Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa
File:                     c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa (raw, json)
Hash identifier:          bTF3XZs180YVdSo1OQoji2E7picQASNE+SiP+uEJhvU=
Subject key identifier:   23:3B:A5:40:3B:E3:69:D7:0E:D9:96:3F:32:B4:2A:1E:74:77:4B:0A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EAA519EEF7BC80664DA6ED180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        173.31.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:9e:ef:7b:c8:06:64:da:6e:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=2419e762-144d-4291-9f30-db56a3c55fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:63:72:89:24:95:09:8e:8f:b4:bc:96:ac:
                    94:ed:70:d7:f6:f4:3c:31:11:7e:ca:6e:04:68:1b:
                    c8:ef:f2:65:0a:d0:ae:7f:d7:33:c4:a7:1c:7e:61:
                    78:b8:92:20:b6:6f:50:4a:96:ac:d4:42:aa:34:30:
                    b4:7d:d5:75:0a:fd:d2:c5:55:39:5f:1a:b9:ed:de:
                    95:ae:29:c1:ac:06:31:c8:43:e5:cf:64:46:1c:3b:
                    e7:1b:e3:1d:8f:a7:ac:37:f5:67:61:6d:36:c2:97:
                    ef:22:92:db:f6:d7:aa:9a:c0:9f:e5:8a:4a:ab:69:
                    40:9e:f7:b8:23:29:a9:f5:47:67:23:83:51:7e:20:
                    94:eb:73:4a:56:59:40:1c:c0:e6:61:62:34:f7:2b:
                    63:86:9d:fc:9a:ca:f3:54:a1:b0:27:7d:68:ae:b5:
                    91:1e:c6:63:da:b4:94:7d:af:36:b7:35:c4:a3:7f:
                    f9:6e:42:08:4f:0f:d2:9c:be:fa:d8:37:d4:8a:cd:
                    f0:7c:35:3f:e2:3f:c0:af:2f:1f:c1:a0:23:8c:c6:
                    c9:33:33:93:7c:cb:50:af:c9:ba:58:58:39:7d:ff:
                    28:a5:46:25:af:36:63:25:80:4e:44:e1:21:a0:76:
                    80:20:a6:e4:59:4d:05:6d:f6:e8:6b:a8:8f:cf:1d:
                    2a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3B:A5:40:3B:E3:69:D7:0E:D9:96:3F:32:B4:2A:1E:74:77:4B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:b1:83:60:a6:2a:0e:a2:c7:a5:09:ac:c3:74:7d:e8:ed:
         d2:f3:9d:5c:46:93:42:bc:89:5b:ae:0f:0c:ad:b0:2a:b8:49:
         d5:4b:0c:11:fa:85:1f:a4:78:62:cf:c4:b4:cc:e6:76:3a:9c:
         f8:ba:14:53:c1:6f:d8:d1:02:78:d0:c0:f8:6f:cf:28:aa:cb:
         27:0b:8f:e7:7d:6b:fc:93:1a:b4:98:3d:24:1a:72:64:5e:9f:
         4c:90:4b:d2:43:5e:05:d3:da:28:e5:f2:f6:11:d3:2a:64:52:
         47:db:f0:80:12:85:63:7d:39:6b:3c:f7:a1:35:c6:8b:d1:92:
         bb:2f:55:d8:49:b9:dd:36:69:95:1f:cc:e9:05:6c:28:fe:3b:
         ee:1b:6d:ec:66:9e:c8:fb:cb:08:e1:d9:f7:ab:cc:9d:ba:30:
         23:4e:bf:6f:6e:85:f5:44:a3:81:b0:e0:01:26:64:9c:4f:b6:
         32:d5:19:39:7f:6b:0a:25:66:05:24:d2:1f:b5:79:1c:67:f5:
         c3:6c:9c:a6:20:ba:eb:9a:c1:df:07:b8:8e:b9:7a:99:4d:46:
         ac:6d:0a:a5:dc:43:fb:de:f3:f7:3b:ba:e7:c9:f3:d3:cd:f2:
         d1:3f:bf:eb:9e:98:36:22:df:71:07:fc:e2:ef:be:6c:1b:2c:
         fd:ce:f6:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUZ7ve8gGZNpu0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk
MjQxOWU3NjItMTQ0ZC00MjkxLTlmMzAtZGI1NmEzYzU1ZmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9hjcokklQmOj7S8lqyU7XDX9vQ8MRF+ym4E
aBvI7/JlCtCuf9czxKccfmF4uJIgtm9QSpas1EKqNDC0fdV1Cv3SxVU5Xxq57d6V
rinBrAYxyEPlz2RGHDvnG+Mdj6esN/VnYW02wpfvIpLb9teqmsCf5YpKq2lAnve4
Iymp9UdnI4NRfiCU63NKVllAHMDmYWI09ytjhp38msrzVKGwJ31orrWRHsZj2rSU
fa82tzXEo3/5bkIITw/SnL762DfUis3wfDU/4j/Ary8fwaAjjMbJMzOTfMtQr8m6
WFg5ff8opUYlrzZjJYBOROEhoHaAIKbkWU0Fbfboa6iPzx0q1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCM7pUA742nXDtmWPzK0Kh50d0sKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzVhOWQzZjItODYwZi0z
MGRiLWFlYzUtYzlkNWRkYjU5MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR/wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6JsYNgpioOoselCazDdH3o7dLznVxGk0K8iVuuDwytsCq4SdVLDBH6
hR+keGLPxLTM5nY6nPi6FFPBb9jRAnjQwPhvzyiqyycLj+d9a/yTGrSYPSQacmRe
n0yQS9JDXgXT2ijl8vYR0ypkUkfb8IAShWN9OWs896E1xovRkrsvVdhJud02aZUf
zOkFbCj+O+4bbexmnsj7ywjh2ferzJ26MCNOv29uhfVEo4Gw4AEmZJxPtjLVGTl/
awolZgUk0h+1eRxn9cNsnKYguuuawd8HuI65eplNRqxtCqXcQ/ve8/c7uufJ89PN
8tE/v+uemDYi33EH/OLvvmwbLP3O9hA=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:33 2026 by rpki-client