Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f733a87-9188-3636-84a9-f8393e70f775.roa
File:                     9f733a87-9188-3636-84a9-f8393e70f775.roa (raw, json)
Hash identifier:          Q2v7ijaLQsaUYF/lA7CLWrNG6ECfpe1LE3pgK2uCUMI=
Subject key identifier:   58:88:17:FF:59:11:A9:7B:E4:97:00:EE:B1:57:FF:3A:3F:0D:CF:E7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A0C249321A02A4A622FC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f733a87-9188-3636-84a9-f8393e70f775.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        173.29.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:0c:24:93:21:a0:2a:4a:62:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=4e1453b9-4b5a-4c90-a404-5fcbc630a54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:e5:df:11:9b:ad:03:72:63:b3:4b:6c:63:
                    11:2e:13:1f:55:b8:cf:20:35:83:f1:41:a6:cb:20:
                    22:86:69:a1:fd:dd:49:4f:62:58:5e:9b:26:80:c0:
                    c3:94:31:f7:5b:aa:19:bf:06:89:ab:5f:22:62:22:
                    23:52:fa:aa:3d:ea:2a:d4:84:10:1d:77:f4:58:18:
                    85:d6:7f:aa:c0:a6:9c:ae:8f:69:eb:3b:20:c9:6a:
                    79:97:9e:19:07:f4:46:fa:29:a3:14:d5:06:85:aa:
                    a0:9a:b3:8f:f1:f6:a3:24:7b:fc:b2:f0:bf:77:95:
                    09:7e:33:ca:7b:7b:bd:91:62:bd:1b:26:41:ed:4d:
                    c9:66:3a:92:86:e2:bf:80:ee:98:1c:6a:2b:d3:d4:
                    52:f9:e3:b9:93:42:32:6b:47:f9:17:54:8c:9f:da:
                    99:34:f7:dd:13:5b:cb:cf:c1:52:31:1b:1f:1a:61:
                    23:7e:35:03:d8:65:19:1d:dd:70:3a:22:97:9f:f5:
                    cf:43:15:d5:ca:5b:d2:80:d2:c6:06:64:95:2a:e6:
                    2c:96:fc:04:03:1f:fa:35:d3:ee:8c:9d:6f:0a:6e:
                    dd:be:40:aa:21:70:7b:88:c5:e9:5e:78:e3:08:a1:
                    6e:9b:41:b1:af:87:dd:db:af:63:34:1f:0a:39:53:
                    2b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:88:17:FF:59:11:A9:7B:E4:97:00:EE:B1:57:FF:3A:3F:0D:CF:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9f733a87-9188-3636-84a9-f8393e70f775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:77:2b:1a:0b:f7:ba:81:10:6d:5a:af:b1:15:be:2d:55:4c:
         d6:7e:18:51:f5:89:c7:20:7f:73:15:6e:6b:3e:0b:04:30:94:
         78:fc:66:e6:d3:6a:6a:37:00:2e:d2:52:6f:8b:49:97:5c:d2:
         16:67:6b:1f:09:1f:f2:73:51:74:20:34:38:75:f0:3d:f4:99:
         d6:3d:46:ae:7f:86:a5:16:1a:ec:3e:68:c3:4b:37:6c:c9:48:
         ac:bd:9c:ee:f7:5f:3c:c2:2b:de:57:c6:a0:1c:9a:30:ca:37:
         5c:3f:c1:c6:24:2d:e2:25:6d:f0:b4:7c:70:11:f8:8d:f7:75:
         b4:70:0f:65:55:00:7f:7b:29:30:4e:c8:a2:d1:17:52:42:38:
         e0:8e:41:9e:74:ff:8d:2d:1e:5b:41:10:9d:27:6a:10:0d:53:
         e9:be:33:ed:3a:52:63:79:97:07:a9:94:fd:a1:16:e6:21:2f:
         3c:16:76:fb:45:18:eb:58:31:2d:01:da:4d:45:1c:3f:25:b8:
         5d:d8:1d:f2:a3:2f:00:1d:16:b6:41:6f:af:15:75:7e:3b:37:
         82:c4:cb:47:bf:58:16:5e:b0:e6:9d:b6:aa:6f:bf:2a:f9:0f:
         57:03:1e:6a:4a:96:de:ad:f8:96:77:06:47:24:eb:61:a1:b0:
         d0:6d:6c:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegwkkyGgKkpiL8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
NGUxNDUzYjktNGI1YS00YzkwLWE0MDQtNWZjYmM2MzBhNTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfXl3xGbrQNyY7NLbGMRLhMfVbjPIDWD8UGm
yyAihmmh/d1JT2JYXpsmgMDDlDH3W6oZvwaJq18iYiIjUvqqPeoq1IQQHXf0WBiF
1n+qwKacro9p6zsgyWp5l54ZB/RG+imjFNUGhaqgmrOP8fajJHv8svC/d5UJfjPK
e3u9kWK9GyZB7U3JZjqShuK/gO6YHGor09RS+eO5k0Iya0f5F1SMn9qZNPfdE1vL
z8FSMRsfGmEjfjUD2GUZHd1wOiKXn/XPQxXVylvSgNLGBmSVKuYslvwEAx/6NdPu
jJ1vCm7dvkCqIXB7iMXpXnjjCKFum0Gxr4fd269jNB8KOVMrvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFiIF/9ZEal75JcA7rFX/zo/Dc/nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWY3MzNhODctOTE4OC0z
NjM2LTg0YTktZjgzOTNlNzBmNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR24MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFp3KxoL97qBEG1ar7EVvi1VTNZ+GFH1iccgf3MVbms+CwQwlHj8ZubT
amo3AC7SUm+LSZdc0hZnax8JH/JzUXQgNDh18D30mdY9Rq5/hqUWGuw+aMNLN2zJ
SKy9nO73XzzCK95XxqAcmjDKN1w/wcYkLeIlbfC0fHAR+I33dbRwD2VVAH97KTBO
yKLRF1JCOOCOQZ50/40tHltBEJ0nahANU+m+M+06UmN5lweplP2hFuYhLzwWdvtF
GOtYMS0B2k1FHD8luF3YHfKjLwAdFrZBb68VdX47N4LEy0e/WBZesOadtqpvvyr5
D1cDHmpKlt6t+JZ3Bkck62GhsNBtbJE=
-----END CERTIFICATE-----
Generated at Thu Mar 12 03:44:48 2026 by rpki-client