Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55dc025d-1a58-3985-8e3c-11cde573740d.roa
File:                     55dc025d-1a58-3985-8e3c-11cde573740d.roa (raw, json)
Hash identifier:          g6FT3hJaEAgwMfy3PS3dcBLhQ/InnAHZJunmFsSBwrg=
Subject key identifier:   35:EA:B4:78:00:EA:50:10:40:18:B8:07:CB:15:56:11:4F:36:BD:FC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D27AAC3B6D505D3BBB22872A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55dc025d-1a58-3985-8e3c-11cde573740d.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.20.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:c3:b6:d5:05:d3:bb:b2:28:72:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=5e43a347-9e4d-49ff-9a98-fa8e53d0cf96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:f6:07:e1:75:5b:48:d3:1a:b7:75:20:c8:
                    6c:6c:02:b7:fb:86:37:a0:e1:db:35:39:d0:79:9d:
                    7b:64:96:3f:5b:11:d6:1d:e5:38:05:a9:25:e5:fc:
                    82:bd:59:ac:91:b9:cc:06:a1:d1:ba:6e:65:6f:b0:
                    40:9f:42:39:d8:7c:69:e7:bf:cb:35:62:03:39:cf:
                    5e:4d:cc:69:ca:6c:fc:de:d0:77:69:1f:77:49:a1:
                    31:4f:e6:8f:74:ce:48:39:36:7d:73:78:a6:16:5a:
                    05:44:d7:5c:1a:cb:58:07:93:11:cf:8a:76:76:29:
                    8e:cc:1b:c0:1f:b7:d4:63:d8:5b:2c:64:a6:f5:ab:
                    32:5d:97:33:f2:db:69:80:ef:a7:91:91:74:71:82:
                    9c:cc:c7:67:23:37:d2:3a:7b:40:fc:3b:e2:00:51:
                    3c:9f:35:6d:67:cf:05:b9:e0:b7:03:16:05:25:f6:
                    bf:89:49:2e:3b:76:3b:35:00:3e:dc:dc:9c:bc:96:
                    4d:a2:84:5b:8c:df:61:74:ca:17:2b:57:65:9a:dd:
                    7e:85:5a:49:1a:ab:29:2b:6f:05:ed:73:e6:95:33:
                    f9:65:57:a1:46:60:96:5e:00:52:e2:64:27:34:71:
                    e0:f0:2c:97:3b:e6:cd:ca:dc:de:e9:84:23:ce:aa:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EA:B4:78:00:EA:50:10:40:18:B8:07:CB:15:56:11:4F:36:BD:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55dc025d-1a58-3985-8e3c-11cde573740d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d3:8c:a9:6d:8e:b4:fb:dc:83:30:43:ca:4a:c8:fa:c0:2b:
         42:54:ed:d0:af:3e:fd:5c:54:d0:85:e3:d0:61:58:dd:e8:98:
         84:90:65:a4:89:bb:ed:67:23:50:c3:a1:97:b1:cb:23:54:22:
         22:bb:ab:38:a8:b1:b5:bf:08:ed:40:10:cb:f0:34:81:a7:04:
         69:a1:85:e2:9a:b8:94:0e:5d:a1:c3:bd:df:94:6b:8e:53:1e:
         ff:81:86:d9:f0:a5:12:1d:f5:da:1e:2d:c3:e4:e7:24:c0:70:
         20:9d:ec:e6:07:67:39:78:13:82:8d:72:3a:14:54:fa:6e:35:
         6d:41:31:e2:a2:b9:89:7e:c9:35:af:5c:00:59:9a:91:fe:12:
         b3:32:8b:dc:f8:e3:6c:35:fb:87:2e:4b:3d:80:fe:bd:8c:18:
         59:43:18:9d:14:c3:38:a5:c7:fd:41:36:53:b7:39:ba:9f:59:
         ad:33:8e:ad:4e:96:e2:e8:b5:e7:a9:c7:dc:10:24:2c:73:e1:
         06:96:65:8e:16:98:59:8f:35:73:e3:a9:92:ca:5b:bc:00:2b:
         80:2f:72:de:9c:75:82:98:f6:71:a2:75:e4:ec:a7:be:55:53:
         dd:4b:61:b3:fe:b7:a3:83:0d:19:8f:7f:ae:dc:0b:34:9f:9b:
         01:32:77:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqsO21QXTu7IocqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
NWU0M2EzNDctOWU0ZC00OWZmLTlhOTgtZmE4ZTUzZDBjZjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC72B+F1W0jTGrd1IMhsbAK3+4Y3oOHbNTnQ
eZ17ZJY/WxHWHeU4Bakl5fyCvVmskbnMBqHRum5lb7BAn0I52Hxp57/LNWIDOc9e
Tcxpymz83tB3aR93SaExT+aPdM5IOTZ9c3imFloFRNdcGstYB5MRz4p2dimOzBvA
H7fUY9hbLGSm9asyXZcz8ttpgO+nkZF0cYKczMdnIzfSOntA/DviAFE8nzVtZ88F
ueC3AxYFJfa/iUkuO3Y7NQA+3NycvJZNooRbjN9hdMoXK1dlmt1+hVpJGqspK28F
7XPmlTP5ZVehRmCWXgBS4mQnNHHg8CyXO+bNytze6YQjzqrEywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDXqtHgA6lAQQBi4B8sVVhFPNr38MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTVkYzAyNWQtMWE1OC0z
OTg1LThlM2MtMTFjZGU1NzM3NDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRR0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjTjKltjrT73IMwQ8pKyPrAK0JU7dCvPv1cVNCF49BhWN3omISQZaSJ
u+1nI1DDoZexyyNUIiK7qziosbW/CO1AEMvwNIGnBGmhheKauJQOXaHDvd+Ua45T
Hv+BhtnwpRId9doeLcPk5yTAcCCd7OYHZzl4E4KNcjoUVPpuNW1BMeKiuYl+yTWv
XABZmpH+ErMyi9z442w1+4cuSz2A/r2MGFlDGJ0Uwzilx/1BNlO3ObqfWa0zjq1O
luLoteepx9wQJCxz4QaWZY4WmFmPNXPjqZLKW7wAK4Avct6cdYKY9nGideTsp75V
U91LYbP+t6ODDRmPf67cCzSfmwEyd+k=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:28:18 2026 by rpki-client