Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9249e6f-a2ea-3eab-9b3c-8b95681cc88d.roa
File:                     a9249e6f-a2ea-3eab-9b3c-8b95681cc88d.roa (raw, json)
Hash identifier:          CSSVQZTdfVrQaYh/9CMYIQXnNCGO1QyL61pYgxsAbHU=
Subject key identifier:   08:AE:5E:D8:88:BE:22:E2:C3:71:6F:15:B5:BD:B7:A9:47:44:6D:D1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8A8855ED87C545F2BEFB8300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9249e6f-a2ea-3eab-9b3c-8b95681cc88d.roa
Signing time:             Wed 16 Jul 2025 20:37:01 +0000
ROA not before:           Wed 16 Jul 2025 20:37:01 +0000
ROA not after:            Tue 14 Oct 2025 20:37:01 +0000
asID:                     19905
IP address blocks:        173.22.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8a:88:55:ed:87:c5:45:f2:be:fb:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 16 20:37:01 2025 GMT
            Not After : Oct 14 20:37:01 2025 GMT
        Subject: CN=8c410a5f-e78c-490b-80cc-4399c2ba2c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:ca:46:c4:e1:48:5a:86:4f:c7:d2:26:30:
                    77:32:b8:d8:04:86:67:88:c0:c7:ea:21:85:1c:e5:
                    9e:3f:32:fb:be:d6:d9:12:8b:fe:2a:54:ee:a7:87:
                    2a:0d:a5:92:08:59:a9:f5:e1:2c:dc:8d:b9:14:93:
                    b2:4b:81:83:9e:d1:42:4d:10:aa:92:e1:e5:2a:81:
                    49:67:10:a0:fa:5d:ab:cb:24:b5:e0:7e:a1:9c:53:
                    f3:83:fd:0f:73:e2:46:27:5e:0e:18:b2:5e:06:f8:
                    fb:a4:f2:22:79:07:3c:e2:2a:7f:84:6b:fe:51:3c:
                    9c:d8:30:03:75:a1:70:3c:b5:eb:9d:f1:66:ab:03:
                    41:26:a9:b7:4b:35:46:7d:d2:26:12:ce:ed:92:06:
                    8a:df:23:5f:cb:f8:fb:06:98:a1:9f:87:33:63:7f:
                    dd:1c:61:c5:ff:69:c7:10:67:cb:d0:03:b5:d2:ee:
                    6a:5f:d8:ea:39:3a:03:ac:92:f7:b4:fe:b4:ce:b3:
                    be:05:cd:f8:84:5a:a3:b6:e4:2e:49:e8:63:08:2c:
                    61:50:9c:b0:2a:f6:31:ad:60:12:8c:23:ec:fe:f5:
                    6d:44:b0:63:08:17:94:30:db:31:44:30:4e:6f:b5:
                    86:56:03:36:25:98:35:80:73:68:fe:1c:bd:6f:f6:
                    2d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AE:5E:D8:88:BE:22:E2:C3:71:6F:15:B5:BD:B7:A9:47:44:6D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9249e6f-a2ea-3eab-9b3c-8b95681cc88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:4b:ee:ec:fc:54:89:5c:ae:af:26:3a:a0:70:9c:52:46:e3:
         c0:78:81:7b:5d:4c:ab:e4:26:de:61:73:04:b3:79:cc:ed:89:
         13:c2:df:0c:61:46:e1:35:f3:18:69:e6:1d:4f:bb:89:17:1d:
         df:69:ae:d9:a8:a9:3b:47:ae:3b:10:5b:28:b0:27:7e:17:66:
         c5:0c:e5:93:d2:77:1a:c4:2e:33:56:18:74:cd:2a:dc:61:54:
         7e:1f:6c:02:98:15:e2:e1:e9:a9:d8:ee:e9:4e:c0:d2:d0:61:
         63:ef:87:44:69:5d:ba:9e:e4:06:29:76:d0:78:59:5d:3a:45:
         06:ca:37:c8:d8:b2:3f:21:c6:fd:e9:ff:d3:f0:b7:f6:ca:d3:
         2e:ea:9d:9b:17:d3:9f:71:5f:3c:92:73:c3:3f:f1:50:41:ee:
         55:59:b4:10:59:67:9d:7c:e5:ff:e1:67:10:1e:36:24:e8:62:
         c8:6c:5f:48:05:40:c8:f7:67:4f:41:30:98:b0:c6:35:f6:a7:
         bc:14:c0:ce:78:4d:cb:15:ab:05:3f:be:d0:1d:ca:95:f6:98:
         b3:79:5e:5a:71:f3:ed:3a:14:10:a0:2e:f7:27:7f:1c:7b:9a:
         b3:f4:6e:bd:41:50:17:ac:be:2d:d1:d5:36:a2:1c:31:23:13:
         0c:e1:23:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqKiFXth8VF8r77gwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNjIwMzcwMVoXDTI1MTAxNDIwMzcwMVowLzEtMCsGA1UEAxMk
OGM0MTBhNWYtZTc4Yy00OTBiLTgwY2MtNDM5OWMyYmEyYzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoDKRsThSFqGT8fSJjB3MrjYBIZniMDH6iGF
HOWePzL7vtbZEov+KlTup4cqDaWSCFmp9eEs3I25FJOyS4GDntFCTRCqkuHlKoFJ
ZxCg+l2ryyS14H6hnFPzg/0Pc+JGJ14OGLJeBvj7pPIieQc84ip/hGv+UTyc2DAD
daFwPLXrnfFmqwNBJqm3SzVGfdImEs7tkgaK3yNfy/j7Bpihn4czY3/dHGHF/2nH
EGfL0AO10u5qX9jqOToDrJL3tP60zrO+Bc34hFqjtuQuSehjCCxhUJywKvYxrWAS
jCPs/vVtRLBjCBeUMNsxRDBOb7WGVgM2JZg1gHNo/hy9b/YtOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAiuXtiIviLiw3FvFbW9t6lHRG3RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTkyNDllNmYtYTJlYS0z
ZWFiLTliM2MtOGI5NTY4MWNjODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRZjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABVL7uz8VIlcrq8mOqBwnFJG48B4gXtdTKvkJt5hcwSzecztiRPC3wxh
RuE18xhp5h1Pu4kXHd9prtmoqTtHrjsQWyiwJ34XZsUM5ZPSdxrELjNWGHTNKtxh
VH4fbAKYFeLh6anY7ulOwNLQYWPvh0RpXbqe5AYpdtB4WV06RQbKN8jYsj8hxv3p
/9Pwt/bK0y7qnZsX059xXzySc8M/8VBB7lVZtBBZZ5185f/hZxAeNiToYshsX0gF
QMj3Z09BMJiwxjX2p7wUwM54TcsVqwU/vtAdypX2mLN5Xlpx8+06FBCgLvcnfxx7
mrP0br1BUBesvi3R1TaiHDEjEwzhIyA=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:46 2025 by rpki-client