Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd278f9d-1f08-3fac-88fa-317046af86b8.roa
File:                     bd278f9d-1f08-3fac-88fa-317046af86b8.roa (raw, json)
Hash identifier:          hXv8NHL5qEvq7YaaMXTmhcXXfL50IMxMR1ZJf9s3uBY=
Subject key identifier:   B3:B2:8C:52:E9:93:B8:F1:E1:05:5F:4A:DE:9C:48:17:B4:7B:77:A9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B738FB5A6FF3733CF5810
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd278f9d-1f08-3fac-88fa-317046af86b8.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        173.16.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:73:8f:b5:a6:ff:37:33:cf:58:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=33e8e912-3452-4212-9d22-cd3ec031bb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:c1:3e:5e:be:0f:a4:45:7f:06:c6:34:b1:
                    2e:76:ed:53:4f:72:4d:fb:d5:85:fb:59:24:c5:9a:
                    f4:72:a2:5a:6f:b9:c1:d4:9f:aa:52:10:8c:65:8c:
                    ba:0b:49:7f:41:10:3c:8f:80:85:08:16:9a:e4:90:
                    b8:89:4a:19:51:99:51:d2:46:60:80:f4:03:3d:be:
                    7d:cd:4b:cf:81:64:38:b7:93:8d:e9:9c:45:f6:dd:
                    5b:5e:56:51:88:00:9f:ab:47:45:04:b9:0f:4e:2e:
                    ca:07:1a:ac:6d:9d:f6:af:54:bb:0a:0d:e9:53:d2:
                    e4:21:33:f1:ba:78:25:2c:64:1a:27:ed:89:cd:3e:
                    3d:14:c2:88:5b:3f:66:65:2d:cb:7f:23:73:f2:19:
                    18:5d:3a:bc:71:be:a8:d1:fa:64:0e:ce:4b:29:56:
                    7b:16:50:e6:dd:2c:07:54:91:0a:b3:12:91:ed:7a:
                    cb:5c:4c:0a:83:0c:19:4f:56:6f:f2:42:0d:f2:24:
                    35:e3:6f:7c:90:4d:83:37:6a:42:d5:30:25:e0:08:
                    65:d2:22:6e:86:7c:c7:59:ed:2f:27:2b:fb:d5:b8:
                    d4:cf:0b:35:9e:10:e7:1a:a6:aa:07:7a:ed:48:51:
                    3f:b2:e5:85:07:87:6b:85:8d:46:47:bd:79:b0:09:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B2:8C:52:E9:93:B8:F1:E1:05:5F:4A:DE:9C:48:17:B4:7B:77:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd278f9d-1f08-3fac-88fa-317046af86b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:bd:68:df:30:67:13:52:ce:4b:21:4b:54:55:1f:77:41:83:
         29:67:de:d3:ca:a7:6a:4f:37:2a:ee:2b:ac:76:71:13:f6:1a:
         f6:14:cc:e9:81:72:6c:29:f4:13:88:34:e1:8f:32:3b:89:90:
         08:5d:0d:ea:10:fd:a9:15:7f:d0:0b:ad:45:1f:ef:fa:08:5c:
         a4:be:88:25:2c:95:fb:2e:51:6d:6c:b5:6a:aa:92:38:31:2f:
         4a:07:23:8b:1a:8d:45:7c:84:0e:d3:fc:94:c3:60:60:43:25:
         bb:2e:21:bf:03:d4:80:3b:4a:33:12:6b:fc:27:31:39:25:3f:
         e4:1b:8f:33:fb:90:c3:0d:2e:2f:21:49:e3:c4:d8:6b:c8:05:
         35:2b:9b:59:fa:be:6f:fc:29:bf:02:61:27:2f:66:1c:55:71:
         f4:55:3a:0a:32:7c:e6:62:b9:c6:de:cf:e0:37:19:df:f5:18:
         f3:bb:4c:5a:e0:12:0a:ec:45:8f:73:07:50:50:1c:72:a2:30:
         74:03:d1:14:b2:a6:e3:50:a1:a8:3a:db:76:5f:4d:d5:f3:c9:
         03:07:00:00:e8:cb:86:d0:21:10:03:49:ca:8a:c6:56:d9:cf:
         64:29:c8:fc:d2:86:38:4f:ea:30:70:a5:6d:6c:19:b3:07:b1:
         9e:37:de:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G3OPtab/NzPPWBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk
MzNlOGU5MTItMzQ1Mi00MjEyLTlkMjItY2QzZWMwMzFiYjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC7BPl6+D6RFfwbGNLEudu1TT3JN+9WF+1kk
xZr0cqJab7nB1J+qUhCMZYy6C0l/QRA8j4CFCBaa5JC4iUoZUZlR0kZggPQDPb59
zUvPgWQ4t5ON6ZxF9t1bXlZRiACfq0dFBLkPTi7KBxqsbZ32r1S7Cg3pU9LkITPx
unglLGQaJ+2JzT49FMKIWz9mZS3LfyNz8hkYXTq8cb6o0fpkDs5LKVZ7FlDm3SwH
VJEKsxKR7XrLXEwKgwwZT1Zv8kIN8iQ14298kE2DN2pC1TAl4Ahl0iJuhnzHWe0v
Jyv71bjUzws1nhDnGqaqB3rtSFE/suWFB4drhY1GR715sAmYUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOyjFLpk7jx4QVfSt6cSBe0e3epMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmQyNzhmOWQtMWYwOC0z
ZmFjLTg4ZmEtMzE3MDQ2YWY4NmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRAWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABO9aN8wZxNSzkshS1RVH3dBgyln3tPKp2pPNyruK6x2cRP2GvYUzOmB
cmwp9BOINOGPMjuJkAhdDeoQ/akVf9ALrUUf7/oIXKS+iCUslfsuUW1stWqqkjgx
L0oHI4sajUV8hA7T/JTDYGBDJbsuIb8D1IA7SjMSa/wnMTklP+QbjzP7kMMNLi8h
SePE2GvIBTUrm1n6vm/8Kb8CYScvZhxVcfRVOgoyfOZiucbez+A3Gd/1GPO7TFrg
EgrsRY9zB1BQHHKiMHQD0RSypuNQoag623ZfTdXzyQMHAADoy4bQIRADScqKxlbZ
z2QpyPzShjhP6jBwpW1sGbMHsZ433vo=
-----END CERTIFICATE-----
Generated at Thu Jul 10 02:13:02 2025 by rpki-client