Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa
File:                     b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa (raw, json)
Hash identifier:          0URzwjkQPB7kaGr5NNlqmuyK8J3l3eVnYcrhMEiqmNk=
Subject key identifier:   FC:37:DE:B7:9F:2A:87:6A:2C:4A:A9:29:21:D9:98:01:AC:92:C6:F4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA7A0AEAC5FBA304C5237BF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.20.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:ae:ac:5f:ba:30:4c:52:37:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=580512fb-3d37-4c3f-9045-acfd3012ff46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:9f:fc:bd:a8:40:49:f8:8c:6b:bf:09:b5:
                    ab:b0:07:e6:a4:e9:54:df:8d:ed:5c:18:d5:eb:ed:
                    73:82:1c:ee:98:d0:bb:d4:23:a6:06:62:9b:44:6e:
                    af:93:a9:c8:a4:0a:b8:3a:b7:78:e4:e8:99:e3:a8:
                    11:e3:82:17:ab:ca:14:3b:57:cf:d5:c3:c2:68:6c:
                    51:2a:74:e6:42:63:78:c2:40:8a:13:19:c5:0c:7a:
                    b5:40:a6:7c:06:fe:06:6f:01:51:21:eb:b3:79:d6:
                    e0:3f:28:e3:82:7f:c2:5a:66:81:f6:97:1b:c4:12:
                    25:22:b0:33:5f:a0:51:da:09:fc:2c:94:be:1c:02:
                    28:a2:85:24:25:f5:00:ca:1b:c0:1a:40:17:88:1d:
                    51:98:c4:ce:a5:0d:18:29:1a:c8:11:c2:9e:4f:50:
                    3a:68:db:05:d4:4a:fc:2e:40:bd:30:01:d1:49:70:
                    ff:ea:c1:c3:b2:11:d9:c7:50:9d:62:13:ac:52:58:
                    50:db:c8:23:3e:c3:8d:53:87:b6:8d:07:0c:fd:a1:
                    a5:db:9c:cc:c0:20:6f:d7:27:5a:20:7b:6d:40:9c:
                    82:f8:94:b7:be:32:7e:6b:fa:d1:c9:7e:4f:94:d7:
                    01:98:89:79:4e:51:75:0f:9f:2d:5f:d1:86:b5:2d:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:37:DE:B7:9F:2A:87:6A:2C:4A:A9:29:21:D9:98:01:AC:92:C6:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.20.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2a:ba:13:62:14:92:bf:d9:b5:c7:6a:f5:86:21:92:bd:a0:
         da:99:fb:73:bc:c2:17:52:0d:28:fb:04:c0:21:97:58:46:34:
         50:82:64:48:b1:f2:6d:0f:81:30:3c:8f:0e:5d:f4:c8:22:43:
         d0:e1:9e:06:09:c6:01:b1:a5:66:e4:76:89:66:c5:0b:ff:ad:
         2d:59:33:f7:cb:43:74:3f:d8:19:d4:23:92:e0:48:98:a1:97:
         e6:fd:1c:c3:7a:5b:0b:36:e5:13:2f:98:c2:a1:89:75:d0:bc:
         34:63:4c:10:1a:7c:6f:30:09:6d:da:58:f9:ac:8f:36:b3:42:
         ec:6b:df:6e:ce:d2:5d:4f:5f:41:ec:42:fb:be:17:25:d5:c7:
         2c:5b:50:8c:15:61:b4:ed:48:9a:75:c3:34:74:0f:0d:30:9c:
         38:ab:8f:2e:13:80:b6:3b:d9:d2:f2:46:55:85:00:e1:2a:93:
         98:9b:66:9e:c9:5a:2f:fb:6a:a0:0f:65:eb:19:a3:da:79:ff:
         da:6f:8a:4e:0c:ff:2d:11:4d:6d:0f:52:66:1b:0c:4c:b2:7a:
         f1:1c:e3:97:09:63:fa:3b:ab:3a:3b:ae:32:a7:9b:14:02:ee:
         7d:c4:f3:1f:06:d2:93:57:3b:ca:17:86:95:1f:0f:c3:f5:99:
         bb:43:b0:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noK6sX7owTFI3vwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTgwNTEyZmItM2QzNy00YzNmLTkwNDUtYWNmZDMwMTJmZjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArImf/L2oQEn4jGu/CbWrsAfmpOlU343tXBjV
6+1zghzumNC71COmBmKbRG6vk6nIpAq4Ord45OiZ46gR44IXq8oUO1fP1cPCaGxR
KnTmQmN4wkCKExnFDHq1QKZ8Bv4GbwFRIeuzedbgPyjjgn/CWmaB9pcbxBIlIrAz
X6BR2gn8LJS+HAIoooUkJfUAyhvAGkAXiB1RmMTOpQ0YKRrIEcKeT1A6aNsF1Er8
LkC9MAHRSXD/6sHDshHZx1CdYhOsUlhQ28gjPsONU4e2jQcM/aGl25zMwCBv1yda
IHttQJyC+JS3vjJ+a/rRyX5PlNcBmIl5TlF1D58tX9GGtS3etwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPw33refKodqLEqpKSHZmAGsksb0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjBjMWZmNmMtMDk3MC0z
NzU4LThkOGMtMjM5ZDZiMjhmYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0quhNiFJK/2bXHavWGIZK9oNqZ+3O8whdSDSj7BMAhl1hGNFCCZEix
8m0PgTA8jw5d9MgiQ9DhngYJxgGxpWbkdolmxQv/rS1ZM/fLQ3Q/2BnUI5LgSJih
l+b9HMN6Wws25RMvmMKhiXXQvDRjTBAafG8wCW3aWPmsjzazQuxr327O0l1PX0Hs
Qvu+FyXVxyxbUIwVYbTtSJp1wzR0Dw0wnDirjy4TgLY72dLyRlWFAOEqk5ibZp7J
Wi/7aqAPZesZo9p5/9pvik4M/y0RTW0PUmYbDEyyevEc45cJY/o7qzo7rjKnmxQC
7n3E8x8G0pNXO8oXhpUfD8P1mbtDsPM=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:28 2026 by rpki-client