Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ca82f64-3bfb-307b-939b-8717eebad1c8.roa
File:                     4ca82f64-3bfb-307b-939b-8717eebad1c8.roa (raw, json)
Hash identifier:          suSjk3oQguHUG91lP7dTXTIeRlqbKnWvC/bgGWj4mI4=
Subject key identifier:   1E:3C:13:B9:0C:21:0F:D9:AC:2C:10:99:A5:E3:10:76:C7:7D:7C:75
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A605DA16256DADAFE3521A788
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ca82f64-3bfb-307b-939b-8717eebad1c8.roa
Signing time:             Tue 01 Jul 2025 18:07:01 +0000
ROA not before:           Tue 01 Jul 2025 18:07:01 +0000
ROA not after:            Mon 29 Sep 2025 18:07:01 +0000
asID:                     19905
IP address blocks:        173.29.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:60:5d:a1:62:56:da:da:fe:35:21:a7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  1 18:07:01 2025 GMT
            Not After : Sep 29 18:07:01 2025 GMT
        Subject: CN=361264c5-0512-4500-aa29-482dc537564d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:33:97:2c:9f:fb:a7:c7:1b:41:5b:a3:b5:
                    47:00:2c:09:c5:6c:e6:25:fd:2d:b2:91:5a:5c:8a:
                    db:72:76:8f:75:14:15:b9:6f:23:d5:60:ac:58:96:
                    8e:cd:d1:b9:6f:ec:da:37:7e:21:af:19:02:4e:f8:
                    9c:83:9e:28:09:c2:f4:db:74:73:f5:8c:5d:96:de:
                    1a:b7:73:f8:a5:9f:c7:dd:c4:56:62:97:9a:fb:be:
                    3d:3c:1f:77:b0:8b:4d:1f:50:8a:86:80:fc:5e:20:
                    e2:5f:ce:5d:ee:2e:66:99:9b:3b:1a:ce:b8:94:41:
                    a7:ad:c9:77:d3:d7:e8:4d:2b:06:f5:be:d6:89:58:
                    cb:83:4d:9a:5a:02:e2:17:63:7b:da:ae:a6:f3:59:
                    b6:32:1f:b2:ba:e1:e6:a1:44:3b:78:a1:8a:c7:2d:
                    79:fd:12:b5:d2:fa:e5:b6:1e:73:b0:14:71:35:5c:
                    60:ae:b6:e7:47:39:16:f4:d3:5b:de:30:3d:86:7c:
                    5a:60:29:94:f8:be:cc:87:e8:d8:9e:fc:cf:a6:63:
                    10:f2:17:ed:67:a0:53:3f:e7:85:91:7f:17:fa:63:
                    7a:06:0f:8a:df:de:4c:8c:69:98:5d:cf:b3:b0:da:
                    b5:4b:ba:56:d6:7a:2a:ae:e2:0a:7c:b0:ff:f0:1b:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3C:13:B9:0C:21:0F:D9:AC:2C:10:99:A5:E3:10:76:C7:7D:7C:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ca82f64-3bfb-307b-939b-8717eebad1c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:09:c9:c0:18:a6:ab:9d:7f:9b:29:d7:9a:cc:c6:6b:62:48:
         cb:93:eb:5f:55:d0:30:0d:ab:76:ff:f8:f4:6e:61:53:b6:98:
         42:23:0e:a1:07:6b:42:10:8f:ea:6f:22:98:77:66:5a:01:7e:
         eb:11:3f:e9:ad:14:41:f5:5e:94:96:21:b7:d0:f3:66:8a:ae:
         ba:a9:92:9a:bc:a2:cc:55:3d:11:58:43:e1:0b:fd:f4:0f:38:
         50:14:dc:56:4a:75:be:2a:72:32:ae:4a:b5:4f:70:63:69:80:
         cb:e3:64:45:fb:9a:ee:4f:8e:2f:41:43:8b:d2:1e:10:34:1d:
         cd:67:b8:82:78:60:f0:9f:6b:d4:b2:9c:ec:31:57:a5:b2:ef:
         fd:77:04:78:a9:bf:6d:98:ba:83:9a:a7:ab:2b:6a:31:0f:a4:
         00:2f:43:19:a7:95:d2:7a:49:ab:20:4c:46:dc:84:5c:aa:b0:
         b7:b8:f6:64:d9:27:a2:31:c7:82:13:15:c1:9c:c6:76:0b:37:
         2a:58:5d:40:d6:64:bf:f9:d8:42:27:14:bc:ad:f3:34:ea:1b:
         15:20:88:51:b8:39:25:74:ac:ba:d5:d9:24:47:b1:91:26:b8:
         af:25:8a:e2:06:9c:72:7d:d2:8a:04:f9:6b:28:3c:ef:60:de:
         0b:3f:3a:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpgXaFiVtra/jUhp4gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcwMTE4MDcwMVoXDTI1MDkyOTE4MDcwMVowLzEtMCsGA1UEAxMk
MzYxMjY0YzUtMDUxMi00NTAwLWFhMjktNDgyZGM1Mzc1NjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr54zlyyf+6fHG0Fbo7VHACwJxWzmJf0tspFa
XIrbcnaPdRQVuW8j1WCsWJaOzdG5b+zaN34hrxkCTvicg54oCcL023Rz9Yxdlt4a
t3P4pZ/H3cRWYpea+749PB93sItNH1CKhoD8XiDiX85d7i5mmZs7Gs64lEGnrcl3
09foTSsG9b7WiVjLg02aWgLiF2N72q6m81m2Mh+yuuHmoUQ7eKGKxy15/RK10vrl
th5zsBRxNVxgrrbnRzkW9NNb3jA9hnxaYCmU+L7Mh+jYnvzPpmMQ8hftZ6BTP+eF
kX8X+mN6Bg+K395MjGmYXc+zsNq1S7pW1noqruIKfLD/8BvBcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB48E7kMIQ/ZrCwQmaXjEHbHfXx1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGNhODJmNjQtM2JmYi0z
MDdiLTkzOWItODcxN2VlYmFkMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8JycAYpqudf5sp15rMxmtiSMuT619V0DANq3b/+PRuYVO2mEIjDqEH
a0IQj+pvIph3ZloBfusRP+mtFEH1XpSWIbfQ82aKrrqpkpq8osxVPRFYQ+EL/fQP
OFAU3FZKdb4qcjKuSrVPcGNpgMvjZEX7mu5Pji9BQ4vSHhA0Hc1nuIJ4YPCfa9Sy
nOwxV6Wy7/13BHipv22YuoOap6srajEPpAAvQxmnldJ6SasgTEbchFyqsLe49mTZ
J6Ixx4ITFcGcxnYLNypYXUDWZL/52EInFLyt8zTqGxUgiFG4OSV0rLrV2SRHsZEm
uK8liuIGnHJ90ooE+WsoPO9g3gs/Ohg=
-----END CERTIFICATE-----
Generated at Thu Jul 10 09:11:03 2025 by rpki-client