Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/a8e778ba-cd54-32bc-9dc5-4281fbd70bc7.roa
File:                     a8e778ba-cd54-32bc-9dc5-4281fbd70bc7.roa (raw, json)
Hash identifier:          DlZ082ZWAzkAgy4EYJ2p6Uzc9+m1dNd2IbioCIo1Flc=
Subject key identifier:   29:E6:50:4E:3B:84:47:2F:73:10:DC:4A:B9:AE:E5:D0:F2:87:EE:2D
Certificate issuer:       /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
Certificate serial:       010D0C9F4328584AC02D1E2D082F60ADD3119AC0
Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/a8e778ba-cd54-32bc-9dc5-4281fbd70bc7.roa
Signing time:             Tue 05 Aug 2025 01:46:52 +0000
ROA not before:           Tue 05 Aug 2025 01:46:52 +0000
ROA not after:            Mon 03 Nov 2025 02:46:52 +0000
asID:                     6939
IP address blocks:        173.249.254.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:2d:1e:2d:08:2f:60:ad:d3:11:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
        Validity
            Not Before: Aug  5 01:46:52 2025 GMT
            Not After : Nov  3 02:46:52 2025 GMT
        Subject: CN=7737005d-e631-4af9-95ad-c5e1cbc82328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:4d:15:28:e6:44:7a:89:29:85:52:9a:2a:
                    b6:34:bf:14:9f:6f:da:81:77:4a:9f:54:2d:2b:83:
                    a9:12:d8:54:f5:93:85:ec:da:7d:d1:b6:4e:e9:1c:
                    5d:06:b9:f2:52:54:e4:a2:17:e0:0e:24:33:f2:6d:
                    f0:d4:03:76:f5:29:03:bf:55:74:23:0c:3f:25:0c:
                    7d:b3:d7:95:28:6b:a1:cd:f8:fb:cc:74:98:a5:42:
                    0c:31:35:bf:2f:e4:5c:33:50:af:86:2c:d1:07:05:
                    64:de:ef:ea:96:10:6f:17:a9:3f:11:bf:32:e0:56:
                    76:3d:47:8c:bc:22:2a:30:be:87:c6:ac:1e:57:49:
                    8d:68:9b:09:91:3c:3f:89:7f:fc:c6:c9:1a:13:25:
                    63:65:a7:ba:ff:7d:a4:5a:99:13:45:6e:91:c3:65:
                    95:cb:7e:c3:39:df:64:06:83:e7:b2:85:55:f6:00:
                    d6:f2:8d:98:a0:24:50:c2:5e:5a:5d:06:83:00:2c:
                    c8:71:1c:2f:a2:46:2a:5b:77:66:d9:c9:38:c2:a4:
                    a4:c9:c3:e5:98:78:d3:73:0d:c5:ab:99:1c:b8:66:
                    8a:1f:bc:b8:1b:0e:7f:ad:03:29:13:9c:18:45:a9:
                    bc:d9:8f:12:ff:80:42:d1:93:04:aa:f5:3d:17:e7:
                    7f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E6:50:4E:3B:84:47:2F:73:10:DC:4A:B9:AE:E5:D0:F2:87:EE:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/a8e778ba-cd54-32bc-9dc5-4281fbd70bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl

            X509v3 Authority Key Identifier:
                keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7e:c8:b2:ad:e0:0d:b5:89:01:0a:e4:ef:94:30:17:52:c3:
