Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9bff744-d219-300a-95f1-bb1b5f68d108.roa
File:                     d9bff744-d219-300a-95f1-bb1b5f68d108.roa (raw, json)
Hash identifier:          iMabOA3pxaZqguLInXasFoRkH7n8Z4q2n5zOzEopNeo=
Subject key identifier:   F5:B9:B7:5D:27:F8:16:62:EC:5A:70:58:32:F4:31:DA:6A:13:75:47
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498A58EBCC58B1AFF2572AC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9bff744-d219-300a-95f1-bb1b5f68d108.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.19.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:58:eb:cc:58:b1:af:f2:57:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fff4a549-612e-4ee0-9fe4-678fffd88ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:0b:5e:72:f4:ec:4e:34:4d:d4:7d:18:a8:
                    a1:d2:8a:dc:64:ab:bf:c5:0a:bc:df:a7:76:2c:48:
                    cb:fd:ae:f3:be:47:2a:ce:88:52:fd:9e:dc:7e:86:
                    fb:65:95:64:0b:f4:10:bc:5e:53:42:3c:0d:10:ef:
                    d6:87:9e:4e:bd:18:88:6c:fd:24:2e:ff:75:32:38:
                    72:16:d3:b0:54:9f:f5:b3:f3:90:af:3e:a1:7f:50:
                    3a:24:b8:29:e8:07:ed:7a:e6:41:45:ff:77:ef:a0:
                    b1:59:c5:32:3b:d4:57:12:69:1b:d6:7e:80:8d:a2:
                    86:90:33:c7:66:8f:0f:d9:09:31:8b:e0:c8:ef:01:
                    79:cb:4f:b8:0c:a5:63:3c:81:ad:7f:3c:37:ee:ff:
                    1a:30:8e:5b:eb:35:32:b5:cd:2b:35:15:8b:bb:a0:
                    8e:f4:9c:ac:fb:14:66:85:1d:76:f2:3f:b1:0a:bb:
                    25:6b:12:04:c4:b2:18:ab:7b:4b:8d:03:50:f1:cc:
                    9e:d3:77:5f:3e:63:73:58:96:41:25:42:ad:c9:55:
                    0b:98:42:26:9b:3f:f0:33:bd:85:47:16:22:cf:ff:
                    34:2e:33:5d:93:e4:55:a9:21:6b:d7:1a:01:4f:17:
                    ea:52:ef:47:b2:db:5f:72:53:c4:e6:28:9b:d4:7c:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B9:B7:5D:27:F8:16:62:EC:5A:70:58:32:F4:31:DA:6A:13:75:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9bff744-d219-300a-95f1-bb1b5f68d108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:b5:01:8e:da:08:2f:df:ce:9a:f8:f6:ed:22:c6:0c:47:
         dd:df:7e:46:0a:89:ac:7e:f4:03:0a:37:5a:7a:e0:99:c3:03:
         e2:4b:e4:1e:7e:2e:bd:3b:7a:c1:4d:a6:fc:d0:8b:0b:95:53:
         86:db:ab:88:e1:38:00:d7:81:21:6c:b5:b1:31:38:dc:d5:98:
         b3:d0:bb:d6:22:6c:c6:96:63:92:e6:88:d4:5b:fd:a7:5e:3b:
         13:ea:6c:87:16:27:42:d4:85:38:f9:13:1c:46:1f:26:f1:7f:
         63:7b:eb:a4:2c:cd:a6:b3:f6:99:55:53:a4:d1:72:fb:89:76:
         c9:1d:cb:12:3c:d6:1f:ec:74:fc:3d:0b:94:d6:e3:b6:0c:2f:
         22:06:ac:72:a0:60:aa:f1:91:ca:c6:f9:7b:96:20:8e:6e:34:
         27:c5:d4:98:7f:90:39:88:d0:93:be:1b:65:06:a9:80:53:81:
         62:00:f6:fe:4b:bf:ed:ae:93:b4:c0:ba:95:05:be:43:14:a6:
         63:56:8f:fd:30:f2:df:55:b3:c8:0e:33:53:e4:96:ab:24:63:
         dc:57:06:f7:50:22:07:24:8a:66:36:bf:c2:0c:da:b6:6f:9b:
         d0:71:b2:c5:9f:3b:50:7e:ba:78:88:9a:e3:09:51:10:19:f5:
         ed:49:74:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiljrzFixr/JXKsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmZmNGE1NDktNjEyZS00ZWUwLTlmZTQtNjc4ZmZmZDg4YWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YcLXnL07E40TdR9GKih0orcZKu/xQq836d2
LEjL/a7zvkcqzohS/Z7cfob7ZZVkC/QQvF5TQjwNEO/Wh55OvRiIbP0kLv91Mjhy
FtOwVJ/1s/OQrz6hf1A6JLgp6AfteuZBRf9376CxWcUyO9RXEmkb1n6AjaKGkDPH
Zo8P2Qkxi+DI7wF5y0+4DKVjPIGtfzw37v8aMI5b6zUytc0rNRWLu6CO9Jys+xRm
hR128j+xCrslaxIExLIYq3tLjQNQ8cye03dfPmNzWJZBJUKtyVULmEImmz/wM72F
RxYiz/80LjNdk+RVqSFr1xoBTxfqUu9HsttfclPE5iib1HzFLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPW5t10n+BZi7FpwWDL0MdpqE3VHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDliZmY3NDQtZDIxOS0z
MDBhLTk1ZjEtYmIxYjVmNjhkMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRM1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbXtQGO2ggv386a+PbtIsYMR93ffkYKiax+9AMKN1p64JnDA+JL5B5+
Lr07esFNpvzQiwuVU4bbq4jhOADXgSFstbExONzVmLPQu9YibMaWY5LmiNRb/ade
OxPqbIcWJ0LUhTj5ExxGHybxf2N766Qszaaz9plVU6TRcvuJdskdyxI81h/sdPw9
C5TW47YMLyIGrHKgYKrxkcrG+XuWII5uNCfF1Jh/kDmI0JO+G2UGqYBTgWIA9v5L
v+2uk7TAupUFvkMUpmNWj/0w8t9Vs8gOM1PklqskY9xXBvdQIgckimY2v8IM2rZv
m9BxssWfO1B+uniImuMJURAZ9e1JdKs=
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:25:15 2026 by rpki-client