Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f51256b6-1b39-3896-943a-6ed7586f559f.roa
File:                     f51256b6-1b39-3896-943a-6ed7586f559f.roa (raw, json)
Hash identifier:          GiVdroFMQ1IWzbdbds8AAUOfQHsjQJJZDKSgZFcC2hA=
Subject key identifier:   D9:4A:65:B3:96:C2:99:37:F3:0B:3A:B8:E8:F1:90:11:56:59:AF:6F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A5B95AB520D4DB0211883CBA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f51256b6-1b39-3896-943a-6ed7586f559f.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     30036
IP address blocks:        173.23.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:ab:52:0d:4d:b0:21:18:83:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=0853859c-4586-4141-be81-8a21aef63752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:86:95:f3:5b:79:5e:2f:93:fc:c9:cd:f7:5f:
                    01:6e:9e:a9:cc:94:22:31:6d:bf:4f:13:3d:9e:7e:
                    b2:49:a8:eb:fb:45:10:ba:94:f7:2c:b6:07:09:4e:
                    8a:c4:e9:d6:e0:97:4c:7c:fd:f9:d9:91:54:8f:54:
                    96:aa:02:ee:7c:ae:d9:36:b2:bd:f2:ff:58:96:75:
                    bf:9a:57:ff:f2:f6:bf:c4:73:4c:c1:e4:35:c5:03:
                    b4:0f:8a:75:ec:a0:ee:ba:1e:79:e6:d9:bc:0f:8d:
                    76:d3:62:6e:cf:38:e8:da:de:38:80:0c:d1:b6:79:
                    6d:6b:3c:e0:9c:97:ab:10:12:68:ee:54:74:4d:ce:
                    1c:6f:e1:8c:46:ed:95:44:7e:2b:47:38:3e:40:1c:
                    2c:5f:dc:64:1a:75:6e:5f:2b:07:f5:8e:d0:e8:bc:
                    3b:d2:3d:1e:ad:14:67:57:f2:ac:c0:32:16:87:30:
                    c7:3d:7e:7b:4e:6f:8a:8f:55:bf:40:c7:73:30:80:
                    fe:45:fc:2b:2a:cc:d4:3c:ab:78:5b:7c:4e:f9:19:
                    69:ed:45:3e:aa:ef:ef:2a:9d:f0:3c:78:2d:55:1e:
                    67:63:16:c0:fb:cc:ca:c3:ea:2d:c5:0c:35:b3:1d:
                    ee:03:11:e9:f0:6f:a8:65:8d:24:f6:92:2c:c6:45:
                    84:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4A:65:B3:96:C2:99:37:F3:0B:3A:B8:E8:F1:90:11:56:59:AF:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f51256b6-1b39-3896-943a-6ed7586f559f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:58:95:d6:7b:78:35:d7:8c:7e:c9:70:7d:72:6f:34:fa:c2:
         bb:e3:75:cf:01:c9:db:60:1b:1c:07:ef:b8:81:86:aa:53:18:
         d3:40:fc:b7:49:9f:9e:db:31:95:b7:6e:9c:de:4f:0e:5e:d9:
         41:e6:88:b5:11:69:03:cd:ad:02:e1:f6:25:97:0c:95:fd:c3:
         d7:19:29:87:e1:30:d1:d7:68:3e:89:8b:49:0e:9f:2f:e3:59:
         77:55:01:84:bd:d0:c0:dc:a0:da:41:db:cc:74:a7:6e:c2:11:
         9d:e5:ca:5f:3f:3e:ad:fd:05:fa:bd:be:c9:e9:5f:66:29:f2:
         1b:70:c6:74:91:52:4f:26:e3:89:41:b8:5b:2a:68:c6:a0:d4:
         9e:1e:51:92:18:2e:62:81:e3:1e:c8:5e:bd:c0:fd:e8:f4:39:
         30:5d:1b:ca:96:6a:2e:61:86:0f:fc:33:5c:63:3d:ed:3a:a8:
         ae:59:64:7a:03:64:4b:68:25:cd:2a:83:d3:04:5f:68:58:f3:
         e2:42:69:8a:cb:15:49:7c:27:31:b4:1a:ef:e5:ca:08:46:f3:
         70:49:b9:8e:91:e0:5e:e3:a4:fd:e2:e9:43:4b:62:8d:51:d9:
         60:97:77:02:cd:ee:b8:23:2d:92:17:6b:7c:82:ff:46:3f:17:
         b4:f5:75:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblatSDU2wIRiDy6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk
MDg1Mzg1OWMtNDU4Ni00MTQxLWJlODEtOGEyMWFlZjYzNzUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYaV81t5Xi+T/MnN918Bbp6pzJQiMW2/TxM9
nn6ySajr+0UQupT3LLYHCU6KxOnW4JdMfP352ZFUj1SWqgLufK7ZNrK98v9YlnW/
mlf/8va/xHNMweQ1xQO0D4p17KDuuh555tm8D41202Juzzjo2t44gAzRtnltazzg
nJerEBJo7lR0Tc4cb+GMRu2VRH4rRzg+QBwsX9xkGnVuXysH9Y7Q6Lw70j0erRRn
V/KswDIWhzDHPX57Tm+Kj1W/QMdzMID+RfwrKszUPKt4W3xO+Rlp7UU+qu/vKp3w
PHgtVR5nYxbA+8zKw+otxQw1sx3uAxHp8G+oZY0k9pIsxkWEJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNlKZbOWwpk38ws6uOjxkBFWWa9vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjUxMjU2YjYtMWIzOS0z
ODk2LTk0M2EtNmVkNzU4NmY1NTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRcrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5YldZ7eDXXjH7JcH1ybzT6wrvjdc8BydtgGxwH77iBhqpTGNNA/LdJ
n57bMZW3bpzeTw5e2UHmiLURaQPNrQLh9iWXDJX9w9cZKYfhMNHXaD6Ji0kOny/j
WXdVAYS90MDcoNpB28x0p27CEZ3lyl8/Pq39Bfq9vsnpX2Yp8htwxnSRUk8m44lB
uFsqaMag1J4eUZIYLmKB4x7IXr3A/ej0OTBdG8qWai5hhg/8M1xjPe06qK5ZZHoD
ZEtoJc0qg9MEX2hY8+JCaYrLFUl8JzG0Gu/lyghG83BJuY6R4F7jpP3i6UNLYo1R
2WCXdwLN7rgjLZIXa3yC/0Y/F7T1dfc=
-----END CERTIFICATE-----
Generated at Thu Jul 10 02:01:18 2025 by rpki-client