Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/4107572f-7f73-39cf-a83b-21e385062b8e.roa
File:                     4107572f-7f73-39cf-a83b-21e385062b8e.roa (raw, json)
Hash identifier:          Iu53e6v4qHFUV204JhmU+FFQENFfa3LPFjKN6gm1E4g=
Subject key identifier:   24:95:0D:27:8E:DC:56:AC:22:0D:73:43:89:73:20:94:1D:33:4D:75
Certificate issuer:       /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
Certificate serial:       010D0C9F4328584BBCDADEF299DE2EB2328F1200
Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/4107572f-7f73-39cf-a83b-21e385062b8e.roa
Signing time:             Mon 03 Nov 2025 14:00:38 +0000
ROA not before:           Mon 03 Nov 2025 14:00:38 +0000
ROA not after:            Sun 01 Feb 2026 14:00:38 +0000
asID:                     6939
IP address blocks:        173.249.230.0/24 maxlen: 32
                          173.249.235.0/24 maxlen: 32
                          173.249.240.0/24 maxlen: 32
                          173.249.245.0/24 maxlen: 32
                          173.249.250.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bc:da:de:f2:99:de:2e:b2:32:8f:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
        Validity
            Not Before: Nov  3 14:00:38 2025 GMT
            Not After : Feb  1 14:00:38 2026 GMT
        Subject: CN=bbf2e17e-6b6c-4769-8c02-4a569bd4c018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:46:22:14:72:c2:1a:e7:cd:47:29:93:ff:90:
                    32:2a:b4:71:09:87:e3:dc:f5:41:5d:b0:f2:90:3a:
                    d4:af:81:78:4f:d9:a9:b4:ed:ff:b3:ea:32:5e:06:
                    50:d3:a4:e0:07:45:24:3f:22:a9:bd:da:50:91:b4:
                    d9:a6:47:23:8f:f3:46:33:f7:1a:34:e5:52:66:bf:
                    39:ea:07:52:ce:62:1b:e2:0d:bf:4b:fc:47:40:54:
                    42:e4:ce:20:87:f2:ff:bc:f2:bb:35:d8:c0:a9:af:
                    e1:95:5f:5b:62:a1:ba:53:64:c2:65:0f:11:6f:56:
                    63:6a:dc:4a:a6:b5:6d:b8:ed:05:5f:d9:41:68:15:
                    c1:82:21:2a:e0:50:0d:0e:3a:05:6d:da:21:4e:0f:
                    99:de:25:df:fd:e3:41:8d:a7:01:fb:d0:7c:92:45:
                    d1:7c:eb:18:84:a9:fd:2c:92:77:2c:26:89:df:2d:
                    34:c3:54:4a:5d:ee:2b:5a:1c:c9:09:18:61:31:92:
                    d1:0e:08:fe:82:0c:e1:6c:ca:fc:d0:b1:48:51:14:
                    14:a9:df:a9:7b:52:91:55:02:e2:61:2d:c8:dc:1e:
                    86:de:18:4a:dd:7a:ed:f7:23:04:4b:80:56:29:37:
                    d3:ff:57:00:19:c0:4d:2b:7a:40:f9:0d:85:6e:aa:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:95:0D:27:8E:DC:56:AC:22:0D:73:43:89:73:20:94:1D:33:4D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/4107572f-7f73-39cf-a83b-21e385062b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl

            X509v3 Authority Key Identifier:
                keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.230.0/24
                  173.249.235.0/24
