Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58a48a1c-4c64-3639-a785-fa3bfbbc5c6b.roa
File:                     58a48a1c-4c64-3639-a785-fa3bfbbc5c6b.roa (raw, json)
Hash identifier:          VxGzE2a0neKV1eZZoG3pPXs9lsW/rL4N2Q8hOtqCKe8=
Subject key identifier:   96:A6:2A:BA:42:8D:6C:0A:5B:A8:67:DE:25:32:F2:21:3A:78:19:FA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79CD834342914941122A960
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58a48a1c-4c64-3639-a785-fa3bfbbc5c6b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.30.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:d8:34:34:29:14:94:11:22:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6ab8317c-0a1b-444a-b9a9-edde39265042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:da:41:94:c9:87:26:bf:d6:81:f9:cb:6b:41:
                    cc:ef:05:87:29:08:1d:72:51:34:d3:d8:d3:e5:2a:
                    db:ad:e2:ed:d7:73:37:8e:4c:d6:ae:96:49:13:fb:
                    34:b0:32:23:8b:87:e4:8a:d4:da:f4:67:5d:bb:c7:
                    ef:c4:03:77:b7:8d:56:56:ec:a9:04:fa:42:65:4c:
                    c0:48:8f:ac:43:a9:e7:5c:98:99:a5:1a:6b:29:39:
                    e1:0b:1d:5a:ef:73:72:c7:99:06:0d:39:7f:ca:6b:
                    1c:05:7a:9e:43:2a:d3:e7:1e:b6:16:e2:94:2b:d4:
                    f9:34:25:61:cb:0e:65:23:0f:a1:06:2c:26:e9:92:
                    c0:61:3c:ad:12:e7:34:f0:53:89:3b:75:1b:1e:93:
                    f2:3f:2d:f4:f2:c5:0f:45:50:fc:00:b2:23:b6:91:
                    e2:64:53:b0:e5:9a:43:91:3a:8d:c1:cb:4a:11:78:
                    ef:df:01:29:4b:68:ca:56:31:83:1c:3d:bc:c8:af:
                    47:da:b5:a3:1d:c8:4c:04:c9:58:67:ec:07:fb:4d:
                    c1:29:1d:06:a3:0a:84:c1:6e:12:15:f4:34:a5:a8:
                    22:61:0e:77:fe:bd:88:fe:fd:a1:a0:ff:8f:2d:f3:
                    fc:71:d6:61:32:92:fa:3f:ab:b5:31:3f:93:86:1d:
                    47:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A6:2A:BA:42:8D:6C:0A:5B:A8:67:DE:25:32:F2:21:3A:78:19:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58a48a1c-4c64-3639-a785-fa3bfbbc5c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.30.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:15:a4:3f:d5:e4:5e:2d:6d:f8:5b:f0:fe:e1:c0:4d:7a:65:
         6c:6b:22:af:45:9f:9d:c4:2d:58:96:d5:16:19:85:19:52:cc:
         02:66:53:db:c8:9b:4e:d3:d7:b8:55:bc:90:5d:fa:9e:33:06:
         15:98:7e:de:be:04:1b:ed:77:46:78:89:86:69:59:ea:ca:42:
         16:44:bc:68:04:8f:91:27:7d:1f:ff:92:00:5d:b5:f4:7f:d3:
         1c:32:f3:a2:e9:45:b2:82:49:43:24:3d:b8:9b:09:50:e1:5e:
         10:67:f0:b8:bf:e4:dc:c3:65:8a:69:f4:44:b7:de:05:69:b8:
         f9:ea:51:5b:e0:eb:0b:58:df:4e:c2:c3:2f:ce:6f:57:35:a7:
         e1:25:9e:cd:ba:60:7c:4a:3f:9e:d6:90:a1:62:a0:49:2b:04:
         b4:ef:af:71:4f:30:ed:e7:03:b3:a5:38:f9:dd:23:8d:61:81:
         34:0e:70:e0:38:00:71:3b:61:87:73:92:e8:30:f6:58:27:71:
         d2:d5:3b:38:3c:7f:aa:65:b6:5d:bd:86:26:6f:b9:a5:10:50:
         25:da:1d:94:b1:d6:5a:8b:df:66:0e:0e:16:5e:89:22:b0:39:
         72:e4:14:78:9a:38:46:c5:93:98:bf:47:ff:83:f5:db:4a:67:
         5b:35:c4:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnNg0NCkUlBEiqWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmFiODMxN2MtMGExYi00NDRhLWI5YTktZWRkZTM5MjY1MDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldpBlMmHJr/WgfnLa0HM7wWHKQgdclE009jT
5SrbreLt13M3jkzWrpZJE/s0sDIji4fkitTa9Gddu8fvxAN3t41WVuypBPpCZUzA
SI+sQ6nnXJiZpRprKTnhCx1a73Nyx5kGDTl/ymscBXqeQyrT5x62FuKUK9T5NCVh
yw5lIw+hBiwm6ZLAYTytEuc08FOJO3UbHpPyPy308sUPRVD8ALIjtpHiZFOw5ZpD
kTqNwctKEXjv3wEpS2jKVjGDHD28yK9H2rWjHchMBMlYZ+wH+03BKR0GowqEwW4S
FfQ0pagiYQ53/r2I/v2hoP+PLfP8cdZhMpL6P6u1MT+Thh1HowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJamKrpCjWwKW6hn3iUy8iE6eBn6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNThhNDhhMWMtNGM2NC0z
NjM5LWE3ODUtZmEzYmZiYmM1YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR7NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcVpD/V5F4tbfhb8P7hwE16ZWxrIq9Fn53ELViW1RYZhRlSzAJmU9vI
m07T17hVvJBd+p4zBhWYft6+BBvtd0Z4iYZpWerKQhZEvGgEj5EnfR//kgBdtfR/
0xwy86LpRbKCSUMkPbibCVDhXhBn8Li/5NzDZYpp9ES33gVpuPnqUVvg6wtY307C
wy/Ob1c1p+Elns26YHxKP57WkKFioEkrBLTvr3FPMO3nA7OlOPndI41hgTQOcOA4
AHE7YYdzkugw9lgncdLVOzg8f6pltl29hiZvuaUQUCXaHZSx1lqL32YODhZeiSKw
OXLkFHiaOEbFk5i/R/+D9dtKZ1s1xMg=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:26 2026 by rpki-client