Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa
File:                     b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa (raw, json)
Hash identifier:          b7xACnE5BPoeeHXipIw9rpT+5Kf9N7mjyidQjhKJNYY=
Subject key identifier:   DC:32:57:BA:B2:DB:A2:72:17:7F:62:C0:13:54:9D:F1:F3:FA:1F:1A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA7A0A2DAE3E8262CFAD76280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.25.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:a2:da:e3:e8:26:2c:fa:d7:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=db199889-d58b-461c-9ee9-269a32891b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:09:20:da:bd:ca:82:64:75:e0:fe:61:c8:04:
                    c8:c2:d1:b9:22:12:a3:b0:16:50:9b:32:ce:7e:76:
                    43:04:a8:22:e0:23:68:2b:e3:bf:84:0a:26:21:5b:
                    73:62:78:64:9e:94:4d:09:1a:01:82:ba:7e:1d:d5:
                    cb:eb:5c:62:de:92:a2:8b:7b:e3:a8:07:00:ab:1c:
                    20:18:1d:90:ae:54:c9:1a:74:26:d4:e9:59:68:04:
                    39:63:b3:c9:8b:d4:41:65:b4:55:9e:61:eb:e8:ff:
                    13:9d:dc:0e:d3:f3:4e:f8:6f:32:d7:93:aa:cb:26:
                    f9:5d:3a:7d:00:e9:f0:7c:a8:9c:ce:95:ef:32:03:
                    3c:64:41:94:4b:ac:c6:ad:3a:f8:7f:2f:5f:09:2e:
                    2a:e4:7b:63:7b:e5:57:6f:98:41:a9:25:e3:86:70:
                    8d:80:4c:da:c2:4c:44:7d:9c:e3:8a:43:b7:67:fa:
                    a7:20:57:43:cc:7c:c1:3a:3c:28:26:e3:81:2a:51:
                    ec:e2:08:2d:3f:ac:78:fd:9e:42:24:47:57:7b:ef:
                    8e:ba:49:d7:51:d1:45:5a:c8:49:90:19:b6:2d:11:
                    86:bd:a3:d1:2c:d1:b8:e7:35:da:63:60:a5:be:1f:
                    a8:19:b1:0c:61:02:74:80:2d:18:b9:47:05:70:9a:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:32:57:BA:B2:DB:A2:72:17:7F:62:C0:13:54:9D:F1:F3:FA:1F:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.25.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:7e:85:82:f6:96:4f:6f:da:24:a0:7d:f8:35:16:07:9e:
         ce:06:ac:69:2e:c9:b6:19:b6:98:bc:31:49:08:f8:4b:f4:03:
         c8:c0:3c:8f:a8:7d:04:96:ce:4c:e1:11:5d:ac:8c:61:78:7a:
         59:1d:f5:e1:a1:0e:1f:df:9a:de:2d:7a:2c:a7:e5:e3:6c:ba:
         a5:73:dd:c7:56:cc:3b:78:ed:36:f4:d0:2e:97:66:3f:46:0b:
         65:ad:77:37:a3:79:91:8f:3a:81:fb:59:7f:ea:0c:9a:d7:36:
         9a:34:76:90:ad:54:50:7c:58:44:9c:9f:ac:c7:c7:58:e9:21:
         71:b1:fb:b8:a5:44:a5:f6:26:47:5d:8b:01:5c:af:a3:8d:4c:
         4f:0c:f3:07:6a:d7:f0:ef:c8:09:2d:54:36:62:d8:b2:89:da:
         69:ab:80:d4:95:e0:31:10:a7:de:07:d4:31:72:d4:07:13:be:
         25:70:19:3c:de:9c:ad:ab:be:4e:df:e5:77:5a:03:58:fe:01:
         6c:6f:e2:b4:81:ee:0a:36:d5:9a:77:b9:79:09:57:41:f1:ea:
         07:dc:30:d9:c5:84:cc:01:e9:39:05:eb:94:41:6b:02:7c:aa:
         ac:76:0a:a2:44:68:4e:d8:33:3a:60:55:dd:5a:6d:d7:20:ed:
         b5:c1:54:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noKLa4+gmLPrXYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZGIxOTk4ODktZDU4Yi00NjFjLTllZTktMjY5YTMyODkxYjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAkg2r3KgmR14P5hyATIwtG5IhKjsBZQmzLO
fnZDBKgi4CNoK+O/hAomIVtzYnhknpRNCRoBgrp+HdXL61xi3pKii3vjqAcAqxwg
GB2QrlTJGnQm1OlZaAQ5Y7PJi9RBZbRVnmHr6P8TndwO0/NO+G8y15Oqyyb5XTp9
AOnwfKiczpXvMgM8ZEGUS6zGrTr4fy9fCS4q5Htje+VXb5hBqSXjhnCNgEzawkxE
fZzjikO3Z/qnIFdDzHzBOjwoJuOBKlHs4ggtP6x4/Z5CJEdXe++OuknXUdFFWshJ
kBm2LRGGvaPRLNG45zXaY2Clvh+oGbEMYQJ0gC0YuUcFcJqU0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwyV7qy26JyF39iwBNUnfHz+h8aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjVjYmE2YjAtNDA3My0z
ZGFhLWIyOTctZWFjYThkMDk1ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRnuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0EfoWC9pZPb9okoH34NRYHns4GrGkuybYZtpi8MUkI+Ev0A8jAPI+o
fQSWzkzhEV2sjGF4elkd9eGhDh/fmt4teiyn5eNsuqVz3cdWzDt47Tb00C6XZj9G
C2WtdzejeZGPOoH7WX/qDJrXNpo0dpCtVFB8WEScn6zHx1jpIXGx+7ilRKX2Jkdd
iwFcr6ONTE8M8wdq1/DvyAktVDZi2LKJ2mmrgNSV4DEQp94H1DFy1AcTviVwGTze
nK2rvk7f5XdaA1j+AWxv4rSB7go21Zp3uXkJV0Hx6gfcMNnFhMwB6TkF65RBawJ8
qqx2CqJEaE7YMzpgVd1abdcg7bXBVPs=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:24 2026 by rpki-client