Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a187f89f-ee76-31c0-ae56-a49e869a3d63.roa
File:                     a187f89f-ee76-31c0-ae56-a49e869a3d63.roa (raw, json)
Hash identifier:          rI/IrlTcKwELPp98YsANf7EskgOWWwCbqz3UIW+F68M=
Subject key identifier:   56:B5:C9:AA:BA:58:B7:C9:9C:49:CC:8F:E9:68:76:26:59:6A:4B:0E
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584AC2E0F4AD1F2E621E981E2180
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a187f89f-ee76-31c0-ae56-a49e869a3d63.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     16884
IP address blocks:        173.251.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f4:ad:1f:2e:62:1e:98:1e:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=017d8268-4c5e-4e4c-bc92-6795dcc0832e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e5:0f:30:1e:50:1b:7f:17:92:7a:9e:4a:af:
                    f9:5a:e8:0b:3c:7f:16:8c:36:ac:70:f3:07:33:28:
                    1d:5c:2e:93:1a:21:75:d0:c4:6a:0c:26:ff:6c:71:
                    e0:48:08:58:29:cf:2a:48:41:a8:6e:26:fc:7a:ad:
                    c5:ae:31:27:6c:9b:29:a5:d5:20:70:80:50:e8:da:
                    37:17:17:4b:51:48:c3:62:da:a5:47:74:85:b4:41:
                    07:e9:03:b6:ff:a4:88:b1:8f:79:47:ef:ba:d2:d9:
                    c7:02:48:a5:1d:80:dd:9e:96:28:f3:31:9d:14:1c:
                    02:c3:70:8c:92:d8:90:23:76:0d:68:0c:27:08:e3:
                    db:37:de:bc:21:27:cc:8e:69:7c:07:ea:4a:be:02:
                    1c:5b:50:6b:90:b4:17:5e:8b:6d:ab:5d:7d:bd:dd:
                    01:61:30:a5:24:35:a9:74:2f:55:69:aa:67:e1:d0:
                    be:a8:21:3f:d2:64:2c:ad:f2:63:e7:98:1b:0e:57:
                    fe:66:a2:a9:74:c8:45:04:f4:d9:2f:f6:31:89:97:
                    b7:da:80:47:77:de:91:50:82:8a:72:fc:2f:d2:ad:
                    87:76:62:74:17:5a:b4:0b:51:c1:2f:f0:fd:c4:19:
                    ae:e0:58:71:83:46:52:12:84:87:cd:06:38:94:22:
                    3e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B5:C9:AA:BA:58:B7:C9:9C:49:CC:8F:E9:68:76:26:59:6A:4B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a187f89f-ee76-31c0-ae56-a49e869a3d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.251.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:dd:50:88:ec:30:ef:89:db:4f:78:94:22:74:f9:99:ba:50:
         1f:cc:93:a2:82:58:7f:bc:8b:75:88:79:de:df:80:09:aa:f0:
         1c:6a:e4:dd:c4:84:d1:f0:24:29:57:d2:44:7f:ad:5f:ce:b6:
         8d:7a:b5:26:8e:81:41:0a:9a:00:e6:e4:94:2a:af:28:5f:f0:
         6f:88:60:92:1a:91:85:da:ed:63:f8:bc:25:c1:6b:d9:f2:b0:
         dd:af:67:39:d7:69:c9:5c:06:d6:31:57:3a:10:c1:ad:f3:ff:
         fe:b9:dc:2a:99:6b:10:24:99:1c:32:b5:1a:d1:fe:25:48:6c:
         0a:b7:87:e7:7e:e9:9b:a7:52:03:87:c8:2c:8f:de:a6:3c:dd:
         55:bb:19:42:75:25:b4:72:17:02:6e:bf:1a:f0:62:f9:fb:a7:
         3d:89:94:00:0d:08:cc:ee:30:80:7e:ea:71:31:e3:8d:d0:cf:
         57:89:96:ba:7b:0c:6c:7f:aa:41:e8:69:58:4e:62:e9:e7:42:
         bf:e4:08:fd:00:12:72:76:2c:5b:09:93:a5:7f:9c:33:e6:75:
         e0:5d:55:e8:0d:c1:4b:12:0f:a3:b4:a1:f4:69:03:2d:85:07:
         66:d0:43:a7:1f:e9:73:9f:00:41:b1:3a:0d:f0:df:37:ff:41:
         7c:a1:d4:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PStHy5iHpgeIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
MDE3ZDgyNjgtNGM1ZS00ZTRjLWJjOTItNjc5NWRjYzA4MzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OUPMB5QG38XknqeSq/5WugLPH8WjDascPMH
MygdXC6TGiF10MRqDCb/bHHgSAhYKc8qSEGobib8eq3FrjEnbJsppdUgcIBQ6No3
FxdLUUjDYtqlR3SFtEEH6QO2/6SIsY95R++60tnHAkilHYDdnpYo8zGdFBwCw3CM
ktiQI3YNaAwnCOPbN968ISfMjml8B+pKvgIcW1BrkLQXXottq119vd0BYTClJDWp
dC9Vaapn4dC+qCE/0mQsrfJj55gbDlf+ZqKpdMhFBPTZL/YxiZe32oBHd96RUIKK
cvwv0q2HdmJ0F1q0C1HBL/D9xBmu4Fhxg0ZSEoSHzQY4lCI+MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFa1yaq6WLfJnEnMj+lodiZZaksOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYTE4N2Y4OWYtZWU3Ni0z
MWMwLWFlNTYtYTQ5ZTg2OWEzZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArftAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzdUIjsMO+J2094lCJ0+Zm6UB/Mk6KCWH+8i3WIed7fgAmq8Bxq5N3E
hNHwJClX0kR/rV/Oto16tSaOgUEKmgDm5JQqryhf8G+IYJIakYXa7WP4vCXBa9ny
sN2vZznXaclcBtYxVzoQwa3z//653CqZaxAkmRwytRrR/iVIbAq3h+d+6ZunUgOH
yCyP3qY83VW7GUJ1JbRyFwJuvxrwYvn7pz2JlAANCMzuMIB+6nEx443Qz1eJlrp7
DGx/qkHoaVhOYunnQr/kCP0AEnJ2LFsJk6V/nDPmdeBdVegNwUsSD6O0ofRpAy2F
B2bQQ6cf6XOfAEGxOg3w3zf/QXyh1FQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:15 2025 by rpki-client