Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e5d50a3-7ca9-37f1-aa33-4cd66c63d176.roa
File:                     6e5d50a3-7ca9-37f1-aa33-4cd66c63d176.roa (raw, json)
Hash identifier:          8ZaUOZ7/YtUNb6Fj53Na1TyDjwuoAwrbwRNC2IPASsY=
Subject key identifier:   95:CE:BA:04:F1:34:5B:52:9E:65:9E:A9:BC:87:FE:8A:4B:C3:9F:A4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA7A0932E3E2DA4064F2FBBE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e5d50a3-7ca9-37f1-aa33-4cd66c63d176.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.21.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:93:2e:3e:2d:a4:06:4f:2f:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=35935e68-86cd-4924-937f-0612a80bcc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:11:21:cb:2e:e3:45:8a:11:1e:e0:0b:22:
                    73:79:89:18:6c:0b:1f:25:dc:37:a2:da:24:60:48:
                    f7:e4:46:4e:9c:32:be:47:35:57:ac:fb:34:60:62:
                    14:72:ad:7a:0b:34:b4:ef:9e:c7:f1:e9:a6:b4:3a:
                    f5:ef:7f:23:7a:9e:61:84:cc:7d:2f:0e:a0:20:79:
                    39:b3:fd:9a:c4:15:e7:4a:9d:a6:69:1d:bd:02:1d:
                    61:bf:8e:98:e4:99:03:44:63:ad:1f:bf:4f:df:5b:
                    83:ac:93:60:3c:67:46:df:11:4b:b6:4a:58:5c:15:
                    c3:94:44:b0:02:ee:fc:7d:c2:31:d6:3b:79:1b:08:
                    76:31:6a:a9:4d:5a:1a:c7:26:10:2b:09:31:24:72:
                    17:be:1b:4f:df:9d:3c:42:bf:27:da:c6:83:91:67:
                    c0:7e:1b:61:4c:91:65:ec:38:78:b8:cd:21:13:58:
                    b5:71:8d:5b:7c:73:1d:fb:5e:93:cc:e2:99:bc:41:
                    2f:e4:e2:11:c2:a0:02:f8:e3:95:2b:22:21:27:56:
                    d1:4c:78:64:99:08:1a:7f:98:e3:61:84:8e:45:aa:
                    8e:49:59:f7:f2:d1:02:c1:ae:a5:d3:d4:31:3b:2e:
                    70:08:a9:74:76:e8:f3:47:19:31:23:f1:5c:a7:92:
                    77:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CE:BA:04:F1:34:5B:52:9E:65:9E:A9:BC:87:FE:8A:4B:C3:9F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e5d50a3-7ca9-37f1-aa33-4cd66c63d176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:67:21:78:e3:b2:f5:00:1b:e4:9c:e3:b2:02:24:0c:b5:e1:
         a5:d4:25:4f:23:08:0f:99:8f:f9:7d:20:c0:8f:c5:6f:46:45:
         00:f4:1c:4e:6c:ca:aa:34:10:3b:14:a9:ce:a6:85:f7:6c:f6:
         2f:d0:de:b6:97:83:b6:fd:83:bd:d4:4a:44:40:10:ec:9a:aa:
         7e:c0:ff:ee:5b:f9:be:45:14:88:a4:36:1f:9b:f2:65:8a:18:
         a8:a5:07:1b:90:e1:e1:c3:79:74:a4:9d:e3:a8:6f:89:b1:40:
         7d:10:1d:2c:79:97:57:ad:99:cf:43:cf:f2:1b:34:b8:35:93:
         bf:dd:79:4e:11:60:c4:1a:33:2f:d0:4f:a9:f3:ce:1d:d0:79:
         2d:51:7d:0a:4e:83:cf:e8:a3:a4:ba:9e:ec:08:8b:96:6e:4a:
         60:98:f2:0d:45:0c:2a:9d:b2:53:59:6c:cf:ba:89:10:8d:8b:
         eb:d4:80:10:fe:47:98:ad:bb:47:75:b2:da:d3:e0:e9:c8:cf:
         4a:ca:3f:ce:f0:8f:34:36:bb:f1:d1:51:bb:49:75:7a:06:a6:
         c0:e2:df:4f:d0:e7:c4:0b:98:f0:50:b3:4e:c0:d5:18:47:03:
         41:d7:7d:c4:c6:ec:7c:8d:c1:fd:f3:60:ce:0d:8d:30:3f:b2:
         99:3e:24:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noJMuPi2kBk8vu+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzU5MzVlNjgtODZjZC00OTI0LTkzN2YtMDYxMmE4MGJjYzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySIRIcsu40WKER7gCyJzeYkYbAsfJdw3otok
YEj35EZOnDK+RzVXrPs0YGIUcq16CzS0757H8emmtDr1738jep5hhMx9Lw6gIHk5
s/2axBXnSp2maR29Ah1hv46Y5JkDRGOtH79P31uDrJNgPGdG3xFLtkpYXBXDlESw
Au78fcIx1jt5Gwh2MWqpTVoaxyYQKwkxJHIXvhtP3508Qr8n2saDkWfAfhthTJFl
7Dh4uM0hE1i1cY1bfHMd+16TzOKZvEEv5OIRwqAC+OOVKyIhJ1bRTHhkmQgaf5jj
YYSORaqOSVn38tECwa6l09QxOy5wCKl0dujzRxkxI/Fcp5J3IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJXOugTxNFtSnmWeqbyH/opLw5+kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmU1ZDUwYTMtN2NhOS0z
N2YxLWFhMzMtNGNkNjZjNjNkMTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlnIXjjsvUAG+Sc47ICJAy14aXUJU8jCA+Zj/l9IMCPxW9GRQD0HE5s
yqo0EDsUqc6mhfds9i/Q3raXg7b9g73USkRAEOyaqn7A/+5b+b5FFIikNh+b8mWK
GKilBxuQ4eHDeXSkneOob4mxQH0QHSx5l1etmc9Dz/IbNLg1k7/deU4RYMQaMy/Q
T6nzzh3QeS1RfQpOg8/oo6S6nuwIi5ZuSmCY8g1FDCqdslNZbM+6iRCNi+vUgBD+
R5itu0d1strT4OnIz0rKP87wjzQ2u/HRUbtJdXoGpsDi30/Q58QLmPBQs07A1RhH
A0HXfcTG7HyNwf3zYM4NjTA/spk+JJ4=
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:08:02 2026 by rpki-client