Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa
File:                     9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa (raw, json)
Hash identifier:          vifeQV9vG4IDqwYFKaHNZdSDQteUSdCm6abpkaxXZ4k=
Subject key identifier:   80:C8:92:B6:B7:84:B0:63:CB:28:57:18:7D:C8:4A:2B:64:B1:2B:16
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79BD166C267C1CD08691C40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.23.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:d1:66:c2:67:c1:cd:08:69:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4811e458-8965-4522-b600-89347ee9942a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:29:5d:5a:b3:32:6f:98:5e:97:b3:2d:99:
                    a7:39:a5:ec:5f:83:6d:8c:02:0b:cc:43:14:46:bc:
                    ef:d1:b8:69:59:5c:1a:00:0e:f7:15:ba:8c:52:93:
                    15:b2:cd:0a:86:95:27:6f:65:fb:a7:54:32:fb:ed:
                    52:e7:75:98:2a:a2:cd:a9:df:36:80:98:32:b4:a2:
                    9f:0d:32:a1:e7:e8:8a:92:fb:fd:f6:ed:84:35:79:
                    16:00:8c:11:db:65:f0:b0:dd:0e:30:28:ed:28:59:
                    1b:ad:8d:32:e9:da:ae:0a:74:c5:ba:38:2d:cd:34:
                    31:03:78:e7:fa:3e:e7:e6:7b:15:24:a3:60:fa:ff:
                    bb:ac:b2:db:27:46:df:60:c8:e8:85:ff:58:b1:a6:
                    9c:64:76:46:11:cf:39:32:12:59:00:63:bd:d0:3f:
                    b2:55:0b:11:65:ca:41:ee:b4:be:59:8b:31:85:4d:
                    5a:aa:28:89:b7:c2:52:51:6a:0b:53:97:c2:3d:e2:
                    8f:01:04:5a:39:2f:f4:b8:cc:db:b1:68:4e:68:67:
                    05:ba:e2:05:0a:b0:24:28:db:72:e9:bc:77:e1:b1:
                    7f:1c:35:04:bd:45:56:3b:6f:a8:f4:e3:2f:29:7d:
                    17:13:a1:f4:2e:1f:d0:76:7e:fb:1b:40:b8:fe:e8:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C8:92:B6:B7:84:B0:63:CB:28:57:18:7D:C8:4A:2B:64:B1:2B:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a7:2e:ad:99:d4:c2:3f:16:0a:ad:5a:e0:6f:56:94:6c:1d:
         cb:ab:f8:c6:c4:b7:e4:44:fe:36:94:91:62:df:2b:ec:db:f9:
         f6:15:8f:83:f7:77:4c:25:f6:23:52:cb:05:27:dd:10:8d:ba:
         c2:3f:b2:34:68:96:66:99:f4:ed:bc:f9:63:f0:5e:c5:f8:13:
         fa:8b:5a:b8:73:84:5e:81:d4:de:74:45:56:54:ff:72:2c:34:
         b9:24:7e:d0:d9:ba:ed:e8:0d:b7:f8:f0:87:29:db:70:b4:3f:
         3b:9d:4f:92:8b:5d:6a:0a:7c:fa:5a:e4:b3:96:89:26:81:a5:
         81:1c:8d:f6:de:3a:1b:93:7c:a1:3f:79:dd:84:67:db:60:34:
         f5:59:60:82:2e:db:35:cf:3c:01:dd:18:39:fc:6c:2f:f1:dd:
         a4:39:32:31:f1:b2:3d:90:05:63:b4:32:36:3e:aa:bc:81:30:
         c7:ea:fe:1f:64:5d:5f:af:c6:25:de:58:a5:96:76:c9:0e:99:
         46:a2:77:74:95:cd:49:7a:8d:18:df:eb:43:a4:72:84:3a:5a:
         b8:a8:94:ac:73:c6:77:d6:da:4f:20:46:dc:a5:48:8a:b5:6a:
         6d:d9:40:c7:d3:49:ca:2d:c1:d1:06:bc:49:27:25:58:4c:12:
         98:55:ea:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm9FmwmfBzQhpHEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDgxMWU0NTgtODk2NS00NTIyLWI2MDAtODkzNDdlZTk5NDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRwpXVqzMm+YXpezLZmnOaXsX4NtjAILzEMU
Rrzv0bhpWVwaAA73FbqMUpMVss0KhpUnb2X7p1Qy++1S53WYKqLNqd82gJgytKKf
DTKh5+iKkvv99u2ENXkWAIwR22XwsN0OMCjtKFkbrY0y6dquCnTFujgtzTQxA3jn
+j7n5nsVJKNg+v+7rLLbJ0bfYMjohf9YsaacZHZGEc85MhJZAGO90D+yVQsRZcpB
7rS+WYsxhU1aqiiJt8JSUWoLU5fCPeKPAQRaOS/0uMzbsWhOaGcFuuIFCrAkKNty
6bx34bF/HDUEvUVWO2+o9OMvKX0XE6H0Lh/Qdn77G0C4/uiQxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIDIkra3hLBjyyhXGH3ISitksSsWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWRiNGIxMjQtOGU0MS0z
NjRhLWI2M2QtOWUyMGZiN2I3ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRdjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWnLq2Z1MI/FgqtWuBvVpRsHcur+MbEt+RE/jaUkWLfK+zb+fYVj4P3
d0wl9iNSywUn3RCNusI/sjRolmaZ9O28+WPwXsX4E/qLWrhzhF6B1N50RVZU/3Is
NLkkftDZuu3oDbf48Icp23C0PzudT5KLXWoKfPpa5LOWiSaBpYEcjfbeOhuTfKE/
ed2EZ9tgNPVZYIIu2zXPPAHdGDn8bC/x3aQ5MjHxsj2QBWO0MjY+qryBMMfq/h9k
XV+vxiXeWKWWdskOmUaid3SVzUl6jRjf60OkcoQ6WriolKxzxnfW2k8gRtylSIq1
am3ZQMfTScotwdEGvEknJVhMEphV6jU=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:49 2026 by rpki-client