Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0aa556a-b40b-38ba-9476-baccbd5300b7.roa
File:                     a0aa556a-b40b-38ba-9476-baccbd5300b7.roa (raw, json)
Hash identifier:          2ggnucB5hqefQPfMKS6Z8bQici2yBQEZCB/xhfrxwZY=
Subject key identifier:   EE:77:7E:1B:18:CE:63:18:6C:20:AE:77:57:3B:B3:0F:93:E6:4B:68
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79CDAF1B782BF3D1B0E5E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0aa556a-b40b-38ba-9476-baccbd5300b7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.19.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:da:f1:b7:82:bf:3d:1b:0e:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ef9720df-28b8-416a-bc59-f7ab91083cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:45:85:ff:bc:4a:b5:32:63:64:67:9f:8a:fb:
                    d7:3a:8b:39:ff:c6:03:5e:85:0c:f2:a2:4e:f9:a4:
                    31:e3:8f:9a:fa:37:63:2e:77:c5:1c:2d:f5:9d:d4:
                    6b:6e:f8:eb:32:67:22:2b:58:a2:d7:df:e3:e1:14:
                    e1:9a:a4:ef:6f:86:1f:2f:04:ec:8c:b5:71:61:cd:
                    03:8f:f5:7e:7b:29:8f:8d:e5:1d:2d:56:df:a2:f5:
                    b2:91:1b:b7:45:2e:cd:5e:08:98:c5:5f:64:9a:37:
                    51:4c:89:1b:57:82:a6:eb:da:66:4b:86:40:3e:d8:
                    1f:ed:47:ab:cd:f5:96:97:bd:2b:7b:cb:1c:0b:8d:
                    1b:85:e8:1f:2b:6c:45:b5:26:4a:5e:7a:f2:ff:25:
                    56:e7:88:c2:5b:7b:e0:72:a3:2b:38:e2:9d:96:7c:
                    a7:0b:6d:d7:91:96:b4:02:5d:7a:5c:c3:4b:c2:50:
                    88:8c:60:31:85:d2:6f:55:38:91:19:d9:ea:e8:7f:
                    86:f3:c9:75:bf:06:09:b3:bc:21:a1:1d:1a:b9:04:
                    a1:e9:36:45:00:dd:c3:c1:39:6f:f1:59:bc:e4:c8:
                    bb:83:52:50:50:67:01:97:13:77:33:44:5f:23:11:
                    2e:76:47:49:af:d3:37:59:3d:af:31:80:e8:a0:f2:
                    1f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:77:7E:1B:18:CE:63:18:6C:20:AE:77:57:3B:B3:0F:93:E6:4B:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0aa556a-b40b-38ba-9476-baccbd5300b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:2a:cb:19:38:59:9c:56:b0:1c:e9:84:b5:9d:71:05:73:85:
         a2:f9:55:57:03:c2:c4:0d:04:33:b7:62:2e:43:c4:15:1f:ba:
         0d:ce:82:f5:69:30:55:37:00:8e:ca:87:08:c3:03:60:07:35:
         f7:53:2e:03:d9:b0:c4:6b:42:3e:22:ce:04:f1:94:bb:98:01:
         b2:8d:28:6f:86:8d:c2:0b:cc:e8:3f:0d:5d:78:b0:40:15:fc:
         b4:dd:5f:71:2f:79:3a:38:65:d5:8d:1b:e8:b2:c3:53:e5:87:
         db:52:82:97:dd:be:80:9e:9b:b1:7e:11:6e:22:27:48:da:9d:
         86:72:d1:80:bf:5d:58:f1:4b:6b:4d:72:3a:f6:ae:56:dd:ae:
         f3:59:9b:34:3f:b9:62:63:b3:dc:85:9a:0a:34:d3:28:e9:9d:
         e0:a9:cf:5b:e1:93:d9:ca:c8:6d:58:64:2a:f2:9b:1a:b5:22:
         14:16:2a:26:09:e1:91:ad:04:9a:d6:64:dd:7b:63:18:11:8c:
         74:4f:80:35:d5:0b:65:5a:71:af:e9:3f:6e:31:ba:ad:bc:16:
         7d:a8:72:b5:d9:ad:3e:6a:85:65:74:4a:af:54:d0:2e:fe:57:
         9e:6b:d2:b8:d5:11:55:b5:93:04:1f:e9:38:ad:32:d4:c9:e0:
         9f:23:8a:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnNrxt4K/PRsOXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZWY5NzIwZGYtMjhiOC00MTZhLWJjNTktZjdhYjkxMDgzY2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkWF/7xKtTJjZGefivvXOos5/8YDXoUM8qJO
+aQx44+a+jdjLnfFHC31ndRrbvjrMmciK1ii19/j4RThmqTvb4YfLwTsjLVxYc0D
j/V+eymPjeUdLVbfovWykRu3RS7NXgiYxV9kmjdRTIkbV4Km69pmS4ZAPtgf7Uer
zfWWl70re8scC40bhegfK2xFtSZKXnry/yVW54jCW3vgcqMrOOKdlnynC23XkZa0
Al16XMNLwlCIjGAxhdJvVTiRGdnq6H+G88l1vwYJs7whoR0auQSh6TZFAN3DwTlv
8Vm85Mi7g1JQUGcBlxN3M0RfIxEudkdJr9M3WT2vMYDooPIf+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO53fhsYzmMYbCCud1c7sw+T5ktoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTBhYTU1NmEtYjQwYi0z
OGJhLTk0NzYtYmFjY2JkNTMwMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRMmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkqyxk4WZxWsBzphLWdcQVzhaL5VVcDwsQNBDO3Yi5DxBUfug3OgvVp
MFU3AI7KhwjDA2AHNfdTLgPZsMRrQj4izgTxlLuYAbKNKG+GjcILzOg/DV14sEAV
/LTdX3EveTo4ZdWNG+iyw1Plh9tSgpfdvoCem7F+EW4iJ0janYZy0YC/XVjxS2tN
cjr2rlbdrvNZmzQ/uWJjs9yFmgo00yjpneCpz1vhk9nKyG1YZCrymxq1IhQWKiYJ
4ZGtBJrWZN17YxgRjHRPgDXVC2Vaca/pP24xuq28Fn2ocrXZrT5qhWV0Sq9U0C7+
V55r0rjVEVW1kwQf6TitMtTJ4J8jijQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:12:11 2026 by rpki-client