Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0ff9b03-8db2-32e5-ba88-74329f011074.roa
File:                     c0ff9b03-8db2-32e5-ba88-74329f011074.roa (raw, json)
Hash identifier:          auS+q5ZmGrmtjQ8ftfTD8c6JmdLWpxw5qSy7zASYcY4=
Subject key identifier:   07:BC:58:0A:32:A0:E4:14:77:88:BF:A9:C2:93:E6:F9:10:47:34:98
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B26AC4FE3E27B107CE3FD5AC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0ff9b03-8db2-32e5-ba88-74329f011074.roa
Signing time:             Wed 10 Sep 2025 18:55:36 +0000
ROA not before:           Wed 10 Sep 2025 18:55:36 +0000
ROA not after:            Tue 09 Dec 2025 19:55:36 +0000
asID:                     30036
IP address blocks:        173.23.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:26:ac:4f:e3:e2:7b:10:7c:e3:fd:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 10 18:55:36 2025 GMT
            Not After : Dec  9 19:55:36 2025 GMT
        Subject: CN=42aca1d8-7bd1-4a37-bffe-c52382cfbd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:52:ae:ab:2d:ec:fa:1a:38:e7:76:95:bc:
                    02:f3:d9:60:0e:72:8c:50:88:28:84:e8:b6:71:7f:
                    75:ed:c3:8d:20:3f:e7:57:44:73:c1:96:7f:51:04:
                    c4:96:2d:6d:8e:9a:3b:44:14:7f:11:8b:9c:80:68:
                    c7:bf:e7:da:34:27:f5:48:f9:71:ae:6c:16:8f:41:
                    56:3f:b8:b4:52:47:72:07:e9:25:e6:0b:26:4f:1b:
                    fe:74:32:37:6b:7e:f0:9d:01:bc:bc:23:da:ee:9c:
                    00:04:aa:69:94:88:6e:24:25:60:75:d2:85:72:32:
                    43:69:ea:4f:b6:22:fa:d9:3c:4e:42:0c:6a:8d:cb:
                    7f:2d:3a:86:2f:b3:1b:db:6b:4f:34:b6:79:2b:74:
                    e5:a4:22:1f:f0:57:e5:ad:9e:e3:c2:76:3e:c1:e3:
                    99:ba:3c:28:e3:34:b0:90:f3:f1:73:a2:d3:2f:76:
                    65:88:70:f5:71:fe:9c:38:4c:c3:d8:fd:43:93:2f:
                    bb:b7:f1:44:e9:40:cb:9e:12:c6:35:65:5c:ae:dd:
                    0a:a9:f4:9d:b0:77:7a:fd:e6:c2:28:1e:2d:cd:00:
                    6a:48:3b:63:33:d2:4d:e1:1e:b8:c5:29:b7:93:b0:
                    40:92:b8:ae:2a:14:1b:4b:59:c9:ce:8d:50:6b:da:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BC:58:0A:32:A0:E4:14:77:88:BF:A9:C2:93:E6:F9:10:47:34:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0ff9b03-8db2-32e5-ba88-74329f011074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a6:28:f8:ea:9a:76:bf:52:2d:3c:0a:0f:0a:c8:b1:3d:64:
         a0:b4:51:b2:f8:f4:58:41:d1:4d:62:73:26:90:4d:d1:83:33:
         92:d5:d8:4e:c5:ce:c5:2f:7e:4a:9e:c1:45:00:70:e4:9c:48:
         59:17:3d:66:aa:bc:93:7a:e5:06:9f:67:b4:8b:b8:40:3f:25:
         78:bd:fb:a9:4c:c4:62:cd:34:ff:de:f6:a6:50:d2:0e:5d:a1:
         0b:b1:1c:2a:51:d6:aa:17:e9:ee:ac:5b:3b:d9:12:9c:8b:37:
         21:33:6d:47:cd:31:f0:c7:c6:40:26:0c:94:45:11:8f:12:83:
         91:1a:ab:b2:e2:4f:55:3a:24:9e:07:70:51:7f:ae:91:cf:c3:
         b8:19:4a:08:0b:f5:d0:32:5a:dc:fa:04:8e:00:d8:a2:b7:e5:
         0b:4a:55:32:52:16:5b:48:95:89:97:68:88:ae:23:b3:c0:47:
         5f:46:c6:51:7d:43:07:01:1b:4b:c5:6f:0f:fd:00:33:46:43:
         1b:08:b6:c3:9d:bb:4a:02:7b:de:a2:60:80:fa:86:84:02:c7:
         8c:bd:8a:56:fb:c8:85:6a:eb:6f:29:6b:8b:2b:08:de:fd:14:
         51:44:39:a2:29:fc:ba:95:8b:b2:01:9e:32:f0:57:ce:9b:66:
         09:7d:40:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmrE/j4nsQfOP9WsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDkxMDE4NTUzNloXDTI1MTIwOTE5NTUzNlowLzEtMCsGA1UEAxMk
NDJhY2ExZDgtN2JkMS00YTM3LWJmZmUtYzUyMzgyY2ZiZDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNBSrqst7PoaOOd2lbwC89lgDnKMUIgohOi2
cX917cONID/nV0RzwZZ/UQTEli1tjpo7RBR/EYucgGjHv+faNCf1SPlxrmwWj0FW
P7i0UkdyB+kl5gsmTxv+dDI3a37wnQG8vCPa7pwABKpplIhuJCVgddKFcjJDaepP
tiL62TxOQgxqjct/LTqGL7Mb22tPNLZ5K3TlpCIf8FflrZ7jwnY+weOZujwo4zSw
kPPxc6LTL3ZliHD1cf6cOEzD2P1Dky+7t/FE6UDLnhLGNWVcrt0KqfSdsHd6/ebC
KB4tzQBqSDtjM9JN4R64xSm3k7BAkriuKhQbS1nJzo1Qa9oW8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAe8WAoyoOQUd4i/qcKT5vkQRzSYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzBmZjliMDMtOGRiMi0z
MmU1LWJhODgtNzQzMjlmMDExMDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRdYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+mKPjqmna/Ui08Cg8KyLE9ZKC0UbL49FhB0U1icyaQTdGDM5LV2E7F
zsUvfkqewUUAcOScSFkXPWaqvJN65QafZ7SLuEA/JXi9+6lMxGLNNP/e9qZQ0g5d
oQuxHCpR1qoX6e6sWzvZEpyLNyEzbUfNMfDHxkAmDJRFEY8Sg5Eaq7LiT1U6JJ4H
cFF/rpHPw7gZSggL9dAyWtz6BI4A2KK35QtKVTJSFltIlYmXaIiuI7PAR19GxlF9
QwcBG0vFbw/9ADNGQxsItsOdu0oCe96iYID6hoQCx4y9ilb7yIVq628pa4srCN79
FFFEOaIp/LqVi7IBnjLwV86bZgl9QD4=
-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:10 2025 by rpki-client