Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0da73f8-f77c-3e4d-8a4c-a442e64eee43.roa
File:                     e0da73f8-f77c-3e4d-8a4c-a442e64eee43.roa (raw, json)
Hash identifier:          khCNzh758MM3XOrdL9y/UvfYLkrUE2mNpAy5SuTvVlI=
Subject key identifier:   78:75:99:E6:DC:AC:B1:84:11:39:DF:9D:F3:BD:8A:2B:C8:EA:91:76
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81463BECA206EBFA9812974A
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0da73f8-f77c-3e4d-8a4c-a442e64eee43.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        173.27.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:3b:ec:a2:06:eb:fa:98:12:97:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=dfe81b1e-92f8-4cab-8856-f4b845d36232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:ef:5d:3d:80:12:e9:a5:8d:bd:33:f6:f4:
                    bf:57:3d:66:a2:cd:a1:0d:c7:b5:76:fb:43:0e:29:
                    6c:5a:c3:9e:1b:ef:35:6c:6c:df:af:c2:67:45:29:
                    99:7e:5d:b6:bb:56:94:2b:92:c8:69:9d:c7:40:52:
                    05:f6:dc:1b:2e:e6:1f:da:15:a4:92:10:8d:78:06:
                    46:0a:5b:6d:33:a8:73:e8:4b:2f:e8:83:fd:c9:e4:
                    c2:e5:2c:7a:be:ae:7e:7f:b8:17:3d:36:c7:51:28:
                    3d:8e:f6:27:76:11:fe:36:36:89:fd:22:a4:57:2c:
                    46:48:91:f1:1e:8e:a5:89:c6:2b:59:6e:7c:53:0b:
                    e0:16:0a:7a:e2:38:2c:41:64:af:50:60:7b:30:a5:
                    ad:20:de:89:10:09:7a:49:ed:11:05:c4:43:90:d0:
                    98:34:02:f1:b6:6d:31:3d:d6:9c:43:f4:25:68:19:
                    85:98:b6:e3:08:d2:d3:b1:85:2a:0c:d3:8f:2d:9c:
                    bf:c3:3c:bc:d2:db:54:c0:be:46:35:ec:10:72:3d:
                    22:85:e0:be:aa:97:e3:b4:a7:6b:38:af:92:b2:01:
                    e8:b3:5b:0f:48:08:54:8c:cc:73:f9:69:a6:64:fc:
                    46:d8:4b:ae:46:e2:cc:04:8d:dc:3a:6e:94:bb:71:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:75:99:E6:DC:AC:B1:84:11:39:DF:9D:F3:BD:8A:2B:C8:EA:91:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0da73f8-f77c-3e4d-8a4c-a442e64eee43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:5c:0d:99:f3:99:2b:17:0f:a9:f5:ec:be:1f:3d:33:89:53:
         fc:04:2c:4c:9e:f0:f2:9c:7c:73:72:48:dc:a8:6d:28:fc:d7:
         bb:39:25:ee:ca:4d:65:af:de:20:c8:77:6b:80:6a:11:9f:5a:
         aa:0f:0c:b2:14:92:42:fd:cc:97:13:e2:80:c6:e2:f5:3a:a8:
         ac:62:d2:29:95:da:81:f9:e2:2a:f7:eb:1e:74:00:14:c1:9d:
         fe:84:de:7a:9d:6e:70:44:82:c3:fc:9f:ca:6c:e3:c1:d8:89:
         9c:5d:dd:7b:6e:42:99:6f:60:70:9e:ab:52:20:7a:36:0a:f3:
         08:55:ee:a2:90:34:48:1e:50:5c:0d:ef:b6:b2:b6:19:28:b9:
         07:3d:61:9c:d5:80:f1:1d:a7:eb:d2:52:9c:d0:b1:df:e9:ee:
         cb:ab:c0:b2:b1:c2:11:79:7a:7b:c1:67:28:31:db:70:b2:2b:
         8a:c7:44:ac:f5:33:fa:a0:14:d0:51:45:2c:80:de:cb:20:a8:
         7a:c2:bc:76:a9:eb:ef:8f:45:c9:4d:2d:1f:a5:76:58:8b:ae:
         94:2b:b1:35:e1:7a:35:d6:eb:d9:ac:6a:95:d7:6e:32:67:93:
         13:94:3c:95:3e:39:bd:51:54:f9:16:7a:98:39:ba:66:2b:d3:
         f7:2b:90:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRjvsogbr+pgSl0owDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
ZGZlODFiMWUtOTJmOC00Y2FiLTg4NTYtZjRiODQ1ZDM2MjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfvvXT2AEumljb0z9vS/Vz1mos2hDce1dvtD
DilsWsOeG+81bGzfr8JnRSmZfl22u1aUK5LIaZ3HQFIF9twbLuYf2hWkkhCNeAZG
ClttM6hz6Esv6IP9yeTC5Sx6vq5+f7gXPTbHUSg9jvYndhH+NjaJ/SKkVyxGSJHx
Ho6licYrWW58UwvgFgp64jgsQWSvUGB7MKWtIN6JEAl6Se0RBcRDkNCYNALxtm0x
PdacQ/QlaBmFmLbjCNLTsYUqDNOPLZy/wzy80ttUwL5GNewQcj0iheC+qpfjtKdr
OK+SsgHos1sPSAhUjMxz+WmmZPxG2EuuRuLMBI3cOm6Uu3FqyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHh1mebcrLGEETnfnfO9iivI6pF2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTBkYTczZjgtZjc3Yy0z
ZTRkLThhNGMtYTQ0MmU2NGVlZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRtiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxcDZnzmSsXD6n17L4fPTOJU/wELEye8PKcfHNySNyobSj817s5Je7K
TWWv3iDId2uAahGfWqoPDLIUkkL9zJcT4oDG4vU6qKxi0imV2oH54ir36x50ABTB
nf6E3nqdbnBEgsP8n8ps48HYiZxd3XtuQplvYHCeq1IgejYK8whV7qKQNEgeUFwN
77aythkouQc9YZzVgPEdp+vSUpzQsd/p7surwLKxwhF5envBZygx23CyK4rHRKz1
M/qgFNBRRSyA3ssgqHrCvHap6++PRclNLR+ldliLrpQrsTXhejXW69msapXXbjJn
kxOUPJU+Ob1RVPkWepg5umYr0/crkGc=
-----END CERTIFICATE-----
Generated at Tue Aug 5 22:57:24 2025 by rpki-client