Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5395f0be-082f-3e7e-9f71-757c1ddcffd5.roa
File:                     5395f0be-082f-3e7e-9f71-757c1ddcffd5.roa (raw, json)
Hash identifier:          ef4OnVE6W1+u7JqJ/5q4LxMvy4QYyRKZCRh7Rl7nQBg=
Subject key identifier:   87:7D:2B:BC:B0:F8:CA:E3:49:6D:65:87:B6:7E:5A:78:F0:5A:83:A5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE3C2470D8EC483807BD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5395f0be-082f-3e7e-9f71-757c1ddcffd5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.30.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:3c:24:70:d8:ec:48:38:07:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f3ae417a-844c-48b6-9479-11e9757ece82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:42:d4:b0:66:75:ed:48:f2:7a:13:55:f1:4f:
                    4f:00:d5:76:52:bd:7b:0a:2e:74:b1:34:2f:03:45:
                    07:61:d6:a1:25:58:20:ed:ba:44:d4:5d:05:b7:af:
                    62:d3:ac:f9:4f:bf:04:96:c2:86:93:58:5d:34:13:
                    d8:70:9f:71:b3:93:17:a1:8e:10:7f:83:5f:8e:ea:
                    f2:18:07:d4:b7:11:fb:62:1c:d0:70:75:f5:f4:e8:
                    c1:4f:de:50:ce:7e:a7:ab:e1:7f:1d:0a:e9:f2:0c:
                    99:c7:84:57:24:b9:04:93:57:28:99:6d:6d:8d:ff:
                    f2:e0:7b:59:d9:1c:7f:f5:67:65:b5:f7:6e:70:62:
                    ef:f4:59:cc:14:ad:55:4a:79:7b:76:19:7c:3a:ff:
                    3e:07:38:18:11:61:03:ac:71:ab:f2:19:bd:0d:eb:
                    aa:a5:1d:e8:72:e0:b7:7f:8a:93:1d:b1:27:f3:a2:
                    d7:cf:53:3e:ec:f9:91:bf:04:ba:be:be:89:01:32:
                    a8:25:92:b1:71:be:65:ad:21:d9:7b:56:90:0a:f8:
                    d3:c9:84:58:f2:f1:80:ef:69:48:7c:67:bd:6f:f2:
                    b3:a1:51:2d:fa:3e:fb:6a:12:41:1e:57:62:b8:30:
                    7c:e5:ca:85:00:c6:2b:3f:df:b1:6f:27:f5:a0:0f:
                    08:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7D:2B:BC:B0:F8:CA:E3:49:6D:65:87:B6:7E:5A:78:F0:5A:83:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5395f0be-082f-3e7e-9f71-757c1ddcffd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:41:4e:be:ef:30:28:1e:e5:04:08:7d:67:eb:98:3a:16:c4:
         2e:a6:ea:7b:ac:d4:10:36:cf:ef:d4:ca:05:71:0e:25:63:d9:
         50:0d:9b:78:6e:77:cf:f7:d1:ac:6b:11:ec:ea:f6:fc:61:9a:
         34:e5:5f:39:fc:32:1d:64:59:6a:67:3f:f7:0e:40:63:64:c6:
         f2:0d:48:aa:a1:a9:da:b7:e2:2e:48:e8:be:7d:9c:a1:ac:1b:
         35:0c:7b:e2:a8:11:d6:75:1b:04:93:80:d0:97:a9:b1:25:d1:
         88:d7:af:9b:f7:7f:37:17:ef:ab:9c:e4:21:da:ab:32:cb:fe:
         6f:3a:f4:e0:c1:1f:31:90:ff:7b:dc:36:82:de:05:02:9e:c7:
         df:72:2c:63:79:89:08:13:b0:1d:5e:16:8e:61:f9:69:c4:74:
         82:8f:49:8d:e8:c9:c6:f5:6d:db:64:66:14:eb:bf:94:34:e9:
         08:7e:a1:f7:f6:4a:89:81:cc:ec:e0:9f:b0:aa:36:b6:d7:d1:
         6a:e8:a9:48:bd:fe:a4:5b:54:09:c3:59:29:50:76:1d:04:08:
         cc:1b:09:e2:92:d8:a9:c4:3c:7b:4b:9b:3a:1c:26:1e:cb:50:
         5f:a0:64:b9:56:b5:c3:7d:6f:95:38:89:53:8e:71:d6:45:33:
         be:f2:38:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzjwkcNjsSDgHvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZjNhZTQxN2EtODQ0Yy00OGI2LTk0NzktMTFlOTc1N2VjZTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlULUsGZ17UjyehNV8U9PANV2Ur17Ci50sTQv
A0UHYdahJVgg7bpE1F0Ft69i06z5T78ElsKGk1hdNBPYcJ9xs5MXoY4Qf4Nfjury
GAfUtxH7YhzQcHX19OjBT95Qzn6nq+F/HQrp8gyZx4RXJLkEk1comW1tjf/y4HtZ
2Rx/9WdltfducGLv9FnMFK1VSnl7dhl8Ov8+BzgYEWEDrHGr8hm9DeuqpR3ocuC3
f4qTHbEn86LXz1M+7PmRvwS6vr6JATKoJZKxcb5lrSHZe1aQCvjTyYRY8vGA72lI
fGe9b/KzoVEt+j77ahJBHldiuDB85cqFAMYrP9+xbyf1oA8I0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFId9K7yw+MrjSW1lh7Z+WnjwWoOlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTM5NWYwYmUtMDgyZi0z
ZTdlLTlmNzEtNzU3YzFkZGNmZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR4GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAARBTr7vMCge5QQIfWfrmDoWxC6m6nus1BA2z+/UygVxDiVj2VANm3hu
d8/30axrEezq9vxhmjTlXzn8Mh1kWWpnP/cOQGNkxvINSKqhqdq34i5I6L59nKGs
GzUMe+KoEdZ1GwSTgNCXqbEl0YjXr5v3fzcX76uc5CHaqzLL/m869ODBHzGQ/3vc
NoLeBQKex99yLGN5iQgTsB1eFo5h+WnEdIKPSY3oycb1bdtkZhTrv5Q06Qh+off2
SomBzOzgn7CqNrbX0WroqUi9/qRbVAnDWSlQdh0ECMwbCeKS2KnEPHtLmzocJh7L
UF+gZLlWtcN9b5U4iVOOcdZFM77yOLM=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:18 2025 by rpki-client