Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa
File:                     9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa (raw, json)
Hash identifier:          NZpgTE0UYAmcUnTvGZ/m9uIDeExZRHebZ/ObINPZy3s=
Subject key identifier:   BA:93:6C:A3:3B:E1:E0:18:85:84:FA:82:F1:4B:DD:34:EB:CF:1D:E3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6201DF30BE9E324810694280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        173.19.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:df:30:be:9e:32:48:10:69:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=a43fd9f8-c564-419b-ac19-1583654510c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:97:e5:d9:d6:85:61:c1:da:2c:0d:1e:24:8e:
                    7d:61:1d:27:5f:3e:31:00:ce:8c:fb:da:04:ba:d3:
                    58:d2:ee:56:a5:2e:4a:41:86:b8:f9:9f:7b:cb:95:
                    8b:59:90:47:da:f7:b2:34:1f:af:68:1a:21:44:eb:
                    ed:64:18:c8:4b:c1:ac:c9:16:93:cd:44:5f:03:66:
                    3f:cf:d0:83:49:54:24:b7:cd:fe:73:ce:24:9b:fa:
                    62:7c:1d:7b:8f:0f:3e:cf:37:c3:82:be:b3:db:fd:
                    33:32:fb:e3:e1:ba:98:97:27:92:d3:a0:63:12:dc:
                    b3:e2:70:33:ee:7a:02:d6:08:45:c6:12:79:e0:f1:
                    34:e3:13:86:ee:95:05:f4:07:45:53:70:0f:c1:8d:
                    32:b0:90:80:4d:32:a9:62:81:49:18:b7:c8:73:84:
                    6f:20:69:72:97:eb:fd:fd:ca:0f:06:e3:6f:2b:51:
                    c3:c6:b9:3e:69:b0:40:e5:c1:21:47:60:e5:89:e8:
                    07:5a:d1:c6:17:f6:03:4f:28:3e:8c:9c:37:f2:6f:
                    60:65:d4:78:53:bb:d2:0d:a8:96:b9:5e:9a:30:64:
                    11:aa:50:07:d2:8a:21:ab:78:5f:0c:82:b2:ab:51:
                    f8:7e:ad:20:ed:a1:e9:7e:d4:19:a3:99:e9:40:4d:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:93:6C:A3:3B:E1:E0:18:85:84:FA:82:F1:4B:DD:34:EB:CF:1D:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb6c8f8-695c-36ca-9b5d-188d6ee8a112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b7:29:39:3a:f4:4f:50:2b:6e:33:d2:3d:b7:77:0c:64:54:
         8f:bc:a8:5d:88:a2:4d:2a:40:f0:4a:0d:54:ec:90:06:b1:ef:
         2a:51:cd:bc:a3:20:e2:cb:44:dc:19:6c:79:87:ed:27:ad:94:
         59:59:68:60:e0:4c:fe:93:eb:bb:ac:07:16:6d:5f:38:25:60:
         81:21:ef:86:53:3e:dd:d3:26:88:26:45:45:3f:75:9d:4e:06:
         24:ce:ed:e9:65:d6:65:3a:ff:3b:3e:2b:19:1b:41:6c:29:9b:
         b1:61:b3:f2:cb:53:ac:4b:6e:66:60:55:10:21:bb:ac:9d:94:
         ec:f1:e6:83:d3:16:d4:b5:e9:74:a2:c7:c0:aa:cb:11:38:f4:
         6d:ba:4e:b4:69:d7:60:bf:83:86:57:3d:fd:29:14:0c:ed:a4:
         5b:2d:c5:68:b9:ff:35:1e:ed:2e:d4:f9:88:87:e1:35:82:b7:
         e8:3c:f1:32:80:dd:76:2a:dd:d6:20:54:f4:42:c6:84:18:83:
         78:f4:95:8b:b5:ed:ee:4d:d0:59:bf:1f:f2:b9:95:77:d9:7a:
         2f:1c:42:fe:9d:96:bb:8e:cb:72:7d:40:0f:d1:ff:8a:d6:e7:
         7c:15:cc:83:b9:1f:f4:45:cd:cb:16:79:69:4e:46:17:28:68:
         ba:10:e5:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAd8wvp4ySBBpQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
YTQzZmQ5ZjgtYzU2NC00MTliLWFjMTktMTU4MzY1NDUxMGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpfl2daFYcHaLA0eJI59YR0nXz4xAM6M+9oE
utNY0u5WpS5KQYa4+Z97y5WLWZBH2veyNB+vaBohROvtZBjIS8GsyRaTzURfA2Y/
z9CDSVQkt83+c84km/pifB17jw8+zzfDgr6z2/0zMvvj4bqYlyeS06BjEtyz4nAz
7noC1ghFxhJ54PE04xOG7pUF9AdFU3APwY0ysJCATTKpYoFJGLfIc4RvIGlyl+v9
/coPBuNvK1HDxrk+abBA5cEhR2DliegHWtHGF/YDTyg+jJw38m9gZdR4U7vSDaiW
uV6aMGQRqlAH0oohq3hfDIKyq1H4fq0g7aHpftQZo5npQE3YfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqTbKM74eAYhYT6gvFL3TTrzx3jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWNiNmM4ZjgtNjk1Yy0z
NmNhLTliNWQtMTg4ZDZlZThhMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRN4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEC3KTk69E9QK24z0j23dwxkVI+8qF2Iok0qQPBKDVTskAax7ypRzbyj
IOLLRNwZbHmH7SetlFlZaGDgTP6T67usBxZtXzglYIEh74ZTPt3TJogmRUU/dZ1O
BiTO7ell1mU6/zs+KxkbQWwpm7Fhs/LLU6xLbmZgVRAhu6ydlOzx5oPTFtS16XSi
x8CqyxE49G26TrRp12C/g4ZXPf0pFAztpFstxWi5/zUe7S7U+YiH4TWCt+g88TKA
3XYq3dYgVPRCxoQYg3j0lYu17e5N0Fm/H/K5lXfZei8cQv6dlruOy3J9QA/R/4rW
53wVzIO5H/RFzcsWeWlORhcoaLoQ5fo=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:51:53 2025 by rpki-client