Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae449182-d74b-3c28-8c50-ff3b619bd33d.roa
File:                     ae449182-d74b-3c28-8c50-ff3b619bd33d.roa (raw, json)
Hash identifier:          TaGbu1h1Jtw7jACW8egwUlWTrRZl1O40PpSNrEkHkQQ=
Subject key identifier:   D4:03:CD:7B:99:AE:9F:6A:A4:78:1A:75:BC:F7:93:A0:48:2C:54:20
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B328C6014325CDBE2479A0F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae449182-d74b-3c28-8c50-ff3b619bd33d.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     19905
IP address blocks:        173.18.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:60:14:32:5c:db:e2:47:9a:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=6271bfaa-81e4-4c5b-94b1-17238f9b0cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a9:53:14:be:f0:d6:da:ce:e5:13:cd:5f:6c:
                    8a:f7:2f:74:e4:86:de:4e:74:90:a6:f3:cf:a1:1b:
                    0c:2f:f3:50:c8:0f:0d:92:ed:a1:c8:a7:f0:03:be:
                    7c:78:8c:d4:c3:d9:d9:13:0b:a4:16:1c:d9:87:c8:
                    ac:10:4e:82:d9:86:07:17:b3:ad:5e:88:fc:ce:76:
                    88:38:dd:67:da:f1:da:7f:6c:2c:50:70:a3:07:ac:
                    05:5e:c6:45:4e:2d:5b:88:0f:2d:e1:0c:81:67:f0:
                    78:0b:43:13:b8:0d:f3:3b:02:be:9d:b8:62:2b:95:
                    ed:52:fb:b6:9a:7c:bd:f5:4f:6b:cf:e6:48:71:5a:
                    ed:82:96:9a:70:b6:a2:3a:28:cd:e5:34:29:2b:68:
                    18:3e:67:74:07:fb:18:da:e0:61:27:71:48:e6:07:
                    94:cd:23:f3:fd:2e:fa:56:cd:d1:7d:0d:4a:9e:a9:
                    b9:6a:16:c2:11:a1:d4:cd:9b:35:13:0b:11:74:6c:
                    d2:eb:6d:be:bd:cb:41:40:4d:a5:e7:9c:6d:3a:2e:
                    aa:89:39:4a:5f:5f:8e:a5:e4:d0:48:5d:34:08:55:
                    94:2a:c5:ea:89:c9:95:8e:63:73:13:3d:1b:e5:78:
                    44:d4:39:54:fd:fa:39:86:80:11:67:2f:80:e2:c4:
                    21:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:03:CD:7B:99:AE:9F:6A:A4:78:1A:75:BC:F7:93:A0:48:2C:54:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae449182-d74b-3c28-8c50-ff3b619bd33d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b7:f7:70:da:28:4a:6b:b1:15:e5:fc:67:71:89:c3:e2:6d:
         00:97:14:3c:ad:eb:93:a1:5b:5b:12:89:15:69:2f:d1:c0:a7:
         f3:7e:77:bf:83:85:bb:11:45:41:51:70:68:e7:f6:98:e2:8d:
         9e:65:9f:d0:1c:ab:2f:63:ed:53:c9:18:12:da:d1:79:9b:de:
         25:a1:1a:62:e0:8f:a9:be:b8:e4:92:7d:1e:41:19:f4:17:f8:
         09:bb:06:9a:da:f6:31:47:de:2c:5d:ba:97:38:c5:b1:b7:8c:
         7a:a4:d9:6a:ef:ca:16:bb:da:75:0c:5e:0a:a5:4a:f2:d0:98:
         6c:27:1b:fc:6f:87:34:76:14:11:f5:ae:e2:24:63:21:92:eb:
         0b:64:05:fb:6f:17:0f:1f:b3:db:d2:23:d5:fa:4e:0e:5f:01:
         5e:b2:cf:9d:1f:8c:b3:69:cc:d4:55:6d:2a:99:e7:12:b0:48:
         d6:4b:f8:3c:ba:b0:c6:b5:9a:ee:98:59:c7:47:af:b5:86:45:
         84:c0:2c:f1:73:b3:f2:40:b4:b4:66:4f:3a:bb:a9:80:30:9d:
         11:be:3f:07:2c:14:91:43:fb:8e:bd:a9:59:2a:74:08:cd:1b:
         8e:9b:62:15:5e:be:d9:fc:5a:15:42:7b:50:11:e4:09:8d:6a:
         28:6f:ba:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjGAUMlzb4keaD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
NjI3MWJmYWEtODFlNC00YzViLTk0YjEtMTcyMzhmOWIwY2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAialTFL7w1trO5RPNX2yK9y905IbeTnSQpvPP
oRsML/NQyA8Nku2hyKfwA758eIzUw9nZEwukFhzZh8isEE6C2YYHF7OtXoj8znaI
ON1n2vHaf2wsUHCjB6wFXsZFTi1biA8t4QyBZ/B4C0MTuA3zOwK+nbhiK5XtUvu2
mny99U9rz+ZIcVrtgpaacLaiOijN5TQpK2gYPmd0B/sY2uBhJ3FI5geUzSPz/S76
Vs3RfQ1Knqm5ahbCEaHUzZs1EwsRdGzS622+vctBQE2l55xtOi6qiTlKX1+OpeTQ
SF00CFWUKsXqicmVjmNzEz0b5XhE1DlU/fo5hoARZy+A4sQhywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQDzXuZrp9qpHgadbz3k6BILFQgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWU0NDkxODItZDc0Yi0z
YzI4LThjNTAtZmYzYjYxOWJkMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRJ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAi393DaKEprsRXl/GdxicPibQCXFDyt65OhW1sSiRVpL9HAp/N+d7+D
hbsRRUFRcGjn9pjijZ5ln9Acqy9j7VPJGBLa0Xmb3iWhGmLgj6m+uOSSfR5BGfQX
+Am7Bpra9jFH3ixdupc4xbG3jHqk2Wrvyha72nUMXgqlSvLQmGwnG/xvhzR2FBH1
ruIkYyGS6wtkBftvFw8fs9vSI9X6Tg5fAV6yz50fjLNpzNRVbSqZ5xKwSNZL+Dy6
sMa1mu6YWcdHr7WGRYTALPFzs/JAtLRmTzq7qYAwnRG+PwcsFJFD+469qVkqdAjN
G46bYhVevtn8WhVCe1AR5AmNaihvumI=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:43:13 2025 by rpki-client