Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e7addc80-184c-312b-ade2-f70cfb034703.roa
File:                     e7addc80-184c-312b-ade2-f70cfb034703.roa (raw, json)
Hash identifier:          1B83mCUR5q75InCfYeJIrhhbx8S5CvMKtEbZ5tWM1L4=
Subject key identifier:   64:A2:29:59:A6:FB:A1:FF:C3:07:82:27:19:6F:F2:21:77:67:83:E2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE457B22EF8BA2F7FCB280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e7addc80-184c-312b-ade2-f70cfb034703.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        173.29.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:45:7b:22:ef:8b:a2:f7:fc:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=71788fde-a3f9-40aa-b94e-18ae3ec7800b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:71:2d:a7:f3:df:59:5c:cc:40:7d:6d:25:
                    76:b6:21:dd:82:7e:dd:f3:78:4b:8c:2f:e2:da:50:
                    9f:d9:1e:4a:cd:db:fe:04:53:1d:15:82:18:40:7d:
                    15:1b:aa:1c:22:80:b3:1f:a9:52:66:e8:71:a2:4a:
                    84:3b:42:a3:dc:8a:0b:76:83:81:10:3d:ad:18:2f:
                    8b:d7:1d:79:38:49:27:16:7a:6e:f5:80:e1:7e:d0:
                    3b:10:61:e2:e6:ff:9c:ea:44:f4:86:c8:ae:b7:47:
                    1c:d1:5f:e2:c6:31:29:57:bb:e0:16:40:b7:86:23:
                    95:9b:fe:b0:dc:4f:d2:0f:e6:07:e6:a9:78:1f:5b:
                    ad:e1:90:17:e5:92:c7:e5:cc:fe:e0:28:6a:00:39:
                    1a:f6:06:67:d9:fc:8d:8b:0d:ec:04:22:b5:52:6a:
                    45:60:de:97:0c:a7:95:64:d7:54:15:07:f7:d3:d5:
                    b7:94:b4:8a:0d:ca:91:ad:94:65:93:61:aa:32:de:
                    73:8c:ff:42:c4:37:8f:36:b1:12:0a:fd:67:8e:98:
                    bd:0a:a4:2f:56:10:70:bc:17:aa:93:b2:93:d2:2d:
                    69:c3:b0:bc:06:f0:6a:1a:ae:6c:5b:76:f6:25:0a:
                    3f:7f:17:ed:49:ec:8f:d8:b2:7a:3e:34:a6:ff:54:
                    32:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A2:29:59:A6:FB:A1:FF:C3:07:82:27:19:6F:F2:21:77:67:83:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e7addc80-184c-312b-ade2-f70cfb034703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0f:89:fc:37:f2:ec:0b:c5:ef:d0:e2:73:d6:0a:ed:02:0f:
         80:cf:93:5a:74:fc:83:8d:1d:4c:a9:69:60:a5:be:cf:9b:87:
         5c:73:cb:ee:3f:80:04:88:0e:86:96:0a:c0:49:9e:35:1c:32:
         ef:ff:e9:a9:28:2a:bb:72:08:8d:34:57:49:b5:df:58:ae:57:
         f5:c8:00:11:14:62:e6:b9:33:39:85:8d:9b:8d:14:8d:93:db:
         18:ed:aa:15:56:ad:6f:17:56:d1:5f:2a:90:9e:e9:c3:1b:c5:
         19:20:b3:56:17:e3:2e:6c:90:9f:27:8c:e5:17:d4:3e:50:e5:
         29:62:25:8c:63:7b:50:1d:45:87:5e:a0:68:99:d5:6d:5e:1e:
         58:5e:4a:f3:77:9c:54:7f:79:9d:e0:ff:42:42:c2:a0:35:16:
         c6:c1:fa:87:a8:f7:54:d2:ef:46:dc:71:06:b9:47:35:8b:f1:
         58:c2:88:30:75:08:c7:c5:c2:12:63:88:32:eb:17:31:e7:8b:
         be:3a:a1:d6:7c:90:90:36:37:0f:cd:fa:18:7f:7c:a8:20:ac:
         57:6f:f3:71:38:04:6f:81:43:03:9c:63:5a:63:cb:95:7f:9c:
         d3:2e:15:a3:2b:fa:bf:3b:94:80:94:a0:cc:58:ed:66:55:f9:
         7a:3a:85:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzkV7Iu+Lovf8soAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NzE3ODhmZGUtYTNmOS00MGFhLWI5NGUtMThhZTNlYzc4MDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhxxLafz31lczEB9bSV2tiHdgn7d83hLjC/i
2lCf2R5Kzdv+BFMdFYIYQH0VG6ocIoCzH6lSZuhxokqEO0Kj3IoLdoOBED2tGC+L
1x15OEknFnpu9YDhftA7EGHi5v+c6kT0hsiut0cc0V/ixjEpV7vgFkC3hiOVm/6w
3E/SD+YH5ql4H1ut4ZAX5ZLH5cz+4ChqADka9gZn2fyNiw3sBCK1UmpFYN6XDKeV
ZNdUFQf309W3lLSKDcqRrZRlk2GqMt5zjP9CxDePNrESCv1njpi9CqQvVhBwvBeq
k7KT0i1pw7C8BvBqGq5sW3b2JQo/fxftSeyP2LJ6PjSm/1Qy3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGSiKVmm+6H/wweCJxlv8iF3Z4PiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTdhZGRjODAtMTg0Yy0z
MTJiLWFkZTItZjcwY2ZiMDM0NzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR1WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADIPifw38uwLxe/Q4nPWCu0CD4DPk1p0/IONHUypaWClvs+bh1xzy+4/
gASIDoaWCsBJnjUcMu//6akoKrtyCI00V0m131iuV/XIABEUYua5MzmFjZuNFI2T
2xjtqhVWrW8XVtFfKpCe6cMbxRkgs1YX4y5skJ8njOUX1D5Q5SliJYxje1AdRYde
oGiZ1W1eHlheSvN3nFR/eZ3g/0JCwqA1FsbB+oeo91TS70bccQa5RzWL8VjCiDB1
CMfFwhJjiDLrFzHni746odZ8kJA2Nw/N+hh/fKggrFdv83E4BG+BQwOcY1pjy5V/
nNMuFaMr+r87lICUoMxY7WZV+Xo6hZM=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:19 2025 by rpki-client