Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc2d21e8-63f1-3034-82a1-ceb4160ede99.roa
File:                     fc2d21e8-63f1-3034-82a1-ceb4160ede99.roa (raw, json)
Hash identifier:          PtGhthh0Sj4ssDtMPyq/B9yJqIa0z5x3WZckKZHww0I=
Subject key identifier:   38:9A:B6:04:32:1C:6A:6D:CF:6B:F7:1E:0F:68:A7:08:23:B7:60:60
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E5D14B683DB005835705BFA80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc2d21e8-63f1-3034-82a1-ceb4160ede99.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        173.16.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:b6:83:db:00:58:35:70:5b:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=d555cabc-1088-45f3-b72a-05ac9c843b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:74:3c:3b:26:3f:c6:af:4b:ee:fc:11:42:01:
                    46:dc:ab:6d:5b:6b:8c:c2:d8:37:38:87:36:2c:aa:
                    4b:5e:06:66:44:2a:60:f8:7a:db:7d:7e:99:75:1c:
                    b8:1b:ef:93:ba:c6:45:73:c4:fa:09:66:0a:02:5f:
                    e8:1d:bf:af:7c:ae:0a:de:3e:90:6f:3c:d2:cf:53:
                    c6:8c:41:1f:1c:4d:a8:64:fe:7b:13:1f:e7:74:cc:
                    b0:49:54:aa:95:e0:65:0a:ea:b9:21:69:26:2b:f7:
                    d9:08:53:73:1a:9d:af:f8:95:ac:c8:99:de:52:ce:
                    4b:0e:29:fa:f4:2d:9b:02:1f:81:9e:9d:fe:7c:7f:
                    b1:ff:7e:61:72:5f:42:02:d3:d9:5a:02:bf:c3:42:
                    18:66:21:fa:78:ae:26:1f:01:92:28:3b:17:f0:c6:
                    22:28:97:3f:c5:9d:f2:5a:7b:1d:3c:58:7d:d3:b0:
                    cf:4f:9b:5c:b1:b8:4f:c6:58:28:4c:a7:fc:d7:18:
                    da:8b:fc:72:02:42:dd:9e:e1:96:38:a0:21:84:da:
                    36:16:57:64:16:31:77:06:af:e6:d2:84:bb:51:51:
                    bb:ef:62:1b:21:e2:61:6e:92:31:5d:7e:e7:36:6e:
                    b4:18:87:af:76:a5:98:70:63:57:eb:16:0c:95:f0:
                    18:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9A:B6:04:32:1C:6A:6D:CF:6B:F7:1E:0F:68:A7:08:23:B7:60:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc2d21e8-63f1-3034-82a1-ceb4160ede99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:27:f9:10:67:39:42:0b:e5:6a:fd:00:ab:39:1e:ba:dd:de:
         24:d8:da:d3:80:bd:f0:96:29:0f:03:ca:05:f5:06:be:a9:cf:
         6a:9a:90:8d:86:b3:40:b3:a2:0e:7b:8f:8a:b7:ca:05:1c:3e:
         03:e7:60:fb:14:c6:3c:4b:45:d1:47:ac:28:1d:85:51:4f:d3:
         86:92:9f:0b:24:c7:9b:a8:07:19:2c:0d:d2:0d:86:71:91:a3:
         83:ae:ea:d5:49:a6:0a:72:72:da:54:df:c8:dc:9b:21:10:81:
         68:ab:7d:fb:6b:12:6c:47:7f:f4:82:f6:39:05:87:e3:0b:19:
         78:00:2e:1b:b4:31:87:ef:18:e4:ad:c9:dd:99:a9:4b:6e:a0:
         28:bd:0b:9e:f2:19:3d:85:96:05:d5:9d:d4:ce:5b:a3:88:3a:
         2b:30:48:f1:b0:ff:d9:e5:47:cc:4b:db:ae:56:19:7d:de:54:
         17:04:a2:08:4a:19:96:29:5f:60:50:3b:6a:56:c9:19:08:9e:
         41:58:a1:ab:14:00:7e:e6:c0:d4:1f:6c:44:09:ca:6b:6a:1a:
         29:41:f2:ad:e2:a2:22:d0:7f:84:bc:af:20:a3:69:b7:c1:70:
         2b:c2:1e:96:e0:a7:80:93:51:b1:66:39:79:e2:1a:9e:3a:c1:
         94:0e:1a:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFLaD2wBYNXBb+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk
ZDU1NWNhYmMtMTA4OC00NWYzLWI3MmEtMDVhYzljODQzYjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHQ8OyY/xq9L7vwRQgFG3KttW2uMwtg3OIc2
LKpLXgZmRCpg+HrbfX6ZdRy4G++TusZFc8T6CWYKAl/oHb+vfK4K3j6QbzzSz1PG
jEEfHE2oZP57Ex/ndMywSVSqleBlCuq5IWkmK/fZCFNzGp2v+JWsyJneUs5LDin6
9C2bAh+Bnp3+fH+x/35hcl9CAtPZWgK/w0IYZiH6eK4mHwGSKDsX8MYiKJc/xZ3y
WnsdPFh907DPT5tcsbhPxlgoTKf81xjai/xyAkLdnuGWOKAhhNo2FldkFjF3Bq/m
0oS7UVG772IbIeJhbpIxXX7nNm60GIevdqWYcGNX6xYMlfAY4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDiatgQyHGptz2v3Hg9opwgjt2BgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmMyZDIxZTgtNjNmMS0z
MDM0LTgyYTEtY2ViNDE2MGVkZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRC+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4n+RBnOUIL5Wr9AKs5Hrrd3iTY2tOAvfCWKQ8DygX1Br6pz2qakI2G
s0Czog57j4q3ygUcPgPnYPsUxjxLRdFHrCgdhVFP04aSnwskx5uoBxksDdINhnGR
o4Ou6tVJpgpyctpU38jcmyEQgWirfftrEmxHf/SC9jkFh+MLGXgALhu0MYfvGOSt
yd2ZqUtuoCi9C57yGT2FlgXVndTOW6OIOiswSPGw/9nlR8xL265WGX3eVBcEoghK
GZYpX2BQO2pWyRkInkFYoasUAH7mwNQfbEQJymtqGilB8q3ioiLQf4S8ryCjabfB
cCvCHpbgp4CTUbFmOXniGp46wZQOGto=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:17:35 2026 by rpki-client