                  173.249.240.0/24
                  173.249.245.0/24
                  173.249.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:14:4c:b8:56:7b:95:35:b8:66:9a:9d:8e:73:0a:c2:0d:fc:
         aa:7e:74:3b:fb:0a:99:30:33:6c:7e:9c:c1:3f:b2:77:ec:71:
         7f:0f:bd:79:de:51:57:0f:77:b4:4b:ad:17:8a:e7:e0:a6:75:
         67:e2:45:9f:23:7e:66:03:4f:a8:92:85:ce:b9:0e:05:8d:43:
         7c:30:c8:35:d5:09:2a:8e:ad:db:aa:e6:1c:6a:fd:b7:93:e8:
         8c:cb:93:58:50:ef:7b:89:c7:7f:d1:5d:91:c9:04:64:bd:74:
         08:52:1c:ff:1f:63:cb:17:09:e0:98:25:7a:fa:28:51:9d:7e:
         29:da:13:cc:92:35:2c:9a:f6:32:8c:85:6e:ac:f4:79:4f:80:
         6d:d1:08:7b:9f:57:dd:2c:d0:20:29:2c:93:13:0d:da:36:3c:
         03:d9:19:4d:c6:17:5c:74:d3:35:62:95:ab:ee:3b:a9:a5:e6:
         9c:ff:c5:8c:53:f3:35:a8:60:54:14:d0:7e:4c:ab:6d:54:99:
         ce:92:c7:3d:15:e3:83:78:b3:1a:28:20:84:f6:22:a8:12:b8:
         17:d6:f9:27:1b:a3:9e:66:03:4b:a9:91:43:18:5f:3b:97:98:
         c3:ca:46:96:66:3e:48:8c:69:91:db:60:a5:67:0c:42:e8:da:
         82:05:6d:d7
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEu82t7ymd4usjKPEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTMzYmVhMGUtY2Q1Mi00OWE4LTljY2EtYTA1Y2MzM2Nl
MDczMB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk
YmJmMmUxN2UtNmI2Yy00NzY5LThjMDItNGE1NjliZDRjMDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUYiFHLCGufNRymT/5AyKrRxCYfj3PVBXbDy
kDrUr4F4T9mptO3/s+oyXgZQ06TgB0UkPyKpvdpQkbTZpkcjj/NGM/caNOVSZr85
6gdSzmIb4g2/S/xHQFRC5M4gh/L/vPK7NdjAqa/hlV9bYqG6U2TCZQ8Rb1ZjatxK
prVtuO0FX9lBaBXBgiEq4FANDjoFbdohTg+Z3iXf/eNBjacB+9B8kkXRfOsYhKn9
LJJ3LCaJ3y00w1RKXe4rWhzJCRhhMZLRDgj+ggzhbMr80LFIURQUqd+pe1KRVQLi
YS3I3B6G3hhK3Xrt9yMES4BWKTfT/1cAGcBNK3pA+Q2FbqqvYQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFCSVDSeO3FasIg1zQ4lzIJQdM011MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MzNi
ZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVjYzMzY2UwNzMvNDEwNzU3MmYtN2Y3My0z
OWNmLWE4M2ItMjFlMzg1MDYyYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTMzYmVhMGUtY2Q1Mi00OWE4LTlj
Y2EtYTA1Y2MzM2NlMDczLzUzM2JlYTBlLWNkNTItNDlhOC05Y2NhLWEwNWNjMzNj
ZTA3My5jcmwwHwYDVR0jBBgwFoAUMxi/JZqnskOqqLLCHXyjj+mzZWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81MzNiZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVj
YzMzY2UwNzMuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQArfnmAwQA
rfnrAwQArfnwAwQArfn1AwQArfn6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJYUTLhWe5U1uGaanY5zCsIN
/Kp+dDv7CpkwM2x+nME/snfscX8PvXneUVcPd7RLrReK5+CmdWfiRZ8jfmYDT6iS
hc65DgWNQ3wwyDXVCSqOrduq5hxq/beT6IzLk1hQ73uJx3/RXZHJBGS9dAhSHP8f
Y8sXCeCYJXr6KFGdfinaE8ySNSya9jKMhW6s9HlPgG3RCHufV90s0CApLJMTDdo2
PAPZGU3GF1x00zVilavuO6ml5pz/xYxT8zWoYFQU0H5Mq21Umc6Sxz0V44N4sxoo
IIT2IqgSuBfW+Scbo55mA0upkUMYXzuXmMPKRpZmPkiMaZHbYKVnDELo2oIFbdc=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:41:43 2025 by rpki-client