Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/a8db61fd-a1ef-3285-86cf-acdcd2c906c0.roa
File:                     a8db61fd-a1ef-3285-86cf-acdcd2c906c0.roa (raw, json)
Hash identifier:          GcYz/BOTCcsQm+KRk91sdFb/Gm7xCtqRg5QMiaKi3UE=
Subject key identifier:   09:54:2F:AE:67:78:68:7A:70:C4:D7:19:C8:32:77:0B:E1:FA:63:05
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584A7D15F4964BE7CFC35D249D00
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/a8db61fd-a1ef-3285-86cf-acdcd2c906c0.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     20249
IP address blocks:        169.196.72.0/23 maxlen: 23
                          169.196.72.0/24 maxlen: 24
                          169.196.73.0/24 maxlen: 24
                          169.196.76.0/22 maxlen: 22
                          169.196.76.0/24 maxlen: 24
                          169.196.77.0/24 maxlen: 24
                          169.196.78.0/24 maxlen: 24
                          169.196.79.0/24 maxlen: 24
                          169.196.116.0/24 maxlen: 24
                          169.196.156.0/24 maxlen: 24
                          169.196.198.0/23 maxlen: 23
                          169.196.198.0/24 maxlen: 24
                          169.196.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f4:96:4b:e7:cf:c3:5d:24:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=de9e5a1c-daa4-400a-ac57-aedf205b6d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:b7:99:61:3d:bb:4d:cf:1b:ae:e6:44:cd:
                    06:0f:d6:f6:03:80:a9:f7:3d:82:4f:9d:da:39:fe:
                    2c:d0:de:40:77:26:2d:4c:b5:5b:98:87:47:62:2e:
                    b6:a8:ac:2f:82:72:be:a7:0e:e6:a6:ab:a7:8f:26:
                    21:42:ae:84:4a:46:09:72:61:71:6c:99:5b:88:6a:
                    25:36:5f:6b:91:ad:4c:44:4e:54:6c:41:ed:fa:c6:
                    5c:3e:c2:bb:78:23:c1:fe:07:cb:6c:cf:77:f1:da:
                    70:ce:21:e3:a4:23:a4:30:82:7b:31:6c:20:6e:1b:
                    59:a2:84:ab:bb:c7:15:2a:3a:7d:0e:bf:39:8e:59:
                    63:5e:eb:3f:ef:a2:70:7d:a4:36:af:83:dd:35:c0:
                    b9:a1:77:30:6a:0c:f8:6b:91:22:ba:02:05:db:b8:
                    30:dd:05:20:d9:b5:50:cc:bd:60:f5:e0:29:25:44:
                    86:01:ac:5b:fb:db:5b:34:48:5f:aa:5d:7b:96:52:
                    52:34:7c:bd:58:08:23:84:d3:44:f6:92:c9:92:80:
                    31:5a:17:ab:6c:12:