d0:
                    3c:f2:e4:c3:f1:f9:30:37:c1:c5:69:63:76:a5:65:
                    8c:af:b4:47:fd:87:5a:e5:c2:4c:3d:1e:5c:97:89:
                    9a:9d:cc:d1:c9:be:11:4b:62:c9:48:95:69:84:3c:
                    49:85:0b:d7:68:0b:2c:af:46:62:94:ed:a0:a3:b5:
                    fc:57:e3:0d:1d:2b:97:35:1d:58:56:7b:6d:42:fe:
                    b9:0b:a0:f1:03:bf:be:54:02:4e:fd:41:57:61:4d:
                    fb:30:92:16:3e:0c:19:e3:d9:e5:97:fe:d9:89:ce:
                    51:86:eb:81:69:e5:c7:b8:99:48:b4:3d:d9:2d:c9:
                    5d:c6:61:61:87:81:5e:1b:8f:be:b0:22:2b:c5:fe:
                    d1:5f:c5:40:e1:f3:d4:8e:3e:80:b8:a5:49:73:93:
                    04:4e:2b:60:8e:62:cc:09:08:95:f7:79:8d:a4:14:
                    58:93:73:90:dd:e3:e7:e4:e0:65:80:1a:47:90:1e:
                    9e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:41:F8:E9:6F:71:A4:2E:0D:69:FD:F8:E5:35:63:6E:81:8B:19:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/84e3b569-c77e-369f-9d81-aa06c2742984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:dc:3a:a1:9d:3d:fd:2b:27:4b:45:49:df:fd:e1:a6:27:5c:
         17:9a:86:9b:3b:d0:d5:e3:7d:15:7d:7b:26:10:0a:66:5c:eb:
         45:ed:77:e7:e5:b0:cf:e6:fa:b2:40:b4:e9:a5:d6:fc:cb:21:
         2c:fe:26:6a:43:69:06:78:9c:54:8e:f4:41:c3:0b:cf:54:5a:
         fd:00:65:ef:da:8c:3a:35:f9:43:ab:83:18:0f:4e:33:54:a0:
         46:64:ce:0b:66:51:da:a1:b8:b9:3d:1b:65:ac:9e:e5:54:bf:
         14:4c:fe:cd:51:7a:69:d7:4e:61:5f:a7:ef:a5:9e:fc:fd:e2:
         15:a0:0e:06:b4:b3:c1:f5:50:2c:56:34:8f:42:7f:df:45:cd:
         f6:81:f4:0d:3c:6f:e7:d3:b5:d5:63:c5:06:50:c0:7a:96:c5:
         df:fe:46:af:4f:c2:f1:f8:54:3a:ec:a5:2a:e5:7a:6e:b5:74:
         6e:c3:60:8d:d7:29:b3:13:c7:be:cc:1e:1a:aa:7c:df:19:0c:
         f8:65:34:af:c3:b1:9f:1b:9c:85:6d:73:3b:63:e6:6a:06:68:
         54:d9:90:b7:48:2f:cd:61:8e:cb:ff:a9:0e:c0:3b:de:38:22:
         1b:be:7d:87:79:c9:c5:28:42:c4:01:f1:d8:99:c5:9a:a2:06:
         64:d0:14:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRl0vcEg04e2QbUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
Yzg1ZGRhZWQtMTg0NS00NTk1LWJlZWMtMmUwODE5NzhjMWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzcNj/xpJFqX566gWtmdp0YNQ2sMyZKUo+qc
XlkQTVCMFmf5LlqhSzQagi387mV7qt97fdTcU4nyVdp9ICcnBDevN4zhKRbvjtA8
8uTD8fkwN8HFaWN2pWWMr7RH/Yda5cJMPR5cl4manczRyb4RS2LJSJVphDxJhQvX
aAssr0ZilO2go7X8V+MNHSuXNR1YVnttQv65C6DxA7++VAJO/UFXYU37MJIWPgwZ
49nll/7Zic5RhuuBaeXHuJlItD3ZLcldxmFhh4FeG4++sCIrxf7RX8VA4fPUjj6A
uKVJc5METitgjmLMCQiV93mNpBRYk3OQ3ePn5OBlgBpHkB6eZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFNB+OlvcaQuDWn9+OU1Y26BixlrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODRlM2I1NjktYzc3ZS0z
NjlmLTlkODEtYWEwNmMyNzQyOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRfEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATcOqGdPf0rJ0tFSd/94aYnXBeahps70NXjfRV9eyYQCmZc60Xtd+fl
sM/m+rJAtOml1vzLISz+JmpDaQZ4nFSO9EHDC89UWv0AZe/ajDo1+UOrgxgPTjNU
oEZkzgtmUdqhuLk9G2WsnuVUvxRM/s1RemnXTmFfp++lnvz94hWgDga0s8H1UCxW
NI9Cf99FzfaB9A08b+fTtdVjxQZQwHqWxd/+Rq9PwvH4VDrspSrlem61dG7DYI3X
KbMTx77MHhqqfN8ZDPhlNK/DsZ8bnIVtcztj5moGaFTZkLdIL81hjsv/qQ7AO944
Ihu+fYd5ycUoQsQB8diZxZqiBmTQFAM=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:12:13 2025 by rpki-client