Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/833caff5-026e-36d2-a677-3eee63b7b415.roa
File:                     833caff5-026e-36d2-a677-3eee63b7b415.roa (raw, json)
Hash identifier:          XednnqxLkSWpLTEqGak8Kzar3FrgrKG1jUF0is/vHI4=
Subject key identifier:   D5:42:61:D9:7F:43:9B:34:1E:AE:FE:9F:C2:D1:F9:11:41:A2:9D:6C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A84123A76C5F13BB6D0C5ECC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/833caff5-026e-36d2-a677-3eee63b7b415.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        173.194.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:3a:76:c5:f1:3b:b6:d0:c5:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8ccd794a-e78a-466f-bd91-6a7bc82de4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:11:e2:dc:07:86:06:c3:f7:30:e6:bf:a7:
                    d7:c3:0c:d8:4d:2c:b0:79:09:14:56:67:cc:ab:c9:
                    12:b6:51:43:fd:ac:9c:23:f7:fb:1a:bc:14:ed:82:
                    bb:32:6e:cd:68:a3:c4:92:d0:43:4d:de:8f:9e:75:
                    3e:b1:38:31:a9:f9:8d:05:6b:c3:2f:c7:31:37:79:
                    86:da:87:59:08:0c:c9:52:a2:dc:75:a8:fb:ac:73:
                    6d:df:36:81:15:30:a4:c1:b3:66:78:8c:c0:73:c8:
                    31:a1:e9:1b:81:d9:5c:8a:51:73:11:fa:40:31:0b:
                    7d:c7:5d:71:be:43:a0:f2:27:26:e4:65:d4:d8:88:
                    d9:29:5b:7c:cf:c2:81:fd:90:20:ba:0a:8b:2f:19:
                    ce:a2:0e:f3:3e:a6:e8:14:df:27:a7:b1:9e:13:39:
                    bb:b5:a2:e2:3a:71:37:09:46:38:3a:9d:79:57:61:
                    e6:87:de:5f:c1:1b:0d:4f:7a:c7:73:70:45:ae:49:
                    76:89:ed:92:f2:71:50:73:2f:92:c6:5b:68:30:d7:
                    d2:78:ca:fa:b1:a7:d4:e1:ff:f9:99:36:aa:18:10:
                    86:1c:3a:f3:5c:d8:62:9f:6f:d1:ff:9e:f2:f3:78:
                    d0:91:01:45:1d:b1:2b:be:a7:77:c5:3b:e5:2c:08:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:42:61:D9:7F:43:9B:34:1E:AE:FE:9F:C2:D1:F9:11:41:A2:9D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/833caff5-026e-36d2-a677-3eee63b7b415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:69:a5:fa:a4:98:3e:99:b2:45:a8:9d:49:73:22:53:fb:48:
         82:d3:e0:28:01:83:d9:6b:b6:d4:e3:71:cd:05:e2:52:af:4c:
         9a:46:fb:1a:0a:50:e0:6f:18:12:8b:55:51:70:77:29:72:b3:
         7b:87:c7:ef:97:35:9e:24:d4:47:e0:5c:94:90:32:d9:b7:e7:
         4c:39:4b:b2:c4:de:4d:52:19:fe:97:3e:c2:4c:b5:20:fe:4d:
         19:dc:20:8a:50:e1:c4:2e:b2:6c:0c:6e:80:8b:ba:d3:e0:82:
         ef:7d:66:36:04:5a:97:52:f8:64:5a:0c:ee:1c:68:ae:e2:a6:
         ba:b4:d1:1a:12:17:5e:8c:47:2d:52:fe:30:3c:8e:04:56:2d:
         fa:b3:17:ba:cc:cb:1d:0c:9d:31:d5:f9:69:47:37:27:16:30:
         16:3e:44:24:01:26:7c:cb:83:f8:5c:df:dc:95:c4:b8:25:d5:
         d2:ef:58:ea:75:d7:3f:a5:17:60:6a:8b:61:ed:35:3a:ea:24:
         a1:63:27:57:df:74:50:57:f1:f6:a9:01:1b:92:9e:fe:8b:f7:
         f3:b8:82:21:d7:c4:b0:0e:6b:f4:59:5e:1f:ba:c2:5e:68:b8:
         43:13:7a:14:d6:58:39:9d:3c:b7:62:2b:b4:04:9c:0d:9e:6e:
         bd:16:a7:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjp2xfE7ttDF7MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
OGNjZDc5NGEtZTc4YS00NjZmLWJkOTEtNmE3YmM4MmRlNGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsakR4twHhgbD9zDmv6fXwwzYTSyweQkUVmfM
q8kStlFD/aycI/f7GrwU7YK7Mm7NaKPEktBDTd6PnnU+sTgxqfmNBWvDL8cxN3mG
2odZCAzJUqLcdaj7rHNt3zaBFTCkwbNmeIzAc8gxoekbgdlcilFzEfpAMQt9x11x
vkOg8icm5GXU2IjZKVt8z8KB/ZAgugqLLxnOog7zPqboFN8np7GeEzm7taLiOnE3
CUY4Op15V2Hmh95fwRsNT3rHc3BFrkl2ie2S8nFQcy+SxltoMNfSeMr6safU4f/5
mTaqGBCGHDrzXNhin2/R/57y83jQkQFFHbErvqd3xTvlLAiqMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVCYdl/Q5s0Hq7+n8LR+RFBop1sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODMzY2FmZjUtMDI2ZS0z
NmQyLWE2NzctM2VlZTYzYjdiNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJppfqkmD6ZskWonUlzIlP7SILT4CgBg9lrttTjcc0F4lKvTJpG+xoK
UOBvGBKLVVFwdylys3uHx++XNZ4k1EfgXJSQMtm350w5S7LE3k1SGf6XPsJMtSD+
TRncIIpQ4cQusmwMboCLutPggu99ZjYEWpdS+GRaDO4caK7iprq00RoSF16MRy1S
/jA8jgRWLfqzF7rMyx0MnTHV+WlHNycWMBY+RCQBJnzLg/hc39yVxLgl1dLvWOp1
1z+lF2Bqi2HtNTrqJKFjJ1ffdFBX8fapARuSnv6L9/O4giHXxLAOa/RZXh+6wl5o
uEMTehTWWDmdPLdiK7QEnA2ebr0Wp5E=
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:56:51 2025 by rpki-client