Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/410c1163-2e78-3905-80ed-bca90211e7dd.roa
File:                     410c1163-2e78-3905-80ed-bca90211e7dd.roa (raw, json)
Hash identifier:          GjVJTMyESMQ+go0TzYJOp+TwTIDb8zmvoAgVAN62InI=
Subject key identifier:   D0:2C:5D:A4:09:D7:36:95:B2:0F:23:6E:4D:F6:38:71:AF:0A:F4:9D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AAC1301DC0286A95260580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/410c1163-2e78-3905-80ed-bca90211e7dd.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.30.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:c1:30:1d:c0:28:6a:95:26:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=17dc7c65-ca74-4b19-ba2e-24a76f267ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:d8:bc:ab:78:56:62:51:11:93:9a:b7:0a:
                    a9:da:7e:ef:b4:1d:8a:14:d0:8d:d3:d3:ee:ad:ab:
                    18:9f:d5:78:56:39:06:a9:82:2e:af:39:8f:b4:9f:
                    9e:a8:1d:24:dd:83:7d:c9:2f:45:1c:8c:10:3d:42:
                    c0:ad:6f:c0:3b:15:71:c2:60:ef:65:40:d7:42:72:
                    3a:25:4a:42:c9:ac:08:c8:45:a9:eb:42:e9:72:be:
                    4e:1b:e2:f7:32:d2:28:69:9d:15:7e:82:fa:9f:ff:
                    48:8b:cd:74:fc:d9:74:52:a5:5c:12:a1:b8:01:b8:
                    2e:78:90:ea:e6:b6:b8:09:b9:8e:52:6c:dd:a9:93:
                    83:de:05:b8:38:6f:90:7a:69:17:15:42:59:de:29:
                    42:0e:b8:db:88:0b:80:c2:f5:dd:d2:7a:f9:ea:d7:
                    07:a6:44:92:7a:3f:e8:20:32:67:5e:eb:61:12:60:
                    cb:65:1b:f6:72:d5:f0:14:43:3b:7a:9c:54:b9:da:
                    69:5c:ce:fc:70:b2:3c:b8:2d:74:d9:f6:35:c8:c3:
                    a3:11:bd:9c:95:11:28:91:64:66:ec:2b:d9:c5:89:
                    84:70:30:69:10:91:76:93:36:78:1c:7d:df:db:70:
                    d6:fa:59:01:d9:87:89:5a:ae:8a:60:b8:72:b6:4f:
                    30:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2C:5D:A4:09:D7:36:95:B2:0F:23:6E:4D:F6:38:71:AF:0A:F4:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/410c1163-2e78-3905-80ed-bca90211e7dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:43:6b:c8:27:5e:9f:14:06:e5:9d:23:1f:e6:90:a8:09:5f:
         d5:4e:ff:0c:56:5c:72:6b:95:10:12:b9:9d:e3:c9:5f:d6:bd:
         c0:70:5a:38:83:b2:34:d2:5c:70:fa:9f:49:3e:e8:3f:c5:ed:
         e6:a4:54:21:f2:09:f0:04:24:e8:e5:f4:8b:c6:f3:69:65:d3:
         aa:b3:53:be:94:7d:0d:22:32:e7:03:83:38:88:f3:b4:e8:4a:
         da:17:4e:4c:48:60:46:64:d2:7a:f0:af:a7:80:c0:1c:24:bf:
         a0:c6:3f:cb:01:0f:59:b0:bd:25:b6:97:ef:9c:52:fa:de:81:
         79:d1:a2:1d:ba:96:7e:53:ea:20:aa:44:5f:c5:8a:02:02:3d:
         ac:1d:ad:f1:8b:bf:46:d0:7a:bf:bb:4a:bd:a8:9b:40:b1:4c:
         e2:c3:14:0e:18:a7:11:04:74:e6:64:9b:a1:f8:27:46:3c:26:
         27:ff:34:c8:66:9e:47:a1:30:ee:2a:14:9c:6d:2a:05:e4:fc:
         6a:07:a3:82:c6:d5:c2:a6:e1:66:5b:9d:4d:fd:f5:bf:80:58:
         71:ca:f6:cf:fa:87:49:b9:eb:bf:d5:c3:9d:1f:74:d1:c7:80:
         90:87:1e:13:a0:cf:69:6c:d5:d7:af:13:61:9c:89:29:57:3c:
         f8:be:8e:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqsEwHcAoapUmBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
MTdkYzdjNjUtY2E3NC00YjE5LWJhMmUtMjRhNzZmMjY3ZWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswXYvKt4VmJREZOatwqp2n7vtB2KFNCN09Pu
rasYn9V4VjkGqYIurzmPtJ+eqB0k3YN9yS9FHIwQPULArW/AOxVxwmDvZUDXQnI6
JUpCyawIyEWp60Lpcr5OG+L3MtIoaZ0VfoL6n/9Ii810/Nl0UqVcEqG4AbgueJDq
5ra4CbmOUmzdqZOD3gW4OG+QemkXFUJZ3ilCDrjbiAuAwvXd0nr56tcHpkSSej/o
IDJnXuthEmDLZRv2ctXwFEM7epxUudppXM78cLI8uC102fY1yMOjEb2clREokWRm
7CvZxYmEcDBpEJF2kzZ4HH3f23DW+lkB2YeJWq6KYLhytk8wrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAsXaQJ1zaVsg8jbk32OHGvCvSdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDEwYzExNjMtMmU3OC0z
OTA1LTgwZWQtYmNhOTAyMTFlN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR6CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJDa8gnXp8UBuWdIx/mkKgJX9VO/wxWXHJrlRASuZ3jyV/WvcBwWjiD
sjTSXHD6n0k+6D/F7eakVCHyCfAEJOjl9IvG82ll06qzU76UfQ0iMucDgziI87To
StoXTkxIYEZk0nrwr6eAwBwkv6DGP8sBD1mwvSW2l++cUvregXnRoh26ln5T6iCq
RF/FigICPawdrfGLv0bQer+7Sr2om0CxTOLDFA4YpxEEdOZkm6H4J0Y8Jif/NMhm
nkehMO4qFJxtKgXk/GoHo4LG1cKm4WZbnU399b+AWHHK9s/6h0m567/Vw50fdNHH
gJCHHhOgz2ls1devE2GciSlXPPi+jj4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:24 2026 by rpki-client