Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c2e012-ec24-3b74-99b3-c9a272ffd49e.roa
File:                     53c2e012-ec24-3b74-99b3-c9a272ffd49e.roa (raw, json)
Hash identifier:          9hfAijJT/Vv5DzT2C9QalpeTBoZuo3BkrpC33t6Rr1k=
Subject key identifier:   DC:6B:4D:74:C3:D6:F0:20:16:C4:7D:57:C8:07:86:82:3E:98:65:33
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D2B0F6CBBABC22F9CA78B6A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c2e012-ec24-3b74-99b3-c9a272ffd49e.roa
Signing time:             Sat 14 Mar 2026 18:12:25 +0000
ROA not before:           Sat 14 Mar 2026 18:12:25 +0000
ROA not after:            Fri 12 Jun 2026 18:12:25 +0000
asID:                     30036
IP address blocks:        173.17.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:0f:6c:bb:ab:c2:2f:9c:a7:8b:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 14 18:12:25 2026 GMT
            Not After : Jun 12 18:12:25 2026 GMT
        Subject: CN=d1bb2e11-b1b2-4976-ae06-8f7e71e28e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:77:a8:cb:18:25:ab:4d:0b:c7:3e:26:4f:
                    90:00:92:d1:f0:54:ef:de:45:ac:f7:7f:1e:2c:25:
                    8d:dc:55:c4:75:5d:c5:fa:76:f3:05:8c:21:33:c2:
                    9a:c7:b4:8b:ec:e6:b0:59:11:85:14:bd:31:86:16:
                    47:87:ed:93:86:3a:f1:03:cf:dc:f4:c0:15:8d:5f:
                    ea:87:3a:b6:63:e1:49:5e:0c:ef:a4:02:91:43:59:
                    b1:16:a5:ca:a1:43:6a:d2:aa:4d:a5:50:c5:3e:04:
                    6c:05:45:ea:97:07:e9:0d:8c:ed:f6:32:17:b3:62:
                    b3:82:0d:2b:c7:69:cc:bb:40:69:89:13:c2:09:23:
                    ac:66:a5:39:f1:55:f7:e0:43:ca:37:a3:a3:c1:96:
                    2d:d7:b8:06:39:c5:bb:a6:3a:14:36:a8:7c:e9:83:
                    26:cf:a3:34:05:94:95:00:da:03:a9:fd:d9:c5:17:
                    18:5d:47:cf:3b:9a:0d:91:4b:e8:e9:2d:35:86:7c:
                    95:0d:02:3e:97:73:52:d1:fd:02:70:68:c1:91:ea:
                    b9:01:c6:c4:34:b8:c0:2f:d4:36:9b:e8:99:ea:94:
                    50:a9:4c:99:c4:5a:a0:ad:ce:f2:cc:8f:11:4a:75:
                    b5:bf:c2:d2:ec:5a:38:f5:31:27:e2:6c:ae:e7:32:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6B:4D:74:C3:D6:F0:20:16:C4:7D:57:C8:07:86:82:3E:98:65:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c2e012-ec24-3b74-99b3-c9a272ffd49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:a1:df:af:cc:f9:e2:9d:74:ff:04:44:34:e1:41:ed:72:
         6d:6d:dd:0b:24:bd:47:22:d4:2c:68:3b:13:66:60:ff:fd:c0:
         fb:7d:c7:c6:e1:70:c4:8f:ff:d3:ca:6a:35:f2:1c:cc:18:db:
         fe:60:61:1b:d1:f0:c8:1d:fc:f4:5b:30:5b:61:ab:70:0d:92:
         fb:d9:e0:7b:91:e5:fc:dd:2e:53:c9:fe:0d:18:f7:ec:1d:a2:
         00:0c:34:9d:4f:36:fc:8d:94:07:7f:08:00:87:36:50:e9:11:
         21:52:d2:9c:97:cb:17:5f:89:8d:7c:e0:c6:33:d2:f7:70:c3:
         04:3b:8d:c0:18:66:3b:64:83:b0:cc:51:a2:d8:cf:a0:75:d2:
         db:14:20:ba:80:dd:ef:d7:48:f1:b2:cc:49:46:91:34:21:44:
         6e:0c:1c:23:8a:e8:fe:fe:17:6c:3a:17:96:d7:9a:13:e4:0e:
         72:33:83:18:25:48:5a:de:93:bf:68:c7:4d:65:ef:69:b2:bd:
         f1:28:65:64:09:ce:b2:e0:f9:eb:27:7f:cc:0f:d8:b2:5f:46:
         ab:4a:c8:5d:16:8e:e1:61:df:11:0c:05:3c:40:8b:fc:f9:92:
         1c:4b:1b:a0:4f:80:ed:1a:3b:cc:3c:de:ed:90:45:d2:6d:57:
         a5:49:6b:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0rD2y7q8IvnKeLagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxNDE4MTIyNVoXDTI2MDYxMjE4MTIyNVowLzEtMCsGA1UEAxMk
ZDFiYjJlMTEtYjFiMi00OTc2LWFlMDYtOGY3ZTcxZTI4ZTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTR3qMsYJatNC8c+Jk+QAJLR8FTv3kWs938e
LCWN3FXEdV3F+nbzBYwhM8Kax7SL7OawWRGFFL0xhhZHh+2ThjrxA8/c9MAVjV/q
hzq2Y+FJXgzvpAKRQ1mxFqXKoUNq0qpNpVDFPgRsBUXqlwfpDYzt9jIXs2Kzgg0r
x2nMu0BpiRPCCSOsZqU58VX34EPKN6OjwZYt17gGOcW7pjoUNqh86YMmz6M0BZSV
ANoDqf3ZxRcYXUfPO5oNkUvo6S01hnyVDQI+l3NS0f0CcGjBkeq5AcbENLjAL9Q2
m+iZ6pRQqUyZxFqgrc7yzI8RSnW1v8LS7Fo49TEn4myu5zIzmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNxrTXTD1vAgFsR9V8gHhoI+mGUzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTNjMmUwMTItZWMyNC0z
Yjc0LTk5YjMtYzlhMjcyZmZkNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGG5od+vzPninXT/BEQ04UHtcm1t3QskvUci1CxoOxNmYP/9wPt9x8bh
cMSP/9PKajXyHMwY2/5gYRvR8Mgd/PRbMFthq3ANkvvZ4HuR5fzdLlPJ/g0Y9+wd
ogAMNJ1PNvyNlAd/CACHNlDpESFS0pyXyxdfiY184MYz0vdwwwQ7jcAYZjtkg7DM
UaLYz6B10tsUILqA3e/XSPGyzElGkTQhRG4MHCOK6P7+F2w6F5bXmhPkDnIzgxgl
SFrek79ox01l72myvfEoZWQJzrLg+esnf8wP2LJfRqtKyF0WjuFh3xEMBTxAi/z5
khxLG6BPgO0aO8w83u2QRdJtV6VJa1A=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:27:20 2026 by rpki-client