Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/302f3772-63f1-372d-943c-e136a9c0aa1c.roa
File:                     302f3772-63f1-372d-943c-e136a9c0aa1c.roa (raw, json)
Hash identifier:          6qJ1fQXwplXHYuOnDdW5/DvOYXfM+KIDCWnjnx3J+fc=
Subject key identifier:   FF:E6:54:D7:E7:85:98:6C:D1:C7:59:43:7D:C7:44:AA:05:C6:E1:9C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B055159B319A99AB5538783C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/302f3772-63f1-372d-943c-e136a9c0aa1c.roa
Signing time:             Fri 29 Aug 2025 20:10:39 +0000
ROA not before:           Fri 29 Aug 2025 20:10:39 +0000
ROA not after:            Thu 27 Nov 2025 21:10:39 +0000
asID:                     19905
IP address blocks:        150.195.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:05:51:59:b3:19:a9:9a:b5:53:87:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 29 20:10:39 2025 GMT
            Not After : Nov 27 21:10:39 2025 GMT
        Subject: CN=ffd28edf-a4d9-4296-82d3-43937c1cef5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:02:58:7f:ca:1a:06:f3:71:69:57:a2:28:
                    58:ce:01:29:76:53:b0:16:68:83:64:7b:46:25:54:
                    68:81:d0:55:06:14:52:e5:51:f3:43:13:fa:1d:87:
                    4c:c6:f1:fe:24:f7:ff:cf:de:ee:4b:e5:53:54:5b:
                    ad:11:be:69:15:15:dc:ca:7f:2b:76:77:11:58:4b:
                    d4:d9:62:64:51:d5:1e:9d:3d:04:87:cd:dc:fc:1a:
                    90:df:3c:84:99:a7:b1:c4:de:f2:a1:8a:4f:df:97:
                    70:a7:97:18:28:6e:8b:d7:a8:74:a0:38:c3:0d:cb:
                    06:38:cf:37:23:15:9b:6e:82:5a:70:ca:b4:3f:0f:
                    ae:82:cf:ea:17:10:3e:2a:4e:2c:d8:a9:d2:a4:12:
                    f0:df:b6:3a:35:6a:eb:29:8a:f5:a9:00:25:6f:73:
                    f1:fc:5e:d3:3c:d5:b7:a4:b8:de:de:b6:31:4e:0d:
                    06:ee:94:de:f1:0f:ef:d6:62:7c:d4:3c:b2:f7:8f:
                    6c:95:aa:2b:eb:4a:b7:06:10:1e:60:c0:35:bc:f3:
                    59:db:bd:b9:25:4b:85:65:a6:fe:06:78:cf:39:65:
                    e1:18:99:a5:b0:d8:70:a7:41:be:1a:20:6c:23:b1:
                    61:3a:db:3c:b8:86:b5:ec:d4:d2:68:7c:f3:72:93:
                    ed:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E6:54:D7:E7:85:98:6C:D1:C7:59:43:7D:C7:44:AA:05:C6:E1:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/302f3772-63f1-372d-943c-e136a9c0aa1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:70:ba:d7:9a:5d:e8:b3:82:bf:80:d7:ac:81:ce:5f:5e:3f:
         a5:ca:6d:30:d4:1f:50:4e:94:d6:37:89:61:b4:c7:54:c1:d6:
         78:07:87:f9:0c:69:7e:a0:50:ee:85:36:a8:5c:55:4f:13:81:
         3d:8d:37:57:9c:2f:2b:14:6d:b6:23:d2:cf:61:da:cb:79:ac:
         f3:dc:c6:5f:ce:da:c5:d4:d0:73:47:d2:7d:b7:13:b3:f5:af:
         66:6b:a9:39:68:05:70:46:20:37:03:0c:c1:09:56:c5:3c:87:
         5b:5f:ef:1b:b4:30:c8:c9:68:da:0e:d1:ac:46:67:21:61:f3:
         be:96:d2:6c:dc:06:58:f8:ae:b6:6f:bf:22:92:ac:2f:8c:e1:
         d7:fe:ae:09:79:80:30:9c:5e:52:35:8c:39:0a:4f:47:a5:0f:
         fa:84:68:d2:28:1c:54:36:e4:9e:72:fe:4c:21:42:ea:5f:6f:
         a5:44:a4:a7:69:87:c6:ae:73:c8:a5:92:00:99:82:d5:78:28:
         90:ed:b8:8b:71:6e:ab:c5:54:f6:55:c1:25:3f:29:e9:1a:2f:
         60:04:9b:4e:9b:c1:65:a4:b1:eb:a3:56:ec:a9:59:ed:99:cb:
         63:f2:54:db:6e:7a:1d:19:2f:52:51:ae:20:f7:b4:e7:95:5a:
         dd:a2:65:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsFUVmzGamatVOHg8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDgyOTIwMTAzOVoXDTI1MTEyNzIxMTAzOVowLzEtMCsGA1UEAxMk
ZmZkMjhlZGYtYTRkOS00Mjk2LTgyZDMtNDM5MzdjMWNlZjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGcCWH/KGgbzcWlXoihYzgEpdlOwFmiDZHtG
JVRogdBVBhRS5VHzQxP6HYdMxvH+JPf/z97uS+VTVFutEb5pFRXcyn8rdncRWEvU
2WJkUdUenT0Eh83c/BqQ3zyEmaexxN7yoYpP35dwp5cYKG6L16h0oDjDDcsGOM83
IxWbboJacMq0Pw+ugs/qFxA+Kk4s2KnSpBLw37Y6NWrrKYr1qQAlb3Px/F7TPNW3
pLje3rYxTg0G7pTe8Q/v1mJ81Dyy949slaor60q3BhAeYMA1vPNZ2725JUuFZab+
BnjPOWXhGJmlsNhwp0G+GiBsI7FhOts8uIa17NTSaHzzcpPtbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/mVNfnhZhs0cdZQ33HRKoFxuGcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzAyZjM3NzItNjNmMS0z
NzJkLTk0M2MtZTEzNmE5YzBhYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVwuteaXeizgr+A16yBzl9eP6XKbTDUH1BOlNY3iWG0x1TB1ngHh/kM
aX6gUO6FNqhcVU8TgT2NN1ecLysUbbYj0s9h2st5rPPcxl/O2sXU0HNH0n23E7P1
r2ZrqTloBXBGIDcDDMEJVsU8h1tf7xu0MMjJaNoO0axGZyFh876W0mzcBlj4rrZv
vyKSrC+M4df+rgl5gDCcXlI1jDkKT0elD/qEaNIoHFQ25J5y/kwhQupfb6VEpKdp
h8auc8ilkgCZgtV4KJDtuItxbqvFVPZVwSU/KekaL2AEm06bwWWkseujVuypWe2Z
y2PyVNtueh0ZL1JRriD3tOeVWt2iZS4=
-----END CERTIFICATE-----
Generated at Sat Sep 6 09:56:40 2025 by rpki-client