Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e9a62a7-e172-3932-8bb3-7130784fe97b.roa
File:                     2e9a62a7-e172-3932-8bb3-7130784fe97b.roa (raw, json)
Hash identifier:          Y7qqTfDBKERUY/kklrq3bmgBKvoQPvSkxFie92AFkFM=
Subject key identifier:   B8:DA:66:9B:3A:B2:5D:20:A6:44:FA:39:A6:8A:D3:CF:0F:6B:AE:4A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B620235E59A92AEBC0A936420
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e9a62a7-e172-3932-8bb3-7130784fe97b.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        173.16.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:35:e5:9a:92:ae:bc:0a:93:64:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=09715805-1bd3-4fd4-8d01-bbb252ef9913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4b:c5:ac:90:43:b6:27:2a:dc:76:8f:b0:bc:
                    b3:8f:7f:bf:8f:58:7a:28:70:9f:d2:ed:08:60:44:
                    d2:37:43:58:48:62:5f:4d:da:23:bc:66:ab:f7:fc:
                    19:ec:f7:d8:f7:57:72:c1:98:1a:a2:21:58:cd:23:
                    ea:e0:f0:18:07:2d:e9:7b:18:59:a1:15:ad:53:36:
                    cc:8f:b6:d4:41:dd:b5:96:4b:65:c0:03:8f:5f:56:
                    6f:39:50:12:13:97:50:4f:b5:7d:65:26:09:5a:04:
                    67:11:26:dd:16:5d:36:83:75:f1:fc:d9:78:d4:4a:
                    0f:06:c8:b7:fe:6b:31:4a:5a:66:2c:4a:98:30:4a:
                    34:80:b8:91:f2:54:45:bd:6c:c1:98:e5:86:72:20:
                    24:91:b1:9a:48:de:b5:c0:58:c7:a5:cb:80:23:b8:
                    81:ee:ab:9c:2d:19:65:c4:8a:6f:22:ad:1b:0b:8e:
                    89:de:16:5f:05:f0:d9:97:a8:6e:59:30:d5:7b:0b:
                    09:cc:fa:22:1e:b5:2a:9d:dc:d7:66:1b:46:80:3a:
                    b2:1f:e1:fb:e6:27:e3:b3:8d:77:28:3b:e3:c2:60:
                    6e:6e:0f:cc:ba:3d:48:c5:82:d1:29:c0:84:84:b4:
                    c8:2a:a2:04:c5:38:74:0a:16:5c:b4:e8:5a:75:df:
                    a2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DA:66:9B:3A:B2:5D:20:A6:44:FA:39:A6:8A:D3:CF:0F:6B:AE:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e9a62a7-e172-3932-8bb3-7130784fe97b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e8:31:d4:1b:c2:ba:b2:d8:fc:79:c9:7a:38:84:6a:90:fe:
         8b:cc:ba:0d:b8:d5:22:3c:e0:ee:9c:94:d3:b6:b0:12:91:47:
         80:e5:ef:9a:eb:3e:0a:51:60:1e:06:15:63:82:d0:db:93:b9:
         e8:da:31:2a:dd:8c:5e:30:11:7e:03:e9:ef:41:fe:a4:96:3c:
         f9:10:f7:99:37:77:25:12:5c:b5:06:47:70:3a:75:89:7f:50:
         e8:d5:3e:60:78:4f:6a:49:76:7d:8c:6d:09:7d:d8:de:40:63:
         54:e9:7e:29:75:b7:f3:6f:a0:48:58:e9:99:42:ef:21:34:20:
         f4:c1:27:88:a4:80:95:09:d3:c7:34:04:53:29:78:66:3b:52:
         21:60:46:ea:2d:d3:91:b3:1e:fc:9a:ae:2d:22:98:31:87:07:
         57:90:16:cc:59:9b:05:b6:f1:7e:cb:57:9c:ec:9c:a7:c0:ab:
         00:46:da:a0:46:a4:3d:57:21:8e:f3:0f:3d:1f:ab:ce:74:e5:
         a0:ff:bd:b5:29:9c:43:8f:0e:f1:bf:8b:84:e2:b9:43:e0:dd:
         19:60:15:3a:57:d1:93:3b:d4:33:92:6e:0f:dd:1c:98:8e:a1:
         67:6e:dc:12:8c:07:dd:43:a8:3f:5f:b0:06:15:a8:e5:d8:86:
         a1:b6:98:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjXlmpKuvAqTZCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
MDk3MTU4MDUtMWJkMy00ZmQ0LThkMDEtYmJiMjUyZWY5OTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0vFrJBDticq3HaPsLyzj3+/j1h6KHCf0u0I
YETSN0NYSGJfTdojvGar9/wZ7PfY91dywZgaoiFYzSPq4PAYBy3pexhZoRWtUzbM
j7bUQd21lktlwAOPX1ZvOVASE5dQT7V9ZSYJWgRnESbdFl02g3Xx/Nl41EoPBsi3
/msxSlpmLEqYMEo0gLiR8lRFvWzBmOWGciAkkbGaSN61wFjHpcuAI7iB7qucLRll
xIpvIq0bC46J3hZfBfDZl6huWTDVewsJzPoiHrUqndzXZhtGgDqyH+H75ifjs413
KDvjwmBubg/Muj1IxYLRKcCEhLTIKqIExTh0ChZctOhadd+iIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLjaZps6sl0gpkT6OaaK088Pa65KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmU5YTYyYTctZTE3Mi0z
OTMyLThiYjMtNzEzMDc4NGZlOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRAmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3oMdQbwrqy2Px5yXo4hGqQ/ovMug241SI84O6clNO2sBKRR4Dl75rr
PgpRYB4GFWOC0NuTuejaMSrdjF4wEX4D6e9B/qSWPPkQ95k3dyUSXLUGR3A6dYl/
UOjVPmB4T2pJdn2MbQl92N5AY1Tpfil1t/NvoEhY6ZlC7yE0IPTBJ4ikgJUJ08c0
BFMpeGY7UiFgRuot05GzHvyari0imDGHB1eQFsxZmwW28X7LV5zsnKfAqwBG2qBG
pD1XIY7zDz0fq8505aD/vbUpnEOPDvG/i4TiuUPg3RlgFTpX0ZM71DOSbg/dHJiO
oWdu3BKMB91DqD9fsAYVqOXYhqG2mK8=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:27 2025 by rpki-client