Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e34dbd5-63a5-3567-899e-5dfc158e9a81.roa
File:                     8e34dbd5-63a5-3567-899e-5dfc158e9a81.roa (raw, json)
Hash identifier:          u51eZA3jAWe3pwDWVU1nX9OREI1FkLA+g/u4/XZVPEY=
Subject key identifier:   2E:D2:42:6F:3B:44:DC:DE:2A:0B:4F:4B:9D:8B:82:25:24:56:90:23
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E08665A794BE60DCD97E13280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e34dbd5-63a5-3567-899e-5dfc158e9a81.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.16.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:5a:79:4b:e6:0d:cd:97:e1:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=9f2a0d33-4295-45a4-8e04-e1d152d22db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8a:2c:40:a4:76:b8:e6:b2:88:e9:ee:f2:20:
                    fc:25:7b:7b:58:86:9e:eb:79:86:d8:d4:da:08:6b:
                    f7:e7:a1:03:9b:73:01:7a:3f:ab:8c:17:d9:ef:d0:
                    ae:bf:14:d1:fa:0f:e5:1f:6c:81:39:cc:93:47:30:
                    94:05:af:a3:67:4a:5c:0f:89:a5:80:20:dd:8a:38:
                    40:f7:25:cd:ae:7f:66:ab:99:92:e7:ec:4f:69:f8:
                    da:ee:2c:12:dc:6a:86:38:84:8a:0a:96:a1:1c:10:
                    17:58:2c:3f:ee:18:ea:08:22:ac:f8:52:2b:a8:f3:
                    95:ab:c6:98:ee:d0:bc:7b:66:62:8b:e2:82:49:84:
                    7f:cb:65:cc:f0:88:8a:e2:84:49:e1:f6:26:29:f8:
                    a6:3f:7b:6c:0b:56:c5:72:42:c0:5d:cd:23:1f:b0:
                    73:55:a9:1e:d8:bf:cc:44:eb:96:4e:19:3d:f7:2a:
                    2a:eb:36:9f:38:d6:de:3c:73:a3:b9:6b:ff:59:64:
                    df:8d:d5:29:54:fe:fb:1b:88:c1:3e:62:13:3e:75:
                    48:69:42:47:a0:8c:24:80:a6:f1:ff:21:61:dc:95:
                    de:97:df:7d:a6:95:bb:76:da:f7:17:2f:69:08:df:
                    7f:00:05:91:52:50:b3:b9:1b:00:0e:c3:22:25:20:
                    e6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D2:42:6F:3B:44:DC:DE:2A:0B:4F:4B:9D:8B:82:25:24:56:90:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e34dbd5-63a5-3567-899e-5dfc158e9a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:22:b5:3e:ed:45:93:61:ce:72:02:6f:2a:4f:86:c0:5e:ec:
         4b:ef:f7:f0:08:59:84:d3:66:52:a0:fc:9c:3e:25:ee:e1:9e:
         1d:f7:cf:ba:7e:34:59:d4:ad:b0:ab:d9:08:0b:12:b2:2b:c0:
         cf:da:89:47:8c:68:ab:4d:d8:09:2e:bd:14:32:d3:65:c2:ba:
         a0:43:59:e0:6f:59:14:31:2d:d8:53:f2:39:6f:93:af:90:24:
         8f:c6:f0:3d:cc:af:52:df:b6:95:59:19:5a:99:65:27:e7:a9:
         c8:d3:c2:94:c2:7c:aa:70:9d:a8:08:31:e4:22:11:0c:d2:cd:
         8c:ae:9f:0e:ef:76:96:89:ba:d7:8b:7f:7b:76:ea:d2:2d:77:
         c2:44:64:0e:bd:6f:5a:36:28:ab:1e:24:8f:5c:a9:01:7e:61:
         5a:8a:5e:2b:eb:70:d3:fb:85:c3:62:90:f7:fb:18:df:57:16:
         9c:d6:b5:3e:19:f1:9e:dd:31:7f:13:82:25:ad:5e:e7:6f:e9:
         dc:3e:7c:ef:be:34:ae:fd:3a:11:95:1e:b2:aa:ae:60:bc:65:
         11:f4:21:35:12:8c:6c:9b:35:5e:dc:62:43:4c:65:09:21:d0:
         74:89:48:2a:21:a1:e6:d7:a1:81:a1:56:3d:7f:4b:05:32:6c:
         21:37:0a:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZlp5S+YNzZfhMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
OWYyYTBkMzMtNDI5NS00NWE0LThlMDQtZTFkMTUyZDIyZGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4osQKR2uOayiOnu8iD8JXt7WIae63mG2NTa
CGv356EDm3MBej+rjBfZ79CuvxTR+g/lH2yBOcyTRzCUBa+jZ0pcD4mlgCDdijhA
9yXNrn9mq5mS5+xPafja7iwS3GqGOISKCpahHBAXWCw/7hjqCCKs+FIrqPOVq8aY
7tC8e2Zii+KCSYR/y2XM8IiK4oRJ4fYmKfimP3tsC1bFckLAXc0jH7BzVake2L/M
ROuWThk99yoq6zafONbePHOjuWv/WWTfjdUpVP77G4jBPmITPnVIaUJHoIwkgKbx
/yFh3JXel999ppW7dtr3Fy9pCN9/AAWRUlCzuRsADsMiJSDmKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7SQm87RNzeKgtPS52LgiUkVpAjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGUzNGRiZDUtNjNhNS0z
NTY3LTg5OWUtNWRmYzE1OGU5YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGoitT7tRZNhznICbypPhsBe7Evv9/AIWYTTZlKg/Jw+Je7hnh33z7p+
NFnUrbCr2QgLErIrwM/aiUeMaKtN2AkuvRQy02XCuqBDWeBvWRQxLdhT8jlvk6+Q
JI/G8D3Mr1LftpVZGVqZZSfnqcjTwpTCfKpwnagIMeQiEQzSzYyunw7vdpaJuteL
f3t26tItd8JEZA69b1o2KKseJI9cqQF+YVqKXivrcNP7hcNikPf7GN9XFpzWtT4Z
8Z7dMX8TgiWtXudv6dw+fO++NK79OhGVHrKqrmC8ZRH0ITUSjGybNV7cYkNMZQkh
0HSJSCohoebXoYGhVj1/SwUybCE3CiI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:46:12 2026 by rpki-client