Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3d9a825-a925-3472-8135-f81aedcf2670.roa
File:                     d3d9a825-a925-3472-8135-f81aedcf2670.roa (raw, json)
Hash identifier:          5iLSMGB4pKyuDv+VARZ+2j46qDB8QWXLWBt0W0m9a2A=
Subject key identifier:   D3:FA:A0:AB:A2:5C:CB:B1:85:F7:FA:95:DB:23:50:9E:D0:A0:58:E3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E7D2F7C043E64B473231DC380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3d9a825-a925-3472-8135-f81aedcf2670.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     19905
IP address blocks:        173.30.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:7c:04:3e:64:b4:73:23:1d:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=e1f11fcd-db9a-4b4e-a2a0-34b0b625d361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:28:04:82:51:22:aa:ba:d9:bb:d8:05:b8:c7:
                    43:be:5e:b4:a6:25:09:69:88:d9:cb:2e:70:57:ae:
                    5b:d8:ca:21:ec:a7:ba:71:ec:57:47:65:d5:04:c9:
                    7e:dc:7d:a2:d4:fe:ec:02:2a:79:b4:00:69:80:ee:
                    00:ac:6c:88:62:ef:0e:db:96:83:9c:4e:ae:6e:d6:
                    fc:23:68:5e:40:9e:af:85:a1:5c:c5:5c:27:00:46:
                    eb:b4:03:88:9c:15:e7:82:e6:54:10:41:4e:4c:ff:
                    a2:0e:05:37:ed:d0:36:53:bb:54:18:65:f4:f8:20:
                    03:90:21:eb:0d:e4:e9:e7:63:ab:f3:9b:7e:ce:c6:
                    24:32:c3:1c:1f:38:a2:17:19:9b:92:9b:2d:24:79:
                    76:b3:62:8b:4f:cc:93:26:4f:ea:e7:f3:dd:08:d3:
                    4e:be:82:b3:07:f4:a8:df:44:f3:51:ae:76:2c:b2:
                    f9:9a:0c:c8:86:9b:42:50:69:36:ab:90:4d:89:b2:
                    59:0e:16:b7:0c:2e:26:27:be:18:21:b2:9b:d8:ef:
                    e2:80:37:f1:29:18:1d:b4:56:81:68:48:05:e6:2e:
                    77:d6:d7:80:1f:8b:8b:b1:f6:bc:f7:ea:69:76:fe:
                    f6:c6:c2:e2:fa:b6:f7:47:e9:f0:bc:ca:eb:bc:f2:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FA:A0:AB:A2:5C:CB:B1:85:F7:FA:95:DB:23:50:9E:D0:A0:58:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3d9a825-a925-3472-8135-f81aedcf2670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:39:e2:5d:23:6b:cd:12:85:c9:a8:b9:2e:8a:cd:4b:b0:43:
         ee:f0:31:4c:7b:38:9f:4e:32:46:ab:4f:e5:de:20:7d:c8:74:
         2f:1d:13:91:93:13:98:0a:fa:27:38:10:88:f0:3b:41:5d:1a:
         01:f6:76:df:6c:ab:67:c3:9f:2f:45:4e:73:c7:00:8c:34:9d:
         49:d8:3b:a0:e0:06:14:2e:86:4e:97:49:d8:47:82:20:c4:c4:
         65:ce:08:71:b0:2d:0f:45:a4:a7:a3:b9:3d:1a:3a:86:73:57:
         74:29:32:a0:12:32:03:4c:44:75:6b:ec:e3:50:5b:97:bd:a6:
         cf:72:af:6d:b4:a8:6d:8d:a3:a0:39:95:76:75:96:2d:74:29:
         b9:d3:18:a6:5c:6a:91:57:55:90:40:4e:35:cf:f2:f9:f9:ea:
         3a:c2:81:e9:82:f7:b6:60:5b:79:7c:1f:94:75:51:0d:1d:3d:
         6a:86:8d:25:5d:70:d2:85:9d:46:d5:28:88:ca:f7:f3:8a:9d:
         27:86:94:25:1d:ba:44:02:c8:38:8a:0b:88:51:da:ff:72:22:
         93:61:71:47:37:b5:13:14:c3:52:35:86:e4:39:31:66:7a:a7:
         53:d2:50:ed:83:bc:ba:f5:b6:cf:b9:ea:52:b0:4b:c8:67:c9:
         9f:29:a5:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE59L3wEPmS0cyMdw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcxMzIxMDAxMloXDTI2MTAxMTIxMDAxMlowLzEtMCsGA1UEAxMk
ZTFmMTFmY2QtZGI5YS00YjRlLWEyYTAtMzRiMGI2MjVkMzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiigEglEiqrrZu9gFuMdDvl60piUJaYjZyy5w
V65b2Moh7Ke6cexXR2XVBMl+3H2i1P7sAip5tABpgO4ArGyIYu8O25aDnE6ubtb8
I2heQJ6vhaFcxVwnAEbrtAOInBXnguZUEEFOTP+iDgU37dA2U7tUGGX0+CADkCHr
DeTp52Or85t+zsYkMsMcHziiFxmbkpstJHl2s2KLT8yTJk/q5/PdCNNOvoKzB/So
30TzUa52LLL5mgzIhptCUGk2q5BNibJZDha3DC4mJ74YIbKb2O/igDfxKRgdtFaB
aEgF5i531teAH4uLsfa89+ppdv72xsLi+rb3R+nwvMrrvPJQpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNP6oKuiXMuxhff6ldsjUJ7QoFjjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDNkOWE4MjUtYTkyNS0z
NDcyLTgxMzUtZjgxYWVkY2YyNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR62MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACo54l0ja80ShcmouS6KzUuwQ+7wMUx7OJ9OMkarT+XeIH3IdC8dE5GT
E5gK+ic4EIjwO0FdGgH2dt9sq2fDny9FTnPHAIw0nUnYO6DgBhQuhk6XSdhHgiDE
xGXOCHGwLQ9FpKejuT0aOoZzV3QpMqASMgNMRHVr7ONQW5e9ps9yr220qG2No6A5
lXZ1li10KbnTGKZcapFXVZBATjXP8vn56jrCgemC97ZgW3l8H5R1UQ0dPWqGjSVd
cNKFnUbVKIjK9/OKnSeGlCUdukQCyDiKC4hR2v9yIpNhcUc3tRMUw1I1huQ5MWZ6
p1PSUO2DvLr1ts+56lKwS8hnyZ8ppU8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:42 2026 by rpki-client