Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d434fc45-3a8d-3209-ad15-806cf9da7ca2.roa
File:                     d434fc45-3a8d-3209-ad15-806cf9da7ca2.roa (raw, json)
Hash identifier:          pA9RPAJOfT9dczHqbId/3g2IFNVULigFqY7N8fb1TOM=
Subject key identifier:   3B:72:44:AE:0D:F4:6D:C4:A5:35:98:D0:E6:01:14:BC:94:E0:CC:87
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410C9B31C53045241DA66A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d434fc45-3a8d-3209-ad15-806cf9da7ca2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.23.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c9:b3:1c:53:04:52:41:da:66:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=308748f0-4376-483a-80d6-607e0b6c6a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:a5:8e:f7:fc:57:3b:4d:cf:91:bf:eb:c4:
                    6f:a9:bf:d5:8f:00:05:94:31:14:1e:95:69:d0:2e:
                    72:2a:4b:4a:71:0e:0f:2b:0c:74:ac:3c:01:ba:9e:
                    0f:b0:1f:26:ff:b6:ad:a1:d7:f9:e9:9d:43:bd:0f:
                    88:c4:ea:4a:06:af:4f:dc:90:b2:c6:ed:5e:1e:a0:
                    5b:65:95:dc:ee:89:46:5d:af:3a:28:62:14:be:96:
                    41:88:3c:97:e8:60:e6:48:fd:26:ed:bd:3b:36:45:
                    6e:1c:89:49:1f:b6:28:3a:1c:a2:0b:8e:61:f6:f0:
                    ee:8e:8e:39:5b:8d:4d:2f:78:e0:32:97:fe:14:4a:
                    ba:7c:94:df:63:b1:75:a5:2b:ca:90:9e:b4:29:34:
                    db:05:de:a0:0a:4a:5d:e2:19:b1:f2:cd:d5:f8:a4:
                    89:75:79:4e:db:1a:f1:d3:d0:1e:ac:73:59:c8:ec:
                    14:8a:f2:f0:19:50:e2:cc:aa:71:c7:dd:31:2f:23:
                    7a:16:d7:9d:fa:c4:22:94:8c:5d:73:17:61:4a:af:
                    52:61:7b:ec:4d:2e:9f:4c:d0:07:3a:5f:0d:17:a4:
                    2e:bd:c3:11:bb:87:84:55:ad:17:8e:d6:ad:a3:a9:
                    60:61:35:45:03:5a:75:db:5d:e5:29:68:1e:12:44:
                    5d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:72:44:AE:0D:F4:6D:C4:A5:35:98:D0:E6:01:14:BC:94:E0:CC:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d434fc45-3a8d-3209-ad15-806cf9da7ca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a0:65:df:4d:dc:b7:8f:5b:c0:f7:6b:91:06:68:fe:7a:6b:
         89:a6:c1:2d:85:b5:12:da:aa:8f:ae:d4:86:8b:d6:e8:dc:f5:
         57:05:1b:57:66:9b:e1:35:a0:43:cd:82:4c:75:9b:32:2b:2b:
         75:c5:e4:09:5b:c3:6d:f3:05:88:f9:78:a3:92:1c:0e:4a:2e:
         d4:f1:13:eb:cc:40:e6:54:bd:21:99:f6:37:11:2c:74:16:6b:
         e0:61:7d:63:b3:b4:f4:2e:23:63:18:ca:72:3e:2a:65:8a:ae:
         ad:8d:b2:f2:87:6b:ff:06:3f:bc:01:a5:1c:5d:01:6b:15:3b:
         eb:96:2c:3a:1f:f8:ed:bd:d4:0b:96:7c:93:79:56:a6:10:13:
         ff:3b:b4:5f:43:f8:f8:98:47:31:74:6c:bf:00:5b:ad:4a:63:
         f6:c1:e2:27:da:ae:0e:a0:45:90:25:74:2c:4c:c9:42:5c:ff:
         c6:85:40:74:5d:0f:40:4d:43:a3:39:53:2f:a5:4f:35:bc:8c:
         15:9e:34:0a:a2:b1:48:31:8f:54:aa:d5:9a:83:be:79:e0:f2:
         61:26:4e:74:84:01:c6:15:d4:64:17:ab:d6:d4:4b:1e:f0:8d:
         43:e9:fb:a1:19:01:23:04:bc:c1:e1:d3:2f:06:22:33:cd:d9:
         5e:4c:9e:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEMmzHFMEUkHaZqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MzA4NzQ4ZjAtNDM3Ni00ODNhLTgwZDYtNjA3ZTBiNmM2YTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhWljvf8VztNz5G/68Rvqb/VjwAFlDEUHpVp
0C5yKktKcQ4PKwx0rDwBup4PsB8m/7atodf56Z1DvQ+IxOpKBq9P3JCyxu1eHqBb
ZZXc7olGXa86KGIUvpZBiDyX6GDmSP0m7b07NkVuHIlJH7YoOhyiC45h9vDujo45
W41NL3jgMpf+FEq6fJTfY7F1pSvKkJ60KTTbBd6gCkpd4hmx8s3V+KSJdXlO2xrx
09AerHNZyOwUivLwGVDizKpxx90xLyN6Fted+sQilIxdcxdhSq9SYXvsTS6fTNAH
Ol8NF6QuvcMRu4eEVa0Xjtato6lgYTVFA1p1213lKWgeEkRdPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDtyRK4N9G3EpTWY0OYBFLyU4MyHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQzNGZjNDUtM2E4ZC0z
MjA5LWFkMTUtODA2Y2Y5ZGE3Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRdLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6gZd9N3LePW8D3a5EGaP56a4mmwS2FtRLaqo+u1IaL1ujc9VcFG1dm
m+E1oEPNgkx1mzIrK3XF5Albw23zBYj5eKOSHA5KLtTxE+vMQOZUvSGZ9jcRLHQW
a+BhfWOztPQuI2MYynI+KmWKrq2NsvKHa/8GP7wBpRxdAWsVO+uWLDof+O291AuW
fJN5VqYQE/87tF9D+PiYRzF0bL8AW61KY/bB4ifarg6gRZAldCxMyUJc/8aFQHRd
D0BNQ6M5Uy+lTzW8jBWeNAqisUgxj1Sq1ZqDvnng8mEmTnSEAcYV1GQXq9bUSx7w
jUPp+6EZASMEvMHh0y8GIjPN2V5Mnl4=
-----END CERTIFICATE-----
Generated at Wed Aug 6 03:59:41 2025 by rpki-client