Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03c22dc6-cc2a-3381-9e3f-515c6d82e97f.roa
File:                     03c22dc6-cc2a-3381-9e3f-515c6d82e97f.roa (raw, json)
Hash identifier:          kRdF0m0pYGJJOfq7fd9Qvm4uf4/zlk2x1JJcfoHOM40=
Subject key identifier:   58:DD:6A:0B:C9:81:78:9E:B9:80:38:95:68:1C:AF:92:B6:89:13:11
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3DE23A214D5E869EAD9280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03c22dc6-cc2a-3381-9e3f-515c6d82e97f.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        173.30.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:e2:3a:21:4d:5e:86:9e:ad:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=ba0c0676-e9e8-42e0-a54c-b32a31465e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:9d:78:50:53:0a:b2:39:69:c2:dd:7a:a8:
                    c3:e7:08:f0:a5:71:0e:7a:8b:09:06:06:0f:b1:78:
                    79:0b:12:ec:8d:fb:3b:16:30:44:ee:84:eb:95:7d:
                    b4:9e:fe:be:69:56:47:6b:cb:b4:87:18:e2:2f:a1:
                    d3:42:d2:f7:fd:1d:c9:d9:09:d8:a4:78:51:e3:b6:
                    91:51:c6:19:b3:74:5b:fd:9d:d5:e9:98:30:04:ec:
                    80:0e:21:b7:0c:8b:9f:be:35:05:34:10:c7:1f:b4:
                    73:75:5b:45:85:43:f8:a9:a8:80:ae:e9:12:f3:d7:
                    86:2b:6c:08:97:b6:23:d6:da:57:d6:8f:22:0d:54:
                    36:56:aa:fe:f2:12:97:6b:99:d7:7f:a9:23:bf:7d:
                    89:ab:1f:00:0a:8b:d2:8b:57:3f:cc:89:a9:de:c5:
                    9c:84:b0:db:47:82:58:3e:34:62:ef:20:10:eb:d5:
                    f4:3c:0a:36:56:70:b1:66:cc:47:6a:86:f5:88:de:
                    9d:16:12:7a:f3:e9:dc:c6:cd:bb:6d:83:da:0e:8e:
                    2f:78:53:ba:2c:e2:66:cd:35:f3:e9:2b:02:29:77:
                    62:f9:fd:4d:72:f3:3a:44:0d:1a:81:34:1c:56:94:
                    15:d9:94:56:6d:29:a0:f5:9e:88:07:6b:06:8b:7c:
                    c5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DD:6A:0B:C9:81:78:9E:B9:80:38:95:68:1C:AF:92:B6:89:13:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03c22dc6-cc2a-3381-9e3f-515c6d82e97f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e5:f9:ff:8c:e2:e1:a6:1a:c3:f0:66:f8:32:76:3b:c6:17:
         d0:a8:52:29:8e:02:69:01:ba:1d:04:6f:5b:06:73:bd:ba:65:
         11:62:46:99:e0:e1:e3:8c:53:92:b7:79:2c:44:dc:ce:0b:90:
         53:80:6a:6a:cb:01:cc:44:8e:0a:db:9f:b8:f5:22:cb:39:56:
         7a:16:5a:26:a7:ef:de:c5:de:99:4b:2e:6a:8e:80:51:20:64:
         b8:d7:47:3f:24:6b:b2:62:db:36:7d:5b:5f:64:70:97:e1:aa:
         6a:9f:6b:88:8e:f8:b6:70:e2:13:38:f1:94:ba:fb:9b:16:41:
         3a:6f:c0:2e:1b:2a:de:6e:c1:2a:85:a6:6f:d1:50:80:9f:27:
         62:9f:2a:9c:e8:3f:92:81:9d:da:46:3e:ef:e7:c7:fb:f7:fa:
         a3:0a:39:b6:a1:0d:32:50:06:51:50:64:29:46:3a:27:8a:9e:
         54:0a:51:4a:09:de:f4:7c:04:eb:43:0c:aa:ef:2f:01:b5:78:
         25:aa:6b:2d:6a:70:fe:fc:b3:f9:7d:c7:95:79:06:38:75:cc:
         cb:c1:7d:73:ce:05:73:5d:bc:8c:54:49:36:e7:53:f0:58:e6:
         65:b4:6e:c8:2e:b0:f8:7d:b5:5f:d8:73:8e:11:47:a5:5a:c3:
         f9:b3:db:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeI6IU1ehp6tkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
YmEwYzA2NzYtZTllOC00MmUwLWE1NGMtYjMyYTMxNDY1ZTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofideFBTCrI5acLdeqjD5wjwpXEOeosJBgYP
sXh5CxLsjfs7FjBE7oTrlX20nv6+aVZHa8u0hxjiL6HTQtL3/R3J2QnYpHhR47aR
UcYZs3Rb/Z3V6ZgwBOyADiG3DIufvjUFNBDHH7RzdVtFhUP4qaiArukS89eGK2wI
l7Yj1tpX1o8iDVQ2Vqr+8hKXa5nXf6kjv32Jqx8ACovSi1c/zImp3sWchLDbR4JY
PjRi7yAQ69X0PAo2VnCxZsxHaob1iN6dFhJ68+ncxs27bYPaDo4veFO6LOJmzTXz
6SsCKXdi+f1NcvM6RA0agTQcVpQV2ZRWbSmg9Z6IB2sGi3zFjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFjdagvJgXieuYA4lWgcr5K2iRMRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDNjMjJkYzYtY2MyYS0z
MzgxLTllM2YtNTE1YzZkODJlOTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR5uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXl+f+M4uGmGsPwZvgydjvGF9CoUimOAmkBuh0Eb1sGc726ZRFiRpng
4eOMU5K3eSxE3M4LkFOAamrLAcxEjgrbn7j1Iss5VnoWWian797F3plLLmqOgFEg
ZLjXRz8ka7Ji2zZ9W19kcJfhqmqfa4iO+LZw4hM48ZS6+5sWQTpvwC4bKt5uwSqF
pm/RUICfJ2KfKpzoP5KBndpGPu/nx/v3+qMKObahDTJQBlFQZClGOieKnlQKUUoJ
3vR8BOtDDKrvLwG1eCWqay1qcP78s/l9x5V5Bjh1zMvBfXPOBXNdvIxUSTbnU/BY
5mW0bsgusPh9tV/Yc44RR6Vaw/mz2yM=
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:12:56 2026 by rpki-client