Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a187f89f-ee76-31c0-ae56-a49e869a3d63.roa
File:                     a187f89f-ee76-31c0-ae56-a49e869a3d63.roa (raw, json)
Hash identifier:          sBiJ1CF88e0KeUen8ZpTYdKkVs/iR/7avcnn5yHiS3g=
Subject key identifier:   20:0F:C8:94:6D:C4:E0:72:5C:E8:7B:70:B8:36:39:F4:46:3D:ED:63
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285849E2252CBFA423CF0CBC534E00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a187f89f-ee76-31c0-ae56-a49e869a3d63.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16884
IP address blocks:        173.251.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:2c:bf:a4:23:cf:0c:bc:53:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=34575c84-800b-47ab-aba2-49c03ef929da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:45:25:67:71:86:be:0b:21:e2:31:e3:cf:20:
                    ed:e1:fd:74:65:56:6e:23:f7:e7:26:95:d3:fb:3b:
                    0b:ef:66:43:74:66:f2:80:28:2d:34:94:ae:61:ac:
                    0e:3c:12:30:c4:ad:c7:7b:e5:ee:f9:d5:17:d1:b3:
                    c5:7e:4c:be:1e:b5:52:c1:85:16:06:77:2a:b8:60:
                    aa:cd:c7:19:42:5e:2e:58:30:a4:43:31:2f:a0:65:
                    18:18:e9:db:f3:e9:56:d7:98:d9:95:52:00:58:dd:
                    8f:77:9d:1d:5f:43:fc:eb:43:b5:ef:00:3f:79:ec:
                    ab:cd:a4:07:7f:a6:13:38:f1:38:6a:7e:ab:94:74:
                    91:85:01:be:47:49:64:b4:2d:7f:84:e7:5e:d5:02:
                    2c:6e:37:5e:03:c2:64:77:44:6a:7e:77:68:1a:f7:
                    9c:17:93:0a:67:09:1b:e3:b5:01:3f:5d:b2:4f:b5:
                    03:85:b2:d3:23:31:b7:8b:e1:48:69:09:8b:35:28:
                    1b:36:58:e3:c1:dd:88:9a:49:b3:ee:38:48:67:d6:
                    75:c0:9c:4c:5c:bc:a1:98:a0:d5:b0:ee:74:ad:d1:
                    3a:2d:f4:dc:e2:af:0b:ef:45:47:9d:49:d4:70:27:
                    1d:45:48:14:c9:3c:ad:01:c1:1d:00:92:34:49:bf:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0F:C8:94:6D:C4:E0:72:5C:E8:7B:70:B8:36:39:F4:46:3D:ED:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a187f89f-ee76-31c0-ae56-a49e869a3d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.251.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:c5:b3:74:e8:2d:36:a7:af:e5:40:c6:61:09:cc:9d:1b:a7:
         11:0d:d8:5f:f4:bd:ed:9c:3a:b8:ba:81:02:6a:83:ca:f8:85:
         bb:c1:53:f4:43:d5:3f:91:3f:c7:2f:c0:ce:86:64:9e:77:67:
         fe:54:d2:32:0a:64:82:89:71:90:e8:e1:d0:47:88:87:12:ab:
         73:72:3b:33:c8:8e:7e:0a:a7:ab:33:a9:ed:53:96:f0:af:00:
         c7:42:e2:8d:58:41:dc:53:23:e9:ef:50:a3:73:a1:de:38:56:
         0c:cd:84:a1:91:f3:4f:da:93:b2:bc:9c:ee:93:98:1f:68:6c:
         0d:18:5e:71:23:c2:60:f3:b5:d4:88:d3:92:f4:b1:1d:c7:05:
         e1:03:5d:04:38:b4:08:44:37:d8:38:2e:20:08:ca:18:ff:40:
         77:35:28:9f:fe:e9:43:9a:83:bd:32:a6:c7:43:79:fc:e1:74:
         e6:7d:a6:2a:c5:1f:1b:17:53:85:34:85:1f:85:67:dc:45:b2:
         64:c8:4c:c2:06:35:f2:f7:44:f7:e8:22:f9:cd:f3:da:4f:6b:
         6c:b1:74:62:53:a3:cb:c6:76:00:bf:2a:f6:07:89:be:87:c0:
         a2:e2:79:e8:76:6c:88:04:c1:80:60:c7:8a:45:ce:66:ee:84:
         12:6c:18:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJSy/pCPPDLxTTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
MzQ1NzVjODQtODAwYi00N2FiLWFiYTItNDljMDNlZjkyOWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEUlZ3GGvgsh4jHjzyDt4f10ZVZuI/fnJpXT
+zsL72ZDdGbygCgtNJSuYawOPBIwxK3He+Xu+dUX0bPFfky+HrVSwYUWBncquGCq
zccZQl4uWDCkQzEvoGUYGOnb8+lW15jZlVIAWN2Pd50dX0P860O17wA/eeyrzaQH
f6YTOPE4an6rlHSRhQG+R0lktC1/hOde1QIsbjdeA8Jkd0RqfndoGvecF5MKZwkb
47UBP12yT7UDhbLTIzG3i+FIaQmLNSgbNljjwd2Imkmz7jhIZ9Z1wJxMXLyhmKDV
sO50rdE6LfTc4q8L70VHnUnUcCcdRUgUyTytAcEdAJI0Sb/plQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAPyJRtxOByXOh7cLg2OfRGPe1jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYTE4N2Y4OWYtZWU3Ni0z
MWMwLWFlNTYtYTQ5ZTg2OWEzZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArftAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANfFs3ToLTanr+VAxmEJzJ0bpxEN2F/0ve2cOri6gQJqg8r4hbvBU/RD
1T+RP8cvwM6GZJ53Z/5U0jIKZIKJcZDo4dBHiIcSq3NyOzPIjn4Kp6szqe1TlvCv
AMdC4o1YQdxTI+nvUKNzod44VgzNhKGR80/ak7K8nO6TmB9obA0YXnEjwmDztdSI
05L0sR3HBeEDXQQ4tAhEN9g4LiAIyhj/QHc1KJ/+6UOag70ypsdDefzhdOZ9pirF
HxsXU4U0hR+FZ9xFsmTITMIGNfL3RPfoIvnN89pPa2yxdGJTo8vGdgC/KvYHib6H
wKLieeh2bIgEwYBgx4pFzmbuhBJsGNw=
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:44:13 2025 by rpki-client