Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cd4960f-7c02-3b2c-abbb-199c869e1606.roa
File:                     1cd4960f-7c02-3b2c-abbb-199c869e1606.roa (raw, json)
Hash identifier:          gBdf4bUwlE856pOtHC4MArp9W4yT8xM3OxI9X7RWQmQ=
Subject key identifier:   E6:34:24:74:FC:13:AA:C4:EF:72:D4:9F:CC:DA:46:B2:14:63:74:66
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B62020504D5254E1ACC745500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cd4960f-7c02-3b2c-abbb-199c869e1606.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        173.31.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:05:04:d5:25:4e:1a:cc:74:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=d326810b-8187-4e2b-a7d1-72c1947a7ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:d6:c0:48:9a:c8:3b:7b:5a:41:06:6d:71:
                    16:26:3b:52:a7:66:84:e5:91:4e:b3:61:9b:b0:7b:
                    52:a8:37:27:20:86:8e:ea:c9:bb:0f:5b:b2:f7:47:
                    5b:ff:e0:88:14:39:4f:38:bf:01:54:24:32:ff:3c:
                    88:67:f4:29:73:0d:32:d7:6c:93:de:1f:1e:44:dc:
                    8f:44:b7:38:f0:9b:e8:c8:b5:7b:45:24:7e:af:d6:
                    fb:78:f5:7d:4f:56:3e:8e:2a:f9:36:be:19:1e:e7:
                    be:b4:67:4b:fe:22:47:6e:da:53:5f:9d:0c:fa:99:
                    52:11:a5:3c:2b:9d:50:28:d0:10:84:1f:95:fc:63:
                    8b:95:d8:ea:6d:e3:09:9d:6d:8b:93:28:7d:c0:a9:
                    f3:0b:cb:d9:6c:ac:c2:ed:93:92:08:b2:0a:a1:5c:
                    a1:0e:a2:d3:67:f1:84:07:e1:8f:56:72:93:81:7c:
                    a9:8a:f7:84:09:64:73:72:c3:61:95:d9:40:0e:16:
                    3f:70:9f:13:85:4e:c1:19:b1:10:b8:78:55:aa:8c:
                    25:2d:6e:09:e1:69:ba:45:5c:2d:29:d6:8e:ba:2d:
                    41:a5:e3:86:a9:4c:f4:ec:8a:87:dc:56:a4:29:33:
                    b5:61:45:74:b9:de:f3:fb:87:3e:54:84:b7:76:7e:
                    84:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:34:24:74:FC:13:AA:C4:EF:72:D4:9F:CC:DA:46:B2:14:63:74:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1cd4960f-7c02-3b2c-abbb-199c869e1606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a2:e1:b4:fa:41:39:00:4f:47:a6:56:5b:9f:d9:f0:f7:fe:
         55:f1:41:c1:db:8a:a0:cc:7b:90:d3:d0:e6:e3:86:f5:92:99:
         af:96:d4:6b:e7:05:2d:c0:d1:0a:72:b5:79:29:f2:42:5e:9a:
         c5:aa:a8:a0:0f:90:68:a0:76:bd:2f:4a:1b:61:b7:26:0a:dd:
         c2:be:86:26:87:59:8d:00:47:21:9c:a3:39:14:9e:ac:c7:a2:
         4b:28:82:64:16:86:bc:06:59:b1:60:20:ea:b8:19:a1:a1:eb:
         41:0d:4c:6b:93:66:94:76:8c:c8:be:3d:1c:71:b1:f9:7c:2c:
         f1:8a:50:98:16:48:0a:71:f1:24:6b:b8:37:ee:7b:4a:e7:bc:
         a2:69:84:86:ce:9c:24:b2:37:31:b1:9d:4f:20:6a:2f:41:46:
         9d:5c:6e:35:ab:1b:e8:24:07:a6:36:c9:f0:0c:99:9c:73:b2:
         8d:ed:40:69:2d:6b:ea:cb:19:37:bc:7e:42:9a:24:05:5e:24:
         b2:a6:0f:13:c3:78:38:21:13:8a:39:c0:a4:f5:59:85:36:c7:
         64:fd:b4:39:36:13:65:97:91:04:75:f2:11:01:a4:cc:6a:39:
         ae:9c:74:9e:7d:15:0d:6e:41:df:a6:ac:19:75:8c:bf:71:24:
         95:a6:7f:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgUE1SVOGsx0VQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZDMyNjgxMGItODE4Ny00ZTJiLWE3ZDEtNzJjMTk0N2E3Y2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtXWwEiayDt7WkEGbXEWJjtSp2aE5ZFOs2Gb
sHtSqDcnIIaO6sm7D1uy90db/+CIFDlPOL8BVCQy/zyIZ/Qpcw0y12yT3h8eRNyP
RLc48JvoyLV7RSR+r9b7ePV9T1Y+jir5Nr4ZHue+tGdL/iJHbtpTX50M+plSEaU8
K51QKNAQhB+V/GOLldjqbeMJnW2Lkyh9wKnzC8vZbKzC7ZOSCLIKoVyhDqLTZ/GE
B+GPVnKTgXypiveECWRzcsNhldlADhY/cJ8ThU7BGbEQuHhVqowlLW4J4Wm6RVwt
KdaOui1BpeOGqUz07IqH3FakKTO1YUV0ud7z+4c+VIS3dn6EwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOY0JHT8E6rE73LUn8zaRrIUY3RmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWNkNDk2MGYtN2MwMi0z
YjJjLWFiYmItMTk5Yzg2OWUxNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR/QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSi4bT6QTkAT0emVluf2fD3/lXxQcHbiqDMe5DT0ObjhvWSma+W1Gvn
BS3A0QpytXkp8kJemsWqqKAPkGigdr0vShthtyYK3cK+hiaHWY0ARyGcozkUnqzH
oksogmQWhrwGWbFgIOq4GaGh60ENTGuTZpR2jMi+PRxxsfl8LPGKUJgWSApx8SRr
uDfue0rnvKJphIbOnCSyNzGxnU8gai9BRp1cbjWrG+gkB6Y2yfAMmZxzso3tQGkt
a+rLGTe8fkKaJAVeJLKmDxPDeDghE4o5wKT1WYU2x2T9tDk2E2WXkQR18hEBpMxq
Oa6cdJ59FQ1uQd+mrBl1jL9xJJWmf6w=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:46 2025 by rpki-client