Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f5d9055-a22e-3232-ad3a-2ea5c2a0bfa4.roa
File:                     4f5d9055-a22e-3232-ad3a-2ea5c2a0bfa4.roa (raw, json)
Hash identifier:          27utpnBmiTNYn1pXu5UpIv+d60VzTGnQ7wHqO+hF7X4=
Subject key identifier:   B2:02:35:C6:6E:50:9A:BE:D6:D8:FA:C7:D5:11:6A:B4:D4:0D:AE:E6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B679740AF4ED55A384CBD2600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f5d9055-a22e-3232-ad3a-2ea5c2a0bfa4.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        173.29.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:40:af:4e:d5:5a:38:4c:bd:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=4f849443-acb5-4219-a911-3ac67adc74b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d2:8d:21:06:b4:80:0f:71:3d:38:45:35:a4:
                    80:c4:27:de:97:8e:43:08:8b:62:f0:70:11:d4:86:
                    d5:47:7d:67:7a:5c:83:d5:3d:d5:fb:a4:6d:2e:c0:
                    6e:4f:84:bf:0b:81:5a:63:1f:40:40:f3:6b:4b:40:
                    b3:a9:9a:0b:9a:39:3f:f9:62:d8:22:09:9a:63:27:
                    f4:09:cc:80:ae:8c:a9:48:9e:36:b2:da:8e:09:0b:
                    64:bf:89:5c:bf:08:4a:f8:ef:ab:90:d2:e3:46:52:
                    d7:2c:f9:a0:bc:ca:d0:9d:c6:27:d9:f4:03:21:21:
                    42:1b:c3:9c:86:40:e0:29:90:7f:e0:d1:30:08:94:
                    c2:26:d8:1e:70:8d:48:4b:a9:be:fd:17:5c:22:ed:
                    a3:7f:f4:b5:ba:9a:95:09:38:f2:fc:8f:56:0f:ef:
                    b2:5a:25:0d:15:08:aa:5f:4c:20:c8:a1:36:e0:a2:
                    d3:1f:31:5b:b7:9b:9f:e9:36:61:66:a3:01:f0:b1:
                    f2:69:9e:2e:56:bb:f4:33:ab:52:0a:1c:f7:fe:e6:
                    a0:df:48:2f:2d:0b:12:00:a9:84:b7:0f:34:97:b5:
                    d4:07:f5:5b:f2:01:9b:c4:3b:cd:89:ce:5b:56:0e:
                    97:98:b9:e8:6f:ab:6f:92:a8:b2:64:10:56:03:3f:
                    9c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:02:35:C6:6E:50:9A:BE:D6:D8:FA:C7:D5:11:6A:B4:D4:0D:AE:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f5d9055-a22e-3232-ad3a-2ea5c2a0bfa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c3:d0:57:f4:54:8f:a3:9f:cb:39:92:09:17:4d:cb:b4:03:
         fe:6e:cd:6b:bb:ce:1f:ad:a0:0e:6a:57:e2:43:e3:8e:c6:cd:
         ee:99:83:36:7e:a8:ec:ca:b2:55:cc:05:d6:dd:5a:49:95:3a:
         30:21:df:7a:92:dc:24:12:32:ca:0a:99:a2:9d:61:bf:23:cc:
         f8:e7:8d:d1:48:49:69:66:23:8c:58:90:4d:61:f3:7b:93:2e:
         ee:3e:35:22:7f:55:05:6b:ff:86:b4:a4:0e:04:e0:52:71:e6:
         84:3d:dd:09:be:0d:01:a3:6e:c2:8e:7c:15:71:7f:c6:98:30:
         2d:6f:eb:4e:16:9e:ab:1f:4e:53:4a:04:a9:f9:7f:39:37:d1:
         28:29:ed:cb:4b:0f:5a:af:49:4b:f9:45:33:5f:a2:ff:20:e6:
         3f:38:68:16:22:bb:e4:10:8c:fc:3c:a6:3f:7b:60:f9:49:ec:
         bd:d7:c8:4c:d4:17:77:12:d8:cd:13:bf:8e:f0:f5:2a:17:34:
         25:1e:02:a1:92:05:06:11:c5:db:0e:0a:5a:09:04:51:64:f6:
         96:8e:aa:42:65:97:59:1e:4f:7c:e5:a3:c4:d6:bc:00:c1:23:
         c8:f4:52:a8:74:79:61:4d:fd:90:f7:ac:68:15:c8:47:79:51:
         2a:4f:6e:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0CvTtVaOEy9JgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
NGY4NDk0NDMtYWNiNS00MjE5LWE5MTEtM2FjNjdhZGM3NGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNKNIQa0gA9xPThFNaSAxCfel45DCIti8HAR
1IbVR31nelyD1T3V+6RtLsBuT4S/C4FaYx9AQPNrS0CzqZoLmjk/+WLYIgmaYyf0
CcyAroypSJ42stqOCQtkv4lcvwhK+O+rkNLjRlLXLPmgvMrQncYn2fQDISFCG8Oc
hkDgKZB/4NEwCJTCJtgecI1IS6m+/RdcIu2jf/S1upqVCTjy/I9WD++yWiUNFQiq
X0wgyKE24KLTHzFbt5uf6TZhZqMB8LHyaZ4uVrv0M6tSChz3/uag30gvLQsSAKmE
tw80l7XUB/Vb8gGbxDvNic5bVg6XmLnob6tvkqiyZBBWAz+cNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLICNcZuUJq+1tj6x9URarTUDa7mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY1ZDkwNTUtYTIyZS0z
MjMyLWFkM2EtMmVhNWMyYTBiZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR1QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnD0Ff0VI+jn8s5kgkXTcu0A/5uzWu7zh+toA5qV+JD447Gze6ZgzZ+
qOzKslXMBdbdWkmVOjAh33qS3CQSMsoKmaKdYb8jzPjnjdFISWlmI4xYkE1h83uT
Lu4+NSJ/VQVr/4a0pA4E4FJx5oQ93Qm+DQGjbsKOfBVxf8aYMC1v604WnqsfTlNK
BKn5fzk30Sgp7ctLD1qvSUv5RTNfov8g5j84aBYiu+QQjPw8pj97YPlJ7L3XyEzU
F3cS2M0Tv47w9SoXNCUeAqGSBQYRxdsOCloJBFFk9paOqkJll1keT3zlo8TWvADB
I8j0Uqh0eWFN/ZD3rGgVyEd5USpPboE=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:42:56 2025 by rpki-client