Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/3029e186-49b7-387b-8d82-eafc4d11072d.roa
File:                     3029e186-49b7-387b-8d82-eafc4d11072d.roa (raw, json)
Hash identifier:          vPmyrtpIE4G/Ng+0UKwnKzeXh9m0lJowpz72ndLN8fo=
Subject key identifier:   74:0B:B9:BA:58:03:0C:2D:D5:A2:FE:25:AE:7D:B3:83:03:14:B8:5E
Certificate issuer:       /CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
Certificate serial:       010D0C9F4328584B4BAC5907F9E5BD9E57339980
Authority key identifier: 2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/3029e186-49b7-387b-8d82-eafc4d11072d.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     23535
IP address blocks:        198.176.44.0/22 maxlen: 24
                          2604:a680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:59:07:f9:e5:bd:9e:57:33:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=e4f82566-c776-4e4c-a612-87d885942177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:3a:a4:e8:73:35:98:27:90:1c:e0:55:cd:
                    13:e4:4f:62:dc:9c:9c:5f:7a:f6:dc:33:3d:60:de:
                    97:94:5a:c4:d4:2c:c8:fb:c2:00:00:84:81:f2:c9:
                    b5:a2:7b:4e:21:8b:ee:1c:61:cd:43:50:eb:b2:f5:
                    62:0f:2c:8f:3f:c8:e6:3e:8b:a8:1e:a8:de:71:da:
                    75:e0:b6:ff:cc:b3:25:5f:0f:5c:5e:de:95:5e:01:
                    0c:61:5f:d7:f1:3f:dc:0d:38:05:32:1d:7b:1f:0a:
                    18:ae:68:d1:4f:5b:c9:86:6a:e2:c7:f1:b7:e1:62:
                    54:a2:85:1e:a4:76:94:0a:24:d6:dd:82:23:52:73:
                    cf:e3:ee:e6:cf:89:8f:af:31:c0:ed:bf:24:3f:c6:
                    a6:95:51:fc:f6:52:6b:12:98:72:78:e1:a6:d1:97:
                    ff:a9:4f:e8:0b:81:db:7e:5a:8f:81:ed:7b:67:f9:
                    50:d5:75:2e:fd:4c:41:0f:94:09:87:73:57:17:3d:
                    97:87:db:72:17:66:47:e2:6d:84:a9:53:ea:15:f7:
                    94:0c:a1:3f:dd:06:58:e1:e8:de:18:bc:12:ce:1b:
                    5b:90:08:57:8d:35:31:1a:99:e6:c0:f7:a7:f2:12:
                    2f:a4:3d:26:f5:21:33:02:03:b7:7a:a5:b1:9e:13:
                    4c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0B:B9:BA:58:03:0C:2D:D5:A2:FE:25:AE:7D:B3:83:03:14:B8:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/3029e186-49b7-387b-8d82-eafc4d11072d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl

            X509v3 Authority Key Identifier:
                keyid:2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.44.0/22
                IPv6:
                  2604:a680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b3:30:74:24:69:ca:cd:e0:0a:b3:6c:d1:be:07:7c:29:80:
         73:ed:c6:2a:42:1a:37:98:f9:5c:bf:ff:ab:1a:3a:f8:aa:d0:
         58:fe:f3:fb:f3:80:a6:c9:e9:e8:fd:74:e9:fb:63:68:5e:c4:
         ac:3e:2f:ce:07:26:af:6a:e7:e6:22:c9:0e:fc:a3:45:72:e1:
         04:1d:f2:ab:53:77:24:40:16:16:87:15:33:57:8b:ca:4c:99:
         6a:67:e0:5f:fa:85:af:b3:ca:e5:dc:59:1d:79:c2:f9:51:32:
         71:41:88:27:7e:09:fe:9b:02:28:0b:e7:7a:d8:72:64:3c:fe:
         3e:e6:7e:1e:ca:f4:c2:a7:b5:62:51:0c:62:12:bb:8d:4c:28:
         e6:21:6e:6d:b5:e4:f8:ec:5a:0e:c7:79:cc:a6:16:75:c6:b1:
         44:0e:1c:41:90:e7:cb:24:fa:9e:2a:f8:e8:95:6d:ec:27:ef:
         0f:53:55:c5:95:70:3b:d2:a6:13:b9:7e:35:02:b4:0e:74:3e:
         6e:a9:1a:f4:3d:85:b9:d2:a0:3b:7b:22:08:c1:2e:25:ce:79:
         3a:8b:a1:3d:3d:fd:dc:b7:84:18:d1:a9:19:25:69:a7:36:88:
         f2:25:7e:52:9b:03:dd:51:cb:b5:b9:e2:2e:47:d9:1b:54:ae:
         a3:3f:29:80
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEtLrFkH+eW9nlczmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmE0OTE2NDktZTc2ZS00YTRiLWFhOGQtOGM0NDA0M2I4
MWJiMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
ZTRmODI1NjYtYzc3Ni00ZTRjLWE2MTItODdkODg1OTQyMTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2o6pOhzNZgnkBzgVc0T5E9i3JycX3r23DM9
YN6XlFrE1CzI+8IAAISB8sm1ontOIYvuHGHNQ1DrsvViDyyPP8jmPouoHqjecdp1
4Lb/zLMlXw9cXt6VXgEMYV/X8T/cDTgFMh17HwoYrmjRT1vJhmrix/G34WJUooUe
pHaUCiTW3YIjUnPP4+7mz4mPrzHA7b8kP8amlVH89lJrEphyeOGm0Zf/qU/oC4Hb
flqPge17Z/lQ1XUu/UxBD5QJh3NXFz2Xh9tyF2ZH4m2EqVPqFfeUDKE/3QZY4eje
GLwSzhtbkAhXjTUxGpnmwPen8hIvpD0m9SEzAgO3eqWxnhNMvQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFHQLubpYAwwt1aL+Ja59s4MDFLheMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82YTQ5
MTY0OS1lNzZlLTRhNGItYWE4ZC04YzQ0MDQzYjgxYmIvMzAyOWUxODYtNDliNy0z
ODdiLThkODItZWFmYzRkMTEwNzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmE0OTE2NDktZTc2ZS00YTRiLWFh
OGQtOGM0NDA0M2I4MWJiLzZhNDkxNjQ5LWU3NmUtNGE0Yi1hYThkLThjNDQwNDNi
ODFiYi5jcmwwHwYDVR0jBBgwFoAUL5zfWNbcWQazhuk37O5aD9Sf30swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82YTQ5MTY0OS1lNzZlLTRhNGItYWE4ZC04YzQ0
MDQzYjgxYmIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCxrAsMA0E
AgACMAcDBQAmBKaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAK2zMHQkacrN4AqzbNG+B3wpgHPtxipCGjeY
+Vy//6saOviq0Fj+8/vzgKbJ6ej9dOn7Y2hexKw+L84HJq9q5+YiyQ78o0Vy4QQd
8qtTdyRAFhaHFTNXi8pMmWpn4F/6ha+zyuXcWR15wvlRMnFBiCd+Cf6bAigL53rY
cmQ8/j7mfh7K9MKntWJRDGISu41MKOYhbm215PjsWg7HecymFnXGsUQOHEGQ58sk
+p4q+OiVbewn7w9TVcWVcDvSphO5fjUCtA50Pm6pGvQ9hbnSoDt7IgjBLiXOeTqL
oT09/dy3hBjRqRklaac2iPIlflKbA91Ry7W54i5H2RtUrqM/KYA=
-----END CERTIFICATE-----
Generated at Tue Oct 14 09:07:01 2025 by rpki-client