Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f92a87eb-0dbd-3bd8-9fe6-be67e3f3bf96.roa
File:                     f92a87eb-0dbd-3bd8-9fe6-be67e3f3bf96.roa (raw, json)
Hash identifier:          EEBfMRvkhYAIENlx7z28Qnev3FTcZXfjyzD0y9uz9sU=
Subject key identifier:   C9:17:83:9E:06:2B:23:F3:FE:51:7D:B1:7D:41:8A:FF:ED:91:E9:62
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584ADD667143A9D6B82A6C803C00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f92a87eb-0dbd-3bd8-9fe6-be67e3f3bf96.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     2914
IP address blocks:        129.250.64.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:71:43:a9:d6:b8:2a:6c:80:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=a6e8dbb5-ffb9-4ed8-92eb-e32a2938e879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:15:b2:c5:24:77:ac:70:a4:45:52:de:e5:42:
                    6c:7e:31:2c:f3:79:4e:2c:08:26:6d:ae:53:cd:40:
                    e6:b8:f7:3d:06:16:ce:42:2f:a0:77:b3:c3:cb:c1:
                    f1:93:4a:5f:56:99:a7:91:bc:4f:02:35:f4:e4:64:
                    44:f1:ef:a8:85:52:9d:76:7d:98:b5:f6:1c:86:2b:
                    ff:cd:a5:5a:33:aa:23:35:12:94:91:f3:3f:9c:87:
                    38:d3:c7:5b:23:67:48:55:5b:b0:f5:04:88:cc:1e:
                    11:47:ec:e1:7d:70:e6:e1:0e:71:6e:be:60:8e:52:
                    3f:e7:89:d1:fe:d0:72:fb:86:9d:31:c1:0b:e7:08:
                    32:56:8d:19:15:d4:82:d4:3c:8f:2f:f0:c0:c0:36:
                    08:e7:69:bd:27:eb:8f:67:36:92:75:e7:ab:95:a6:
                    b9:11:f1:ce:3a:b8:2c:7a:7b:b8:2e:08:05:c7:1e:
                    e1:95:f5:c4:78:5d:04:34:86:9d:76:bc:8a:58:68:
                    24:9b:68:73:e2:32:06:46:82:f3:33:47:62:d0:46:
                    3b:4a:83:ec:81:d5:19:0e:c0:c9:76:1b:ae:4c:62:
                    3a:de:5e:bc:75:68:66:fc:14:09:e7:b7:4e:2c:6b:
                    24:c7:31:5c:3d:3b:05:a3:f8:6a:2e:ff:3e:3a:f3:
                    b9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:17:83:9E:06:2B:23:F3:FE:51:7D:B1:7D:41:8A:FF:ED:91:E9:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f92a87eb-0dbd-3bd8-9fe6-be67e3f3bf96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:3d:ab:7c:48:c7:d7:a3:4b:94:da:98:89:22:e6:42:55:a1:
         e9:9c:ee:b9:a6:96:de:5a:c0:d7:09:98:73:3d:a6:e3:64:d3:
         55:d1:14:98:4c:98:ae:fe:51:4e:87:69:8b:2a:1c:bf:6d:68:
         2f:02:6f:52:bc:88:a0:bc:2d:f7:2b:57:44:88:cc:19:fb:66:
         d8:31:7d:f6:65:ed:4b:86:d2:26:e4:78:67:f2:f3:15:f5:40:
         65:0f:a5:90:01:55:f0:55:1e:9f:96:40:71:79:1e:8c:81:60:
         42:d3:68:c3:df:8e:61:47:a6:2b:4f:2f:a6:e3:1b:29:09:77:
         f1:22:34:7f:21:20:8c:33:e0:b4:6e:16:ec:f0:fa:37:08:18:
         c6:89:71:09:e3:25:9e:4e:ae:f8:ac:11:91:dc:f1:67:33:f1:
         3f:bf:a4:2b:af:28:1a:a0:26:dd:1a:af:d2:d4:bf:09:9a:c2:
         c9:22:d3:87:47:a3:0c:f0:8b:ce:a3:80:c9:45:b7:a9:36:e8:
         e2:fe:1d:76:24:a6:a2:03:ad:8c:e4:e7:f2:c1:8e:fb:8f:3d:
         d1:cb:86:d0:59:e7:af:5a:b2:78:e9:a6:ca:11:70:62:d0:15:
         2b:00:e6:13:92:53:2b:25:ba:39:7e:44:ac:cc:f8:64:82:63:
         61:a8:53:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZnFDqda4KmyAPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk
YTZlOGRiYjUtZmZiOS00ZWQ4LTkyZWItZTMyYTI5MzhlODc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhWyxSR3rHCkRVLe5UJsfjEs83lOLAgmba5T
zUDmuPc9BhbOQi+gd7PDy8Hxk0pfVpmnkbxPAjX05GRE8e+ohVKddn2YtfYchiv/
zaVaM6ojNRKUkfM/nIc408dbI2dIVVuw9QSIzB4RR+zhfXDm4Q5xbr5gjlI/54nR
/tBy+4adMcEL5wgyVo0ZFdSC1DyPL/DAwDYI52m9J+uPZzaSdeerlaa5EfHOOrgs
enu4LggFxx7hlfXEeF0ENIaddryKWGgkm2hz4jIGRoLzM0di0EY7SoPsgdUZDsDJ
dhuuTGI63l68dWhm/BQJ57dOLGskxzFcPTsFo/hqLv8+OvO52wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMkXg54GKyPz/lF9sX1Biv/tkeliMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjkyYTg3ZWItMGRiZC0z
YmQ4LTlmZTYtYmU2N2UzZjNiZjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgfpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALE9q3xIx9ejS5TamIki5kJVoemc7rmmlt5awNcJmHM9puNk01XRFJhM
mK7+UU6HaYsqHL9taC8Cb1K8iKC8LfcrV0SIzBn7ZtgxffZl7UuG0ibkeGfy8xX1
QGUPpZABVfBVHp+WQHF5HoyBYELTaMPfjmFHpitPL6bjGykJd/EiNH8hIIwz4LRu
Fuzw+jcIGMaJcQnjJZ5OrvisEZHc8Wcz8T+/pCuvKBqgJt0ar9LUvwmawski04dH
owzwi86jgMlFt6k26OL+HXYkpqIDrYzk5/LBjvuPPdHLhtBZ569asnjppsoRcGLQ
FSsA5hOSUyslujl+RKzM+GSCY2GoU3s=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:58 2025 by rpki-client