Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6721bf0-82ef-376e-a238-9d1c43c63ca4.roa
File:                     b6721bf0-82ef-376e-a238-9d1c43c63ca4.roa (raw, json)
Hash identifier:          Zm97PIKwH4n4DmJXY+A+AtT1wUALSLC2TT5w1DNyFVg=
Subject key identifier:   5A:62:0D:68:3D:C2:51:79:2C:1B:50:8A:CB:E1:7A:BC:82:C9:FC:15
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F497379AC27E8D589F03D9B40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6721bf0-82ef-376e-a238-9d1c43c63ca4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.30.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:79:ac:27:e8:d5:89:f0:3d:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=94853522-adb6-4e60-ae18-5bec7de40ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:2d:7e:bf:2b:ee:d5:eb:a9:54:d6:a4:19:
                    44:c5:c8:45:33:67:62:c7:ea:c2:88:ca:ef:9b:c6:
                    28:a1:5b:0c:48:73:66:14:e1:75:1a:0f:a3:16:98:
                    29:f1:44:29:d2:f0:da:43:a8:9e:81:15:df:38:9e:
                    90:ce:5e:65:ab:9d:f1:2a:ab:55:7d:d1:06:6d:44:
                    cc:4a:c3:2f:30:f2:62:43:75:04:bf:5f:96:cc:6a:
                    00:53:8c:c2:e3:e3:bd:17:a1:b0:5c:fa:e4:78:a4:
                    a2:cc:11:f2:53:d9:1e:fb:fd:16:2a:9a:2e:74:91:
                    84:2f:f5:a6:83:6a:57:cf:3d:46:cb:77:b9:b7:f8:
                    b0:c8:28:1d:0c:a0:6f:11:15:67:52:7d:5f:5a:d9:
                    d6:4d:53:49:06:0f:e4:82:76:4b:80:43:9d:70:92:
                    85:86:ca:e3:ea:c2:de:6e:f1:2d:53:72:a6:f3:1f:
                    68:1f:56:f6:bf:eb:45:b8:ee:a4:43:14:03:2c:b8:
                    94:2c:49:d0:c1:3c:8e:18:2c:56:84:6b:83:7b:e8:
                    99:49:b6:ad:16:98:88:49:1e:31:1a:40:a5:ff:78:
                    d4:96:14:73:d1:19:1f:ec:9f:d1:11:e6:c6:52:16:
                    88:70:f7:e7:5d:06:72:f0:6b:22:ef:06:69:42:d0:
                    02:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:62:0D:68:3D:C2:51:79:2C:1B:50:8A:CB:E1:7A:BC:82:C9:FC:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b6721bf0-82ef-376e-a238-9d1c43c63ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:91:a8:63:8c:27:50:e6:15:87:69:e1:72:ab:e9:1f:fb:39:
         f9:99:40:73:a8:1e:82:a6:0d:0b:a6:d5:b6:6c:d1:43:51:ed:
         a4:36:77:67:fb:9a:4a:da:79:eb:be:b8:3a:71:e7:c3:66:65:
         47:f4:1f:02:23:94:1e:3d:d4:6a:7f:69:d0:6f:61:5a:a0:96:
         10:c7:bf:e9:cd:6c:07:8b:12:b9:a8:8b:34:f7:4c:47:ea:0a:
         7f:7c:e1:b9:65:94:ac:b3:38:d5:9a:fa:14:91:40:46:68:5d:
         3b:d0:76:86:b8:56:ee:aa:09:d7:a7:f7:f5:72:3e:ac:c4:d9:
         6f:8a:48:2a:80:3e:09:4c:a4:d3:ca:8d:8f:4c:a5:1e:cb:0b:
         12:9c:ea:63:42:53:69:c5:b5:bd:0b:32:db:05:cd:b0:0a:31:
         55:68:ec:74:c1:76:17:ae:da:6e:ad:e7:a3:b1:00:48:67:ed:
         ab:4b:fb:0f:72:5d:2d:8c:58:19:06:d9:1b:1e:7c:a3:18:11:
         81:7b:31:25:7b:75:00:a4:a3:72:34:12:a3:9d:e5:d6:6e:e8:
         0a:cb:2d:af:87:d4:30:cf:fd:9f:17:79:95:dc:4f:9b:3a:08:
         ed:e4:90:04:f5:48:c9:4e:fd:68:a9:35:60:d1:e7:b6:c0:d7:
         df:ea:94:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc3msJ+jVifA9m0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTQ4NTM1MjItYWRiNi00ZTYwLWFlMTgtNWJlYzdkZTQwZWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiestfr8r7tXrqVTWpBlExchFM2dix+rCiMrv
m8YooVsMSHNmFOF1Gg+jFpgp8UQp0vDaQ6iegRXfOJ6Qzl5lq53xKqtVfdEGbUTM
SsMvMPJiQ3UEv1+WzGoAU4zC4+O9F6GwXPrkeKSizBHyU9ke+/0WKpoudJGEL/Wm
g2pXzz1Gy3e5t/iwyCgdDKBvERVnUn1fWtnWTVNJBg/kgnZLgEOdcJKFhsrj6sLe
bvEtU3Km8x9oH1b2v+tFuO6kQxQDLLiULEnQwTyOGCxWhGuDe+iZSbatFpiISR4x
GkCl/3jUlhRz0Rkf7J/REebGUhaIcPfnXQZy8Gsi7wZpQtACPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFpiDWg9wlF5LBtQisvheryCyfwVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjY3MjFiZjAtODJlZi0z
NzZlLWEyMzgtOWQxYzQzYzYzY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR5wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+RqGOMJ1DmFYdp4XKr6R/7OfmZQHOoHoKmDQum1bZs0UNR7aQ2d2f7
mkraeeu+uDpx58NmZUf0HwIjlB491Gp/adBvYVqglhDHv+nNbAeLErmoizT3TEfq
Cn984blllKyzONWa+hSRQEZoXTvQdoa4Vu6qCden9/VyPqzE2W+KSCqAPglMpNPK
jY9MpR7LCxKc6mNCU2nFtb0LMtsFzbAKMVVo7HTBdheu2m6t56OxAEhn7atL+w9y
XS2MWBkG2RsefKMYEYF7MSV7dQCko3I0EqOd5dZu6ArLLa+H1DDP/Z8XeZXcT5s6
CO3kkAT1SMlO/WipNWDR57bA19/qlLM=
-----END CERTIFICATE-----
Generated at Sat Sep 26 19:07:58 2026 by rpki-client