         c0:86:d2:8c:ce:3f:19:89:64:cf:fd:1b:37:f9:36:eb:95:98:
         93:8d:08:62:f2:2d:31:f3:51:b8:23:89:36:20:8f:93:b3:8e:
         68:7b:f7:3b:0f:d3:79:76:57:e9:59:36:85:d5:32:0e:9c:3c:
         2a:f3:6f:b2:05:b8:20:85:e4:c9:12:39:c4:47:51:ff:b3:e8:
         7b:54:54:0e:e1:12:ce:d1:a7:f2:26:f6:bb:1c:4c:bc:b6:8e:
         f0:ce:b2:e6:4b:09:ba:04:0d:4b:83:46:f4:d7:6e:27:40:89:
         cc:4f:a9:29:d8:25:f2:90:73:f7:e4:7e:ab:87:e0:36:34:06:
         68:c2:e4:06:62:82:82:f0:b6:78:06:7f:c0:e5:b4:d4:2e:ae:
         43:26:60:12:e7:56:64:ba:dc:8b:05:ab:fb:8e:08:05:e0:2e:
         0e:8d:e6:ea:1f:c8:26:72:06:14:20:6f:eb:fb:1d:7e:50:d2:
         4e:d5:0c:bb:22:f3:53:46:5e:47:99:ad:b3:ed:59:b5:48:03:
         75:0a:d8:0b:1a:f3:b9:f0:94:08:90:86:95:1b:2f:cd:14:9e:
         6f:21:24:b8:b9:a6:17:da:81:65:95:20:d2:42:c8:ae:b3:f0:
         f1:e6:e4:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErALR4tCC9grdMRmsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTMzYmVhMGUtY2Q1Mi00OWE4LTljY2EtYTA1Y2MzM2Nl
MDczMB4XDTI1MDgwNTAxNDY1MloXDTI1MTEwMzAyNDY1MlowLzEtMCsGA1UEAxMk
NzczNzAwNWQtZTYzMS00YWY5LTk1YWQtYzVlMWNiYzgyMzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBxNFSjmRHqJKYVSmiq2NL8Un2/agXdKn1Qt
K4OpEthU9ZOF7Np90bZO6RxdBrnyUlTkohfgDiQz8m3w1AN29SkDv1V0Iww/JQx9
s9eVKGuhzfj7zHSYpUIMMTW/L+RcM1CvhizRBwVk3u/qlhBvF6k/Eb8y4FZ2PUeM
vCIqML6HxqweV0mNaJsJkTw/iX/8xskaEyVjZae6/32kWpkTRW6Rw2WVy37DOd9k
BoPnsoVV9gDW8o2YoCRQwl5aXQaDACzIcRwvokYqW3dm2ck4wqSkycPlmHjTcw3F
q5kcuGaKH7y4Gw5/rQMpE5wYRam82Y8S/4BC0ZMEqvU9F+d/3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCnmUE47hEcvcxDcSrmu5dDyh+4tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MzNi
ZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVjYzMzY2UwNzMvYThlNzc4YmEtY2Q1NC0z
MmJjLTlkYzUtNDI4MWZiZDcwYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTMzYmVhMGUtY2Q1Mi00OWE4LTlj
Y2EtYTA1Y2MzM2NlMDczLzUzM2JlYTBlLWNkNTItNDlhOC05Y2NhLWEwNWNjMzNj
ZTA3My5jcmwwHwYDVR0jBBgwFoAUMxi/JZqnskOqqLLCHXyjj+mzZWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81MzNiZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVj
YzMzY2UwNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfn+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADF+yLKt4A21iQEK5O+UMBdSw8CG0ozOPxmJZM/9Gzf5NuuVmJONCGLy
LTHzUbgjiTYgj5Ozjmh79zsP03l2V+lZNoXVMg6cPCrzb7IFuCCF5MkSOcRHUf+z
6HtUVA7hEs7Rp/Im9rscTLy2jvDOsuZLCboEDUuDRvTXbidAicxPqSnYJfKQc/fk
fquH4DY0BmjC5AZigoLwtngGf8DltNQurkMmYBLnVmS63IsFq/uOCAXgLg6N5uof
yCZyBhQgb+v7HX5Q0k7VDLsi81NGXkeZrbPtWbVIA3UK2Asa87nwlAiQhpUbL80U
nm8hJLi5phfagWWVINJCyK6z8PHm5Eg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:42:58 2025 by rpki-client