Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/80917ac8-efa2-3a44-809f-e4d2f7188f83.roa
File:                     80917ac8-efa2-3a44-809f-e4d2f7188f83.roa (raw, json)
Hash identifier:          +vucBBdEa9Tto/yCmLEGlTNSdRM23p3pM5Num9rdMok=
Subject key identifier:   9C:E1:AF:4F:47:E3:D2:1E:56:F0:BC:47:BF:46:75:5F:60:E4:7C:43
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6202231A77EFA057D30130C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/80917ac8-efa2-3a44-809f-e4d2f7188f83.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        173.25.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:23:1a:77:ef:a0:57:d3:01:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=73cca1b4-29a3-4a54-83ce-0df2dc985bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:fa:f1:7f:e5:74:3b:bf:53:96:f0:c4:b5:
                    d1:43:a1:68:bc:77:50:49:99:71:b5:74:08:66:00:
                    b7:82:f6:0d:b9:1d:82:a7:31:96:71:fa:c4:d8:63:
                    79:42:5c:79:ed:06:0a:6f:ab:7e:e0:6d:7b:3c:d4:
                    e7:80:f1:b3:ad:d9:c9:cc:38:eb:1c:08:d9:f9:22:
                    08:39:28:64:f0:4b:0a:61:1f:03:c9:7f:4b:c4:ba:
                    eb:84:87:13:05:60:4b:14:18:67:83:e3:de:35:40:
                    15:4a:ed:12:88:f2:fb:d0:b7:f7:50:4c:2f:d9:72:
                    63:8c:8f:b6:aa:18:33:43:78:ab:1a:34:12:37:ed:
                    41:dd:ce:94:54:1d:fa:c6:77:43:13:cc:c5:06:be:
                    d3:4d:50:22:f6:2d:22:0b:b3:a5:5c:0c:38:85:3a:
                    08:d4:32:24:42:07:13:b8:e5:0c:9f:de:2e:4c:89:
                    41:0d:b6:0d:09:53:bb:38:07:6c:6c:98:39:95:8e:
                    c4:07:27:e0:58:b8:5d:75:3c:b9:39:5e:ae:6f:eb:
                    c9:88:8a:92:9b:6a:a8:1a:1d:99:ba:59:c8:e6:df:
                    9a:34:6f:76:4a:a4:dc:7d:42:d4:51:35:59:12:22:
                    c1:6e:71:21:f7:44:73:21:5e:3b:51:8c:2e:17:5c:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E1:AF:4F:47:E3:D2:1E:56:F0:BC:47:BF:46:75:5F:60:E4:7C:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/80917ac8-efa2-3a44-809f-e4d2f7188f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0a:f3:16:d5:ee:d4:fa:1a:01:6e:65:aa:31:ea:48:ec:a5:
         70:0e:f8:ef:3c:cb:72:28:f9:19:5f:5c:94:91:92:1d:6d:88:
         95:84:55:77:76:03:e9:b4:a3:64:19:bc:a9:94:86:30:ca:73:
         f0:1a:cc:ab:b9:81:b7:52:ef:51:3e:e5:5e:11:15:d7:82:f4:
         d0:44:5d:0e:f0:1e:8f:00:63:0b:bd:b7:27:f3:b3:76:70:3b:
         ce:80:e4:a5:29:6a:42:13:9d:9d:85:2e:2f:48:e8:8d:7d:9c:
         d0:8c:76:e0:b0:60:d3:24:d5:41:13:53:5b:c9:5f:c3:f5:ad:
         f2:4f:64:1a:12:dd:50:fe:b8:9e:52:bb:b5:c2:62:26:e2:7d:
         7b:f1:83:5d:08:84:d2:69:f8:58:9a:87:1f:fe:2d:9c:9e:6a:
         55:cc:67:ae:fb:1c:e8:ec:36:c9:72:20:a8:93:08:aa:4f:11:
         53:61:63:53:1a:b3:0f:75:90:b4:0a:8f:5b:9b:66:b4:0f:f2:
         fb:b3:db:43:1e:19:ae:69:42:c6:22:7c:41:6f:63:73:a9:96:
         e2:46:45:aa:f9:7d:04:40:8c:af:26:1d:5d:6a:77:ae:f8:96:
         0a:86:f6:69:2b:90:f6:1f:2c:9b:12:40:39:46:cb:44:54:79:
         ad:b0:1b:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiMad++gV9MBMMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
NzNjY2ExYjQtMjlhMy00YTU0LTgzY2UtMGRmMmRjOTg1YmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbX68X/ldDu/U5bwxLXRQ6FovHdQSZlxtXQI
ZgC3gvYNuR2CpzGWcfrE2GN5Qlx57QYKb6t+4G17PNTngPGzrdnJzDjrHAjZ+SII
OShk8EsKYR8DyX9LxLrrhIcTBWBLFBhng+PeNUAVSu0SiPL70Lf3UEwv2XJjjI+2
qhgzQ3irGjQSN+1B3c6UVB36xndDE8zFBr7TTVAi9i0iC7OlXAw4hToI1DIkQgcT
uOUMn94uTIlBDbYNCVO7OAdsbJg5lY7EByfgWLhddTy5OV6ub+vJiIqSm2qoGh2Z
ulnI5t+aNG92SqTcfULUUTVZEiLBbnEh90RzIV47UYwuF1ywJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJzhr09H49IeVvC8R79GdV9g5HxDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODA5MTdhYzgtZWZhMi0z
YTQ0LTgwOWYtZTRkMmY3MTg4ZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEK8xbV7tT6GgFuZaox6kjspXAO+O88y3Io+RlfXJSRkh1tiJWEVXd2
A+m0o2QZvKmUhjDKc/AazKu5gbdS71E+5V4RFdeC9NBEXQ7wHo8AYwu9tyfzs3Zw
O86A5KUpakITnZ2FLi9I6I19nNCMduCwYNMk1UETU1vJX8P1rfJPZBoS3VD+uJ5S
u7XCYibifXvxg10IhNJp+Fiahx/+LZyealXMZ677HOjsNslyIKiTCKpPEVNhY1Ma
sw91kLQKj1ubZrQP8vuz20MeGa5pQsYifEFvY3OpluJGRar5fQRAjK8mHV1qd674
lgqG9mkrkPYfLJsSQDlGy0RUea2wGzM=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:19 2025 by rpki-client