Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c95681dd-f078-3e0f-beb3-82f8988520af.roa
File:                     c95681dd-f078-3e0f-beb3-82f8988520af.roa (raw, json)
Hash identifier:          k7vFhnSQSBldFrEu26zCJILtTrhlpN8ZWo/uiMfLdpU=
Subject key identifier:   4D:CE:68:0A:A5:3E:7C:82:75:50:E2:C8:8A:CA:19:67:C2:FD:E2:6A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B62022C5C8B5CA338BF098A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c95681dd-f078-3e0f-beb3-82f8988520af.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        173.17.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:2c:5c:8b:5c:a3:38:bf:09:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=9b538a91-f829-4504-ac32-9c5e599f5c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:74:5e:8e:a6:15:26:57:f0:9a:cd:9f:90:
                    4c:f7:18:c3:51:21:79:fd:2f:0d:74:b9:70:f9:ad:
                    73:2e:0d:b6:07:c2:4d:6b:db:bb:8d:fc:25:65:ee:
                    31:f9:12:e7:56:78:0a:85:29:d6:5f:2c:18:21:56:
                    42:70:ba:28:2a:f6:cb:7b:ba:af:31:11:f2:31:5f:
                    bb:53:79:b9:ed:a9:2d:ab:9b:fb:05:3f:1a:02:fc:
                    a9:2b:7d:07:d6:47:e3:0d:f5:68:21:8e:39:fb:8b:
                    41:6c:46:f5:47:07:f2:da:86:8b:dc:f6:1f:42:fa:
                    60:71:4e:c7:d7:8d:1a:d8:cc:29:6f:bd:4f:59:e3:
                    45:8e:cd:68:b4:2c:8f:d8:99:d2:b2:a1:29:7c:2c:
                    81:52:c6:a4:76:6d:d1:d2:b2:99:3e:8b:0c:49:27:
                    f8:96:38:5c:8b:01:63:9e:2d:a5:c7:07:64:a2:6a:
                    c5:38:65:6c:b0:0b:57:e9:72:4e:0b:ab:28:fb:44:
                    56:94:cf:60:3d:a2:1d:88:aa:97:aa:88:05:f9:3c:
                    86:c9:7a:c7:c2:0d:d3:b0:64:d3:92:9c:cd:a8:05:
                    3c:6d:7f:e3:c6:c0:ad:0c:06:ce:c1:86:36:71:cc:
                    f6:73:69:2f:50:0c:62:a0:99:28:34:d9:6c:a6:96:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CE:68:0A:A5:3E:7C:82:75:50:E2:C8:8A:CA:19:67:C2:FD:E2:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c95681dd-f078-3e0f-beb3-82f8988520af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:af:58:2a:9e:97:34:05:ce:5c:0a:13:2f:51:3c:fc:cf:10:
         29:dc:52:10:a4:f1:15:7f:91:89:fe:74:c6:c3:d1:6a:18:5f:
         19:8f:03:e6:be:d1:e0:fe:83:4e:38:69:53:2d:98:25:9e:4c:
         60:0b:59:ba:b3:ec:7b:e9:98:ce:a9:58:0c:32:74:48:6a:d8:
         03:16:46:27:bb:fe:14:3a:6f:31:0d:5c:f4:9d:0b:65:8c:88:
         37:74:43:88:2d:ea:a5:82:3e:5e:b1:59:14:8f:04:b1:1d:6b:
         64:a1:5e:4b:69:4d:d1:04:c3:f6:eb:de:cb:cd:e0:c5:ee:b7:
         54:6e:3d:d6:0f:e7:79:01:07:30:14:1a:6c:db:3e:c1:1d:ef:
         ba:22:c5:ca:5a:a5:df:af:aa:b4:0d:65:69:1e:55:09:98:04:
         cb:82:bd:97:fa:11:a5:f1:6c:b3:a8:eb:a1:12:0d:17:2a:9a:
         b2:75:5e:43:2b:31:6d:df:49:81:fd:51:5b:5a:2b:6b:a3:f9:
         1f:2a:e6:41:d7:cd:d6:bf:6f:3e:76:ba:19:3f:90:90:a7:15:
         cf:d5:f1:c5:30:69:ba:af:17:ba:e4:c9:9c:c2:5c:ed:66:91:
         da:de:28:08:dd:3a:6d:bd:1f:f6:19:c8:04:dd:15:0c:61:24:
         2b:cb:af:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAixci1yjOL8JigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
OWI1MzhhOTEtZjgyOS00NTA0LWFjMzItOWM1ZTU5OWY1YzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1p0Xo6mFSZX8JrNn5BM9xjDUSF5/S8NdLlw
+a1zLg22B8JNa9u7jfwlZe4x+RLnVngKhSnWXywYIVZCcLooKvbLe7qvMRHyMV+7
U3m57aktq5v7BT8aAvypK30H1kfjDfVoIY45+4tBbEb1Rwfy2oaL3PYfQvpgcU7H
140a2Mwpb71PWeNFjs1otCyP2JnSsqEpfCyBUsakdm3R0rKZPosMSSf4ljhciwFj
ni2lxwdkomrFOGVssAtX6XJOC6so+0RWlM9gPaIdiKqXqogF+TyGyXrHwg3TsGTT
kpzNqAU8bX/jxsCtDAbOwYY2ccz2c2kvUAxioJkoNNlsppY3JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3OaAqlPnyCdVDiyIrKGWfC/eJqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzk1NjgxZGQtZjA3OC0z
ZTBmLWJlYjMtODJmODk4ODUyMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRG6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKvWCqelzQFzlwKEy9RPPzPECncUhCk8RV/kYn+dMbD0WoYXxmPA+a+
0eD+g044aVMtmCWeTGALWbqz7HvpmM6pWAwydEhq2AMWRie7/hQ6bzENXPSdC2WM
iDd0Q4gt6qWCPl6xWRSPBLEda2ShXktpTdEEw/br3svN4MXut1RuPdYP53kBBzAU
GmzbPsEd77oixcpapd+vqrQNZWkeVQmYBMuCvZf6EaXxbLOo66ESDRcqmrJ1XkMr
MW3fSYH9UVtaK2uj+R8q5kHXzda/bz52uhk/kJCnFc/V8cUwabqvF7rkyZzCXO1m
kdreKAjdOm29H/YZyATdFQxhJCvLrwU=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:48:25 2025 by rpki-client