Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8adf44e6-3feb-38e9-8196-878316b78a26.roa
File:                     8adf44e6-3feb-38e9-8196-878316b78a26.roa (raw, json)
Hash identifier:          3bnP+ieTSxkFU0WixnSO/R2xDySJjKKovjhTjEQdUiI=
Subject key identifier:   2C:17:0D:E8:DA:92:67:50:0A:9D:C7:0A:F9:C4:4D:44:5E:D2:07:17
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8412459ACB182D9178238E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8adf44e6-3feb-38e9-8196-878316b78a26.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        150.195.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:45:9a:cb:18:2d:91:78:23:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=651fb5cf-6157-4388-acbd-c93f838843e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:b6:6c:7a:f0:43:f7:18:1a:cd:92:35:f8:
                    b1:b0:ce:fc:ac:7e:94:c3:7c:96:cf:e2:87:27:90:
                    bf:de:a8:3d:b1:c2:f4:83:67:ae:63:46:57:b5:76:
                    aa:c7:f9:11:65:1b:1e:2f:d8:06:12:df:38:ef:de:
                    1d:ef:13:28:00:d7:77:5a:2b:1e:8a:b5:d6:d8:d2:
                    60:c1:77:5f:87:51:a0:cc:6b:11:29:da:b8:18:aa:
                    f4:06:a9:73:7b:37:4d:34:63:c6:2b:5b:93:44:86:
                    3d:9d:9a:99:c4:e4:28:a7:96:ba:8c:f8:94:aa:2a:
                    55:3b:be:67:c7:86:b6:62:4f:41:df:cb:03:82:78:
                    82:4d:77:34:37:9b:9c:8c:37:5d:c2:53:fd:b2:b4:
                    92:31:fc:92:4d:b2:4b:fb:5e:cf:3f:91:43:55:78:
                    ab:b5:fe:18:c3:a9:84:bf:1d:86:c5:4a:ac:32:f0:
                    35:e5:c8:89:8c:e6:39:f5:20:5c:b5:6e:76:49:17:
                    3e:df:96:57:6b:ef:0d:bd:04:75:09:71:02:9c:83:
                    97:42:d8:51:e8:48:07:59:96:d1:f7:8a:48:ce:d0:
                    12:c3:02:62:78:a0:66:4b:c2:f3:15:0e:98:d8:eb:
                    27:69:bb:07:89:65:a4:01:97:cd:bb:0e:63:8a:e0:
                    bd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:17:0D:E8:DA:92:67:50:0A:9D:C7:0A:F9:C4:4D:44:5E:D2:07:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8adf44e6-3feb-38e9-8196-878316b78a26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e9:8c:3f:7f:ca:eb:0f:96:54:d4:ec:9a:98:cd:ca:a2:dc:
         87:95:1c:12:40:62:79:aa:d7:b1:1b:af:fd:ed:32:51:ce:56:
         5f:e6:e1:c1:e1:93:c9:8c:58:bb:54:4f:b1:25:6c:e7:e0:9f:
         84:cf:4c:8f:46:f1:17:ab:59:ae:57:32:9f:08:b0:00:a3:c5:
         84:8f:30:25:ad:6b:f5:91:b5:2a:45:37:fb:7f:b8:0c:1a:53:
         7a:32:3c:af:f0:61:72:54:8a:e3:d0:34:27:17:14:ce:97:b5:
         8e:ff:c9:99:ee:a7:41:c8:a2:db:66:24:73:ac:ef:31:c6:b5:
         79:3a:67:c5:1e:66:68:f8:fd:81:fe:a2:d8:01:5a:9f:10:d6:
         9c:4d:dc:41:87:d5:4c:07:dd:c7:95:7a:e0:e5:68:2d:db:3e:
         51:80:ce:4c:0b:13:a1:d8:bf:6c:a3:e4:d2:41:4d:36:fb:aa:
         41:08:18:6f:73:61:94:25:2c:54:4c:fe:e2:29:f5:3c:1f:e3:
         3c:60:40:0f:3a:0c:c8:51:8f:c0:81:fc:ec:6d:9d:37:30:47:
         d3:6e:80:36:6f:fd:3c:e9:d6:1e:a8:8b:c5:b1:a4:9e:8c:e9:
         68:e0:ec:8f:0c:79:3c:06:92:83:12:37:f7:9f:39:87:70:71:
         ac:7f:6b:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkWayxgtkXgjjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NjUxZmI1Y2YtNjE1Ny00Mzg4LWFjYmQtYzkzZjgzODg0M2U4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXa2bHrwQ/cYGs2SNfixsM78rH6Uw3yWz+KH
J5C/3qg9scL0g2euY0ZXtXaqx/kRZRseL9gGEt84794d7xMoANd3WiseirXW2NJg
wXdfh1GgzGsRKdq4GKr0BqlzezdNNGPGK1uTRIY9nZqZxOQop5a6jPiUqipVO75n
x4a2Yk9B38sDgniCTXc0N5ucjDddwlP9srSSMfySTbJL+17PP5FDVXirtf4Yw6mE
vx2GxUqsMvA15ciJjOY59SBctW52SRc+35ZXa+8NvQR1CXECnIOXQthR6EgHWZbR
94pIztASwwJieKBmS8LzFQ6Y2OsnabsHiWWkAZfNuw5jiuC9kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwXDejakmdQCp3HCvnETURe0gcXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGFkZjQ0ZTYtM2ZlYi0z
OGU5LTgxOTYtODc4MzE2Yjc4YTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDpjD9/yusPllTU7JqYzcqi3IeVHBJAYnmq17Ebr/3tMlHOVl/m4cHh
k8mMWLtUT7ElbOfgn4TPTI9G8RerWa5XMp8IsACjxYSPMCWta/WRtSpFN/t/uAwa
U3oyPK/wYXJUiuPQNCcXFM6XtY7/yZnup0HIottmJHOs7zHGtXk6Z8UeZmj4/YH+
otgBWp8Q1pxN3EGH1UwH3ceVeuDlaC3bPlGAzkwLE6HYv2yj5NJBTTb7qkEIGG9z
YZQlLFRM/uIp9Twf4zxgQA86DMhRj8CB/OxtnTcwR9NugDZv/Tzp1h6oi8WxpJ6M
6Wjg7I8MeTwGkoMSN/efOYdwcax/a/4=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:55 2025 by rpki-client