Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95dacf31-9ec0-3360-af9f-7b2ac7b37544.roa
File:                     95dacf31-9ec0-3360-af9f-7b2ac7b37544.roa (raw, json)
Hash identifier:          TX07cuewKEQ5nKwSs3fkiXZFadKF+x2V1nM52yOGGOQ=
Subject key identifier:   C9:55:91:FA:75:9C:14:20:34:6B:3B:3B:F6:5B:FC:E2:57:CA:D0:00
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79CBD369A9E43055B199DC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95dacf31-9ec0-3360-af9f-7b2ac7b37544.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.31.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:bd:36:9a:9e:43:05:5b:19:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d412cdcb-ef16-47de-b6a5-d98f2fff18b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:6e:72:c8:93:98:d4:fd:7a:77:7d:81:cb:
                    93:67:f1:8b:c2:a2:ce:70:0c:b9:36:2f:d8:75:01:
                    26:dc:4e:68:89:6e:66:a1:c2:33:00:f5:86:2d:4e:
                    e2:aa:9f:6e:5d:13:b2:d1:6d:05:1f:8f:f7:11:1a:
                    2b:f7:83:4e:b2:9c:58:79:dd:e4:48:45:d1:3c:7e:
                    bb:00:ed:ae:25:04:9d:20:de:42:a4:7b:a3:20:5f:
                    ac:43:ee:44:f6:de:09:88:ff:31:d4:67:77:50:c1:
                    ad:7f:28:a4:d7:1e:b8:73:fa:f6:bf:6f:67:b2:77:
                    93:b4:04:10:09:a9:1f:ee:6d:b0:85:3b:30:e9:99:
                    26:fe:21:9d:cf:10:6b:9d:a4:7a:81:66:90:c2:4b:
                    1c:10:66:ff:5c:3d:59:be:cf:0c:d9:81:78:17:70:
                    6a:03:e3:9a:6a:f8:f7:b8:a0:29:0a:45:7c:75:22:
                    39:f9:96:98:96:e6:de:d7:7d:2a:0d:67:e9:de:23:
                    5d:8b:ef:41:25:e8:36:1a:4e:35:a8:f9:2d:10:c0:
                    bd:54:a6:d4:44:4f:17:1a:e1:1f:79:12:cd:42:d6:
                    f6:45:c9:ce:0b:2c:0b:0b:78:1b:c6:6d:9c:61:1b:
                    51:be:0e:5b:41:48:74:b2:6a:c0:8e:42:fe:49:60:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:55:91:FA:75:9C:14:20:34:6B:3B:3B:F6:5B:FC:E2:57:CA:D0:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95dacf31-9ec0-3360-af9f-7b2ac7b37544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b5:39:4d:ab:20:ce:f6:35:51:8e:31:c5:13:6e:1a:f5:68:
         53:df:61:46:77:4e:4d:7e:e0:6c:d6:ce:a9:43:59:20:32:93:
         59:c0:29:6c:e1:01:76:e5:4a:ea:80:dc:46:6b:28:ef:2a:ab:
         ad:25:cc:5c:e4:09:61:dc:72:75:f8:3d:2a:de:fa:83:e2:10:
         0b:29:b2:6c:5e:b7:69:31:23:1f:96:7a:8d:9e:dc:36:06:92:
         1f:78:9d:c6:c2:b8:34:2f:14:05:91:f6:62:20:ec:20:a5:5d:
         e9:22:30:0c:38:4c:6e:21:3b:7f:69:e2:cb:04:02:fa:7a:b4:
         3d:5c:54:ad:e0:58:6d:c1:4f:a0:37:0e:e4:f1:1f:ba:37:9a:
         73:34:6c:cc:02:2a:bf:ab:f8:70:3c:50:13:b2:ac:8b:55:d6:
         46:6d:68:fa:6d:ae:d1:f7:9b:f5:31:79:b2:c5:8f:62:be:d5:
         c2:58:f1:6e:bb:e8:ce:ac:e2:c7:ab:4f:cf:dd:b1:71:a7:2d:
         a5:db:e9:2e:e9:13:b2:44:e3:b5:7d:96:21:7f:b8:dc:05:7e:
         8c:e3:9b:f6:cc:03:97:eb:b8:f1:76:59:00:fd:cd:c4:97:53:
         e6:56:92:c6:8a:6e:41:a8:9b:eb:42:9c:ce:84:b4:f1:74:ee:
         8a:18:ed:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnL02mp5DBVsZncAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDQxMmNkY2ItZWYxNi00N2RlLWI2YTUtZDk4ZjJmZmYxOGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNducsiTmNT9end9gcuTZ/GLwqLOcAy5Ni/Y
dQEm3E5oiW5mocIzAPWGLU7iqp9uXROy0W0FH4/3ERor94NOspxYed3kSEXRPH67
AO2uJQSdIN5CpHujIF+sQ+5E9t4JiP8x1Gd3UMGtfyik1x64c/r2v29nsneTtAQQ
Cakf7m2whTsw6Zkm/iGdzxBrnaR6gWaQwkscEGb/XD1Zvs8M2YF4F3BqA+Oaavj3
uKApCkV8dSI5+ZaYlube130qDWfp3iNdi+9BJeg2Gk41qPktEMC9VKbURE8XGuEf
eRLNQtb2RcnOCywLC3gbxm2cYRtRvg5bQUh0smrAjkL+SWAPwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMlVkfp1nBQgNGs7O/Zb/OJXytAAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTVkYWNmMzEtOWVjMC0z
MzYwLWFmOWYtN2IyYWM3YjM3NTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABe1OU2rIM72NVGOMcUTbhr1aFPfYUZ3Tk1+4GzWzqlDWSAyk1nAKWzh
AXblSuqA3EZrKO8qq60lzFzkCWHccnX4PSre+oPiEAspsmxet2kxIx+Weo2e3DYG
kh94ncbCuDQvFAWR9mIg7CClXekiMAw4TG4hO39p4ssEAvp6tD1cVK3gWG3BT6A3
DuTxH7o3mnM0bMwCKr+r+HA8UBOyrItV1kZtaPptrtH3m/UxebLFj2K+1cJY8W67
6M6s4serT8/dsXGnLaXb6S7pE7JE47V9liF/uNwFfozjm/bMA5fruPF2WQD9zcSX
U+ZWksaKbkGom+tCnM6EtPF07ooY7UU=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:31:21 2026 by rpki-client