Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a9c3a38-dd63-3960-a8a1-aeeae0beb697.roa
File:                     6a9c3a38-dd63-3960-a8a1-aeeae0beb697.roa (raw, json)
Hash identifier:          LCa7M5L0bOnG7lRAXEw8wZjWi1YWn5lAo7aHACaCNg0=
Subject key identifier:   EF:8E:8B:B6:5A:45:A1:D6:BA:08:89:80:48:74:7A:5B:73:6B:F9:89
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6201DB891B2044D8AF1FB580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a9c3a38-dd63-3960-a8a1-aeeae0beb697.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        173.16.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:db:89:1b:20:44:d8:af:1f:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=034eff90-28ac-4dea-b3cf-c616eff62c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:39:b7:ad:65:5f:67:04:e6:e2:35:3f:b1:
                    32:d0:79:5f:ad:ca:4a:f3:b9:ae:7d:e8:23:1e:46:
                    6e:36:c0:5e:58:e9:de:50:7c:85:33:1f:c4:b2:0c:
                    38:01:24:5f:58:9a:70:48:73:d8:79:80:da:f0:73:
                    f1:96:80:e1:9f:f0:61:b0:49:1b:20:e3:b6:76:9e:
                    c8:21:1f:27:78:74:e0:eb:66:1c:b2:d5:08:4d:61:
                    40:8b:69:5b:0e:8b:d3:7b:d7:c3:d0:42:43:49:62:
                    4a:61:d8:fd:42:07:e8:cb:9a:41:6f:4c:1b:cd:a2:
                    dd:39:41:5d:f2:21:c3:11:35:8e:62:63:d9:5c:0b:
                    a9:57:21:17:3f:74:43:e1:44:c7:12:03:81:6c:b9:
                    9c:1b:a1:d8:c4:36:f4:2f:a7:31:0c:f6:5f:fe:bd:
                    a0:3b:c9:81:5e:06:ad:48:38:17:b5:b3:af:f8:00:
                    c7:3c:27:66:ae:2e:6f:56:57:e7:9b:94:f4:bc:ed:
                    6a:ca:fe:04:e9:bb:10:e4:00:c1:38:7f:43:48:ba:
                    0e:42:71:22:65:95:34:24:22:e9:9a:e2:ad:36:1c:
                    ff:88:61:91:ed:ec:fe:a0:a1:d1:f9:23:63:25:1e:
                    8d:69:7d:b8:37:37:d7:25:ee:b8:06:3a:14:09:4e:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8E:8B:B6:5A:45:A1:D6:BA:08:89:80:48:74:7A:5B:73:6B:F9:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6a9c3a38-dd63-3960-a8a1-aeeae0beb697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3b:93:22:b9:42:cc:27:1d:8b:2d:e5:ca:de:69:45:97:f8:
         db:8d:67:54:f6:2e:1c:3c:45:18:42:4d:0d:49:0e:a0:c7:27:
         32:1f:cd:34:b1:44:7d:1a:48:ea:f3:27:d3:33:76:a8:15:45:
         91:e9:5f:8e:d5:dd:65:57:55:13:e9:57:f5:0c:40:c0:b0:9c:
         32:c2:4d:30:b9:b8:18:be:3a:4f:b0:b8:12:cd:91:20:5d:04:
         13:30:20:93:13:bf:11:11:7d:31:ae:c7:40:9d:31:80:3e:74:
         cf:d5:91:0a:e5:7c:a1:d5:43:00:34:cd:c2:73:f6:04:b7:02:
         97:70:4c:45:02:e1:2c:30:85:cc:fa:27:ce:f0:55:58:34:18:
         c9:91:35:ac:e4:00:4d:3e:5e:dc:20:0c:1f:ca:bd:3f:2f:4a:
         bb:1b:00:4b:50:bc:3b:41:dd:8a:14:01:57:1c:c8:4b:d6:29:
         32:68:43:c6:d0:fc:cc:1f:b3:34:02:d2:82:17:09:f7:5e:6a:
         3c:24:dc:d4:f3:8c:78:fb:6f:06:dc:7a:88:98:ed:b0:ec:d8:
         63:3b:ef:18:b4:90:fd:bd:99:d6:41:42:a8:3b:52:55:ed:53:
         be:49:bf:80:df:64:7e:89:c9:07:7b:20:67:ec:92:58:85:b0:
         b2:63:2b:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAduJGyBE2K8ftYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
MDM0ZWZmOTAtMjhhYy00ZGVhLWIzY2YtYzYxNmVmZjYyYzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAies5t61lX2cE5uI1P7Ey0HlfrcpK87mufegj
HkZuNsBeWOneUHyFMx/Esgw4ASRfWJpwSHPYeYDa8HPxloDhn/BhsEkbIOO2dp7I
IR8neHTg62YcstUITWFAi2lbDovTe9fD0EJDSWJKYdj9Qgfoy5pBb0wbzaLdOUFd
8iHDETWOYmPZXAupVyEXP3RD4UTHEgOBbLmcG6HYxDb0L6cxDPZf/r2gO8mBXgat
SDgXtbOv+ADHPCdmri5vVlfnm5T0vO1qyv4E6bsQ5ADBOH9DSLoOQnEiZZU0JCLp
muKtNhz/iGGR7ez+oKHR+SNjJR6NaX24NzfXJe64BjoUCU7hVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+Oi7ZaRaHWugiJgEh0eltza/mJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmE5YzNhMzgtZGQ2My0z
OTYwLWE4YTEtYWVlYWUwYmViNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRAIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAA7kyK5QswnHYst5creaUWX+NuNZ1T2Lhw8RRhCTQ1JDqDHJzIfzTSx
RH0aSOrzJ9MzdqgVRZHpX47V3WVXVRPpV/UMQMCwnDLCTTC5uBi+Ok+wuBLNkSBd
BBMwIJMTvxERfTGux0CdMYA+dM/VkQrlfKHVQwA0zcJz9gS3ApdwTEUC4Swwhcz6
J87wVVg0GMmRNazkAE0+XtwgDB/KvT8vSrsbAEtQvDtB3YoUAVccyEvWKTJoQ8bQ
/MwfszQC0oIXCfdeajwk3NTzjHj7bwbceoiY7bDs2GM77xi0kP29mdZBQqg7UlXt
U75Jv4DfZH6JyQd7IGfskliFsLJjK4o=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:23 2025 by rpki-client