Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99572500-0690-3f26-9020-a89d682525ee.roa
File:                     99572500-0690-3f26-9020-a89d682525ee.roa (raw, json)
Hash identifier:          dBpKoUky3IHdPafHbq/xfz6UvJ9XyhaJW386ua3I6UU=
Subject key identifier:   8E:41:98:06:60:38:17:BA:BC:11:AC:F8:67:44:66:16:13:92:35:21
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6631EA1AD00F9FFFD9E30F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99572500-0690-3f26-9020-a89d682525ee.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     30036
IP address blocks:        173.21.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:ea:1a:d0:0f:9f:ff:d9:e3:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=cec91748-d8cb-4cdf-9585-e955687dadbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:04:95:39:2b:57:3f:82:cb:7e:d0:80:7d:
                    66:e0:0e:d9:d0:f5:c4:4f:c5:e9:13:f6:92:c8:d5:
                    a9:ff:98:70:d0:26:b0:f3:c7:70:95:57:08:53:6b:
                    67:4a:6c:7b:c4:a2:60:2d:85:37:97:73:67:00:ae:
                    d6:3f:33:98:df:25:21:68:c2:b3:44:a5:9c:80:5b:
                    2a:03:59:6a:2b:18:ff:a8:04:e7:52:3b:8a:31:cb:
                    26:71:3e:6b:0e:7c:3e:1c:57:91:ff:eb:f4:c5:d6:
                    67:e7:80:4c:45:2b:52:cd:34:4e:90:bc:bf:7e:e7:
                    5e:81:12:d7:7f:30:ba:f5:37:08:cd:4f:95:94:c9:
                    1d:7a:06:54:92:8f:d3:2c:79:fc:d7:93:fb:90:5d:
                    bb:2f:0e:73:36:48:6c:37:3d:9d:59:f6:92:5a:3d:
                    ce:81:b7:23:12:90:3f:14:c3:7b:01:8b:3a:6c:55:
                    91:1f:d6:0b:3d:dc:66:67:03:f5:3d:05:f6:4c:3b:
                    a2:fe:f2:24:11:49:56:65:5d:52:4e:2d:ab:b2:e1:
                    c0:b3:06:85:0e:3c:ed:d7:29:db:4c:45:36:58:0b:
                    54:3c:fb:d6:d3:fd:3b:65:55:5b:4b:75:7e:35:ac:
                    60:ea:e3:02:2e:a7:4b:c5:5e:54:b5:1f:fa:ac:33:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:41:98:06:60:38:17:BA:BC:11:AC:F8:67:44:66:16:13:92:35:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99572500-0690-3f26-9020-a89d682525ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:56:45:c2:c6:38:6a:72:ed:ec:01:6b:21:73:c9:9a:88:7b:
         6d:c8:2f:5c:b1:25:eb:fe:8d:84:5f:d7:3c:53:b3:f8:a0:5e:
         e6:02:ac:4f:27:cb:3e:e5:42:40:cf:36:a4:f7:aa:34:ec:fb:
         0d:0c:72:7d:dd:33:1c:6f:3a:99:bd:37:1a:92:9d:24:17:c7:
         76:6f:4c:f8:05:5b:7f:63:8e:9d:fa:f4:63:fb:0f:ec:39:8f:
         2b:44:74:56:dd:cf:40:e7:6a:ef:33:6a:e0:35:47:a5:15:10:
         8e:5a:d5:67:04:97:9f:46:c0:c7:15:49:06:b4:24:a7:95:45:
         8d:a2:a9:45:a4:7f:db:18:12:5e:a1:ab:30:c5:42:99:90:1e:
         ce:2e:62:84:47:d5:78:65:59:be:34:6f:38:b9:28:2b:b7:1a:
         de:75:91:2a:c2:22:59:7c:49:00:cd:1d:be:39:c3:58:e9:df:
         46:9e:8c:3a:97:07:81:ee:fd:08:63:5d:f4:93:b7:9d:c9:b4:
         6a:e3:2e:4d:f1:ec:66:64:14:b0:99:61:4d:21:56:99:5b:c3:
         35:f7:d5:91:15:7a:29:e0:40:b8:67:d8:da:56:6e:98:78:de:
         7a:0e:62:be:7a:18:38:26:61:41:ba:65:86:7f:50:dc:dc:b8:
         95:9e:7d:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMeoa0A+f/9njD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk
Y2VjOTE3NDgtZDhjYi00Y2RmLTk1ODUtZTk1NTY4N2RhZGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaoElTkrVz+Cy37QgH1m4A7Z0PXET8XpE/aS
yNWp/5hw0Caw88dwlVcIU2tnSmx7xKJgLYU3l3NnAK7WPzOY3yUhaMKzRKWcgFsq
A1lqKxj/qATnUjuKMcsmcT5rDnw+HFeR/+v0xdZn54BMRStSzTROkLy/fudegRLX
fzC69TcIzU+VlMkdegZUko/TLHn815P7kF27Lw5zNkhsNz2dWfaSWj3OgbcjEpA/
FMN7AYs6bFWRH9YLPdxmZwP1PQX2TDui/vIkEUlWZV1STi2rsuHAswaFDjzt1ynb
TEU2WAtUPPvW0/07ZVVbS3V+Naxg6uMCLqdLxV5UtR/6rDMpmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI5BmAZgOBe6vBGs+GdEZhYTkjUhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTk1NzI1MDAtMDY5MC0z
ZjI2LTkwMjAtYTg5ZDY4MjUyNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdWRcLGOGpy7ewBayFzyZqIe23IL1yxJev+jYRf1zxTs/igXuYCrE8n
yz7lQkDPNqT3qjTs+w0Mcn3dMxxvOpm9NxqSnSQXx3ZvTPgFW39jjp369GP7D+w5
jytEdFbdz0Dnau8zauA1R6UVEI5a1WcEl59GwMcVSQa0JKeVRY2iqUWkf9sYEl6h
qzDFQpmQHs4uYoRH1XhlWb40bzi5KCu3Gt51kSrCIll8SQDNHb45w1jp30aejDqX
B4Hu/QhjXfSTt53JtGrjLk3x7GZkFLCZYU0hVplbwzX31ZEVeingQLhn2NpWbph4
3noOYr56GDgmYUG6ZYZ/UNzcuJWefeQ=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:15 2025 by rpki-client