Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa
File:                     24927ac0-57fd-3657-99af-1a39e1c9e829.roa (raw, json)
Hash identifier:          mJTwtVH5oJa/StQljrth94q8cHbMqv7bPPRCitBtxE4=
Subject key identifier:   DD:C9:3C:34:29:E0:C9:F0:63:25:17:1F:35:5D:DF:BE:D0:A5:27:74
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E815F89983CC299239CC8F3C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     30036
IP address blocks:        173.17.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:89:98:3c:c2:99:23:9c:c8:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=1a99c0e4-a829-40a1-a9b1-b6f425654b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:e5:9f:78:79:51:22:f3:71:08:86:5a:a3:
                    88:d4:6f:cd:90:c7:a3:44:b3:b6:61:b8:a3:7b:e3:
                    5c:14:ae:3f:20:89:1c:d0:bc:74:15:f9:80:5c:84:
                    42:4a:43:20:fd:0d:12:e2:50:b8:9c:cb:8f:ed:56:
                    b0:69:89:35:42:26:15:eb:f4:2d:9d:57:66:95:8e:
                    68:81:9c:70:53:0a:f6:36:1c:8b:53:b0:cd:b0:f4:
                    49:67:a3:f0:57:ef:50:78:1c:74:a4:23:fd:97:28:
                    4c:e4:9b:1b:8c:07:6f:22:97:e2:cf:1f:31:c0:d7:
                    a3:ad:34:c1:3b:e3:17:20:43:e0:44:d6:ea:be:d7:
                    67:9f:0c:43:e3:d0:63:fe:1c:7c:b5:c8:5a:0f:52:
                    38:9f:2c:69:df:23:a6:48:b6:52:75:cb:a3:f3:d4:
                    6f:8f:04:98:4e:54:19:0a:d2:f0:16:d4:5d:33:ef:
                    10:76:7d:60:2c:ba:49:93:31:f2:ab:38:ef:3f:ab:
                    9f:09:65:0a:ac:5d:31:6d:8e:85:b0:6f:dd:61:4b:
                    f2:15:cb:30:d9:d9:f3:4f:94:d1:6a:cb:af:8d:63:
                    39:1b:50:66:5f:4e:88:5f:11:73:8b:6a:9c:c9:ae:
                    bd:56:c1:4d:24:11:d4:9c:2a:fd:c4:a5:2d:7b:a9:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C9:3C:34:29:E0:C9:F0:63:25:17:1F:35:5D:DF:BE:D0:A5:27:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:91:0b:bd:94:11:d8:bc:1d:fe:f7:ad:11:19:d3:9f:5f:
         dc:b5:e0:26:e3:2b:e9:a0:4a:8d:88:1f:14:2a:42:f5:08:a9:
         b3:54:13:9a:11:93:30:5e:df:c4:01:d8:a9:02:c4:b8:71:48:
         4a:00:dd:fa:ef:54:35:44:1f:20:6c:07:51:3b:3c:d7:7c:68:
         bb:90:7a:27:84:dc:1b:3e:b8:26:23:35:53:b9:d7:90:69:1d:
         9a:7c:aa:53:f3:67:e9:83:ff:92:01:fd:42:b3:8f:b5:db:5c:
         95:4c:fa:ad:76:48:79:05:ec:e3:3d:dd:b3:51:a3:f6:59:8a:
         57:a3:84:47:0e:62:b8:60:b5:3e:6f:2a:7d:e4:bb:ae:85:92:
         2a:9a:86:6a:81:24:e4:20:b5:5c:4e:8a:93:10:5e:60:bc:92:
         44:f8:f5:40:d0:bc:5c:1c:1d:52:50:69:2b:c8:da:4f:e2:a0:
         e7:83:2d:bb:9c:11:bf:cd:08:bc:fc:85:e6:90:ef:6e:b6:dd:
         a7:5f:df:dd:f1:50:24:ae:1b:62:02:a6:ef:a8:94:1f:63:cd:
         d7:cc:cf:0e:50:99:50:10:33:57:01:40:b9:b3:d1:d7:bf:7b:
         3c:fd:9e:37:24:00:ac:43:82:1b:ce:bd:ea:ed:2f:40:74:d4:
         e8:83:78:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX4mYPMKZI5zI88AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
MWE5OWMwZTQtYTgyOS00MGExLWE5YjEtYjZmNDI1NjU0YjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyPln3h5USLzcQiGWqOI1G/NkMejRLO2Ybij
e+NcFK4/IIkc0Lx0FfmAXIRCSkMg/Q0S4lC4nMuP7VawaYk1QiYV6/QtnVdmlY5o
gZxwUwr2NhyLU7DNsPRJZ6PwV+9QeBx0pCP9lyhM5JsbjAdvIpfizx8xwNejrTTB
O+MXIEPgRNbqvtdnnwxD49Bj/hx8tchaD1I4nyxp3yOmSLZSdcuj89RvjwSYTlQZ
CtLwFtRdM+8Qdn1gLLpJkzHyqzjvP6ufCWUKrF0xbY6FsG/dYUvyFcsw2dnzT5TR
asuvjWM5G1BmX06IXxFzi2qcya69VsFNJBHUnCr9xKUte6khIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3JPDQp4MnwYyUXHzVd377QpSd0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjQ5MjdhYzAtNTdmZC0z
NjU3LTk5YWYtMWEzOWUxYzllODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRElMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADmukQu9lBHYvB3+960RGdOfX9y14CbjK+mgSo2IHxQqQvUIqbNUE5oR
kzBe38QB2KkCxLhxSEoA3frvVDVEHyBsB1E7PNd8aLuQeieE3Bs+uCYjNVO515Bp
HZp8qlPzZ+mD/5IB/UKzj7XbXJVM+q12SHkF7OM93bNRo/ZZilejhEcOYrhgtT5v
Kn3ku66FkiqahmqBJOQgtVxOipMQXmC8kkT49UDQvFwcHVJQaSvI2k/ioOeDLbuc
Eb/NCLz8heaQ72623adf393xUCSuG2ICpu+olB9jzdfMzw5QmVAQM1cBQLmz0de/
ezz9njckAKxDghvOvertL0B01OiDeOI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:51:40 2026 by rpki-client