Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db92a908-6801-3164-911b-959f6161a9b9.roa
File:                     db92a908-6801-3164-911b-959f6161a9b9.roa (raw, json)
Hash identifier:          /LEWuIyQWgIUqGihHZHL/wkGCoXU40cDDFS5hK4o/lM=
Subject key identifier:   8E:48:D7:C6:AD:54:8E:40:FC:C1:33:23:4D:AA:D2:71:1E:8A:0F:C6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81463E2181589992D0149220
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db92a908-6801-3164-911b-959f6161a9b9.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.21.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:3e:21:81:58:99:92:d0:14:92:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=ef30cd47-1af4-4126-89c7-281045c06564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:40:28:08:81:35:6d:78:a0:89:bc:59:9f:26:
                    39:94:6c:a8:6e:af:62:93:c7:6f:31:e9:0d:3d:c4:
                    5c:69:da:c3:d3:5b:e3:dd:5a:2e:1a:b5:e9:cf:6c:
                    9f:6b:f1:d9:f6:4e:24:df:84:cb:43:79:12:69:ea:
                    01:3e:5f:c1:7d:26:f6:d1:43:f6:98:83:c3:ac:fe:
                    44:ee:34:1c:fb:14:7f:72:ff:66:e4:63:a8:66:c1:
                    02:a4:24:a3:f9:63:a2:dc:61:7c:4b:3e:ed:51:55:
                    b8:10:d0:95:4a:1a:fe:7f:4d:e0:9c:5d:b9:2f:b4:
                    0b:26:cd:c1:1e:73:c7:35:dc:51:ef:b6:55:54:38:
                    96:96:82:05:95:73:b3:37:9c:32:e3:63:4c:2e:ab:
                    5f:5c:b2:2c:1d:9f:04:a1:70:43:ff:e7:58:75:a0:
                    87:fd:8f:68:f1:dd:da:91:0f:f0:47:dd:01:ed:ef:
                    ea:d4:95:2c:d8:93:7a:5d:64:81:aa:61:b6:17:3a:
                    bd:16:e0:b3:d1:8c:7e:88:55:87:b4:a6:e8:b1:4c:
                    95:8b:7f:2f:76:c5:22:4f:a3:a2:6d:95:a9:8b:d8:
                    71:80:75:97:df:db:2d:24:7a:f2:fa:e0:e7:8a:54:
                    74:bc:ec:85:c7:53:e3:78:88:94:11:53:fd:06:38:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:48:D7:C6:AD:54:8E:40:FC:C1:33:23:4D:AA:D2:71:1E:8A:0F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db92a908-6801-3164-911b-959f6161a9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:37:e1:08:15:f0:9d:cd:88:83:df:55:c3:b2:8b:3a:2b:ee:
         63:aa:c7:f7:56:9c:86:f5:35:99:89:e7:ca:76:df:23:07:bc:
         d8:4f:af:ef:89:03:00:05:4f:85:33:55:7f:dd:02:50:e3:7e:
         15:c1:32:e6:db:9e:18:db:96:42:de:9b:60:15:d2:83:c5:19:
         04:b9:5e:df:0b:82:aa:62:96:a9:8d:2d:0d:3c:28:99:99:7f:
         bf:70:9d:cd:98:fe:5e:7f:86:aa:d7:09:99:da:66:e2:fd:50:
         62:74:73:1b:41:50:5e:e9:55:64:54:30:ca:bb:63:d8:e5:d8:
         0a:e6:6f:60:a2:96:1e:ad:c6:0a:ac:1b:3f:1a:45:0d:20:c5:
         31:4f:e3:05:d9:3b:c1:df:62:21:08:15:b2:de:63:b2:04:d4:
         6f:98:75:d6:f7:b4:04:5b:66:8e:7a:2a:a1:49:9d:1c:b8:db:
         eb:01:3c:0e:c6:e7:f1:58:2c:b7:2e:75:28:1a:3a:9d:df:8e:
         85:89:f3:15:88:66:aa:10:6b:21:09:29:ae:6c:8e:0b:36:43:
         e3:f8:3a:2e:38:68:ab:dc:27:bc:cf:43:1c:0d:06:9c:b7:85:
         84:7e:10:ff:76:bb:43:af:9a:34:c4:a4:ed:de:db:bb:0a:c4:
         a1:f9:ae:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRj4hgViZktAUkiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
ZWYzMGNkNDctMWFmNC00MTI2LTg5YzctMjgxMDQ1YzA2NTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0AoCIE1bXigibxZnyY5lGyobq9ik8dvMekN
PcRcadrD01vj3VouGrXpz2yfa/HZ9k4k34TLQ3kSaeoBPl/BfSb20UP2mIPDrP5E
7jQc+xR/cv9m5GOoZsECpCSj+WOi3GF8Sz7tUVW4ENCVShr+f03gnF25L7QLJs3B
HnPHNdxR77ZVVDiWloIFlXOzN5wy42NMLqtfXLIsHZ8EoXBD/+dYdaCH/Y9o8d3a
kQ/wR90B7e/q1JUs2JN6XWSBqmG2Fzq9FuCz0Yx+iFWHtKbosUyVi38vdsUiT6Oi
bZWpi9hxgHWX39stJHry+uDnilR0vOyFx1PjeIiUEVP9BjjWvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI5I18atVI5A/MEzI02q0nEeig/GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGI5MmE5MDgtNjgwMS0z
MTY0LTkxMWItOTU5ZjYxNjFhOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQ34QgV8J3NiIPfVcOyizor7mOqx/dWnIb1NZmJ58p23yMHvNhPr++J
AwAFT4UzVX/dAlDjfhXBMubbnhjblkLem2AV0oPFGQS5Xt8LgqpilqmNLQ08KJmZ
f79wnc2Y/l5/hqrXCZnaZuL9UGJ0cxtBUF7pVWRUMMq7Y9jl2Armb2Cilh6txgqs
Gz8aRQ0gxTFP4wXZO8HfYiEIFbLeY7IE1G+Yddb3tARbZo56KqFJnRy42+sBPA7G
5/FYLLcudSgaOp3fjoWJ8xWIZqoQayEJKa5sjgs2Q+P4Oi44aKvcJ7zPQxwNBpy3
hYR+EP92u0OvmjTEpO3e27sKxKH5roo=
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:18 2025 by rpki-client