Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d310e856-45e2-38fb-b50f-ff2314091c31.roa
File:                     d310e856-45e2-38fb-b50f-ff2314091c31.roa (raw, json)
Hash identifier:          rwyxu4vR9wF1p4tATFJ1aBS7q0kfQNLREeTb6Uu9JQ8=
Subject key identifier:   DD:6F:86:A1:C6:FE:CF:81:AB:FB:64:C9:69:E1:11:1E:B7:E6:37:1E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B2C6398DB8FD903D34600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d310e856-45e2-38fb-b50f-ff2314091c31.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.31.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:2c:63:98:db:8f:d9:03:d3:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=f3f3aa92-1c84-4167-b4db-d39e4f2b7514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:9e:ce:1d:77:6a:c5:b4:15:19:68:59:7a:
                    60:17:a5:dc:30:94:e4:03:9b:f9:7b:68:e8:25:e5:
                    11:d3:66:8b:47:90:7d:0e:40:37:b0:7d:d3:19:a2:
                    56:7b:ce:34:5d:98:06:af:18:46:05:e0:f1:b3:52:
                    6c:55:bf:b5:09:c9:49:3d:55:06:e3:6d:82:91:46:
                    a4:e9:d1:c5:f8:77:9c:35:3f:a5:dc:63:1b:18:eb:
                    6e:c9:be:b1:9f:ae:be:33:32:ff:79:9c:fb:f7:ce:
                    29:1b:c4:3a:11:18:ad:6a:da:40:58:70:cc:b5:0f:
                    64:75:5a:20:fc:64:c3:3a:1e:23:38:6c:5b:fc:34:
                    32:b2:73:60:c1:6f:3e:d8:ae:24:76:ba:ca:97:a1:
                    88:cc:41:41:14:9f:3a:f5:fc:d6:38:0e:86:ab:cb:
                    16:6f:af:f4:af:8a:e7:14:b7:85:6f:ea:11:94:12:
                    de:fb:cf:eb:32:af:41:a8:52:22:6d:af:4d:eb:bf:
                    de:cd:24:5a:50:91:83:27:18:f9:08:b0:c4:07:09:
                    52:44:24:b8:e1:2f:49:68:33:ce:77:13:fe:ea:ee:
                    68:9e:36:75:97:4b:e7:d6:51:fe:3e:e6:af:50:94:
                    3a:e2:68:7e:c2:6b:97:73:49:b5:6e:31:98:6d:ed:
                    28:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6F:86:A1:C6:FE:CF:81:AB:FB:64:C9:69:E1:11:1E:B7:E6:37:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d310e856-45e2-38fb-b50f-ff2314091c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:93:43:e8:32:d3:72:c0:c0:57:4d:04:1b:22:50:68:d1:98:
         a3:78:06:89:8a:ca:a9:88:a4:80:93:f7:cc:b3:da:95:28:f1:
         f1:b3:e8:30:09:7f:75:15:4f:36:ad:b9:b2:fb:09:5b:99:7d:
         de:99:a5:f5:ea:5e:88:6b:ff:3f:8e:c7:16:d8:d6:d6:29:56:
         84:0e:74:ea:81:ec:6b:19:c7:6e:98:75:f8:3a:f0:ce:86:43:
         e6:34:68:d8:77:53:08:38:fb:d3:c7:4b:bf:46:3c:94:cf:98:
         27:55:e7:c6:df:b5:c1:b8:96:d7:ae:95:a7:89:36:61:92:2a:
         ed:46:e9:6f:75:08:b7:14:29:24:a0:4e:0e:61:9e:6a:24:fc:
         c1:8a:3e:fe:c3:f5:97:2e:9c:bb:2c:a2:91:16:9f:47:04:5f:
         80:10:41:d3:32:73:76:17:fa:b2:ab:d6:1c:53:ae:01:14:dc:
         12:d7:52:81:66:20:b9:2a:4d:72:37:98:2c:1a:4b:38:2c:54:
         ef:c2:e9:8a:4d:00:fc:a2:30:a4:9b:a2:71:d1:19:0d:94:de:
         67:ad:1d:92:3e:20:b8:b6:aa:30:71:50:62:7d:a5:0c:68:63:
         9e:19:cb:ff:85:5c:5d:f4:c6:ce:09:11:ab:b6:60:77:73:e2:
         b2:33:42:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FmyxjmNuP2QPTRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
ZjNmM2FhOTItMWM4NC00MTY3LWI0ZGItZDM5ZTRmMmI3NTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujOezh13asW0FRloWXpgF6XcMJTkA5v5e2jo
JeUR02aLR5B9DkA3sH3TGaJWe840XZgGrxhGBeDxs1JsVb+1CclJPVUG422CkUak
6dHF+HecNT+l3GMbGOtuyb6xn66+MzL/eZz7984pG8Q6ERitatpAWHDMtQ9kdVog
/GTDOh4jOGxb/DQysnNgwW8+2K4kdrrKl6GIzEFBFJ869fzWOA6Gq8sWb6/0r4rn
FLeFb+oRlBLe+8/rMq9BqFIiba9N67/ezSRaUJGDJxj5CLDEBwlSRCS44S9JaDPO
dxP+6u5onjZ1l0vn1lH+PuavUJQ64mh+wmuXc0m1bjGYbe0oGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1vhqHG/s+Bq/tkyWnhER635jceMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDMxMGU4NTYtNDVlMi0z
OGZiLWI1MGYtZmYyMzE0MDkxYzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR+qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABeTQ+gy03LAwFdNBBsiUGjRmKN4BomKyqmIpICT98yz2pUo8fGz6DAJ
f3UVTzatubL7CVuZfd6ZpfXqXohr/z+OxxbY1tYpVoQOdOqB7GsZx26Ydfg68M6G
Q+Y0aNh3Uwg4+9PHS79GPJTPmCdV58bftcG4lteulaeJNmGSKu1G6W91CLcUKSSg
Tg5hnmok/MGKPv7D9ZcunLssopEWn0cEX4AQQdMyc3YX+rKr1hxTrgEU3BLXUoFm
ILkqTXI3mCwaSzgsVO/C6YpNAPyiMKSbonHRGQ2U3metHZI+ILi2qjBxUGJ9pQxo
Y54Zy/+FXF30xs4JEau2YHdz4rIzQpw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:10:24 2026 by rpki-client