Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa
File:                     ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa (raw, json)
Hash identifier:          9CMQJFfMxstJXrWB5GoPb6d5eLVwM7KchaPFcZWCeEQ=
Subject key identifier:   36:D8:F3:AD:BB:A3:D3:A7:07:BF:38:E0:6A:0A:E8:94:53:D1:EC:F5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79D3B680AB596785B6F4980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.21.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:3b:68:0a:b5:96:78:5b:6f:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eea3968c-bce1-4975-a478-9a66134b4147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:75:1c:4e:04:c5:cf:99:d3:42:38:c8:48:be:
                    7e:ef:45:76:93:f9:13:5d:31:2f:2f:7e:f1:ec:c5:
                    5a:16:42:f1:39:09:ff:76:e9:65:ef:f1:ec:bd:7a:
                    2a:31:fb:a2:67:d7:26:1e:e0:32:3b:5e:de:46:27:
                    c7:d4:b4:df:44:86:b1:ae:90:58:ca:09:25:05:ba:
                    ef:b9:9a:41:a1:23:55:00:92:cc:dd:95:ca:1b:7e:
                    8b:77:61:79:21:b1:58:4a:e4:43:c0:e5:92:57:32:
                    6f:92:8b:4f:c9:8a:41:62:47:3b:91:45:1d:91:f4:
                    ca:d1:ed:5d:4e:db:67:1d:46:b7:a6:69:49:01:5f:
                    b4:f0:b7:6d:92:1a:ac:d4:a4:fb:47:0d:0a:ff:99:
                    90:0e:5b:a1:9e:c1:0c:c3:82:b3:e4:15:65:35:81:
                    b7:a3:23:ac:51:a9:76:3d:7b:61:bd:e1:3d:c0:34:
                    63:64:1b:2c:a3:40:0c:cd:5e:c0:44:23:70:da:8b:
                    5b:69:e3:66:50:49:ec:7b:f8:03:3a:b1:88:df:21:
                    c1:47:7e:bf:66:7f:a8:19:c5:df:e0:dc:96:ac:6f:
                    d8:63:46:8d:9b:8f:c4:24:17:09:77:48:d5:ce:0f:
                    dc:87:2a:3f:56:6b:8e:8a:54:4b:da:59:33:ba:08:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D8:F3:AD:BB:A3:D3:A7:07:BF:38:E0:6A:0A:E8:94:53:D1:EC:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:fa:39:88:ab:7f:5a:77:ab:e1:44:97:75:2d:ec:6d:35:55:
         fa:c3:3b:68:00:30:51:46:44:d4:03:e7:0d:5d:0e:62:71:16:
         51:69:c0:73:0b:27:9a:a9:e2:d1:c0:19:3a:8d:ba:a8:89:bc:
         40:fc:ee:b3:2c:aa:47:c2:32:0e:55:e8:71:32:7e:bf:f1:38:
         2f:24:51:31:a2:09:eb:8a:d5:57:e1:b2:5c:d2:ea:23:14:18:
         34:7e:ee:20:06:a3:20:15:81:dd:4d:ad:8a:f6:2e:0d:7f:58:
         76:45:f5:28:c5:96:2e:71:26:c8:8c:d6:0a:89:31:58:bc:c6:
         3d:fb:de:30:76:ac:5c:50:cf:70:ff:77:e0:52:a2:e2:fb:df:
         31:ce:3e:dc:0e:22:39:3a:22:9d:85:68:77:ee:79:f3:4a:37:
         92:f2:dc:e7:e8:16:88:c0:6d:93:b5:94:c7:0e:e3:98:28:35:
         e3:02:2c:b1:3c:b2:ad:e5:6e:6c:88:f7:b7:f1:d7:7c:6d:f0:
         7e:04:14:98:dc:f2:1b:aa:0a:7c:7b:1e:7f:cd:9f:6d:a4:76:
         0f:7f:f8:0a:fa:72:62:2a:7a:33:c4:57:66:b8:8b:62:69:84:
         94:46:8f:81:ac:32:7b:45:1b:3a:7e:5d:41:7e:50:70:19:2c:
         f9:9e:0e:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnTtoCrWWeFtvSYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZWVhMzk2OGMtYmNlMS00OTc1LWE0NzgtOWE2NjEzNGI0MTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXUcTgTFz5nTQjjISL5+70V2k/kTXTEvL37x
7MVaFkLxOQn/dull7/HsvXoqMfuiZ9cmHuAyO17eRifH1LTfRIaxrpBYygklBbrv
uZpBoSNVAJLM3ZXKG36Ld2F5IbFYSuRDwOWSVzJvkotPyYpBYkc7kUUdkfTK0e1d
TttnHUa3pmlJAV+08Ldtkhqs1KT7Rw0K/5mQDluhnsEMw4Kz5BVlNYG3oyOsUal2
PXthveE9wDRjZBsso0AMzV7ARCNw2otbaeNmUEnse/gDOrGI3yHBR36/Zn+oGcXf
4NyWrG/YY0aNm4/EJBcJd0jVzg/chyo/VmuOilRL2lkzugjpEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbY8627o9OnB7844GoK6JRT0ez1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWQ4YjAyOTMtYTNjMC0z
MDY3LWE5ZTQtNmQzNWQyOGMxMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRWeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFj6OYirf1p3q+FEl3Ut7G01VfrDO2gAMFFGRNQD5w1dDmJxFlFpwHML
J5qp4tHAGTqNuqiJvED87rMsqkfCMg5V6HEyfr/xOC8kUTGiCeuK1VfhslzS6iMU
GDR+7iAGoyAVgd1NrYr2Lg1/WHZF9SjFli5xJsiM1gqJMVi8xj373jB2rFxQz3D/
d+BSouL73zHOPtwOIjk6Ip2FaHfuefNKN5Ly3OfoFojAbZO1lMcO45goNeMCLLE8
sq3lbmyI97fx13xt8H4EFJjc8huqCnx7Hn/Nn22kdg9/+Ar6cmIqejPEV2a4i2Jp
hJRGj4GsMntFGzp+XUF+UHAZLPmeDho=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:26:48 2026 by rpki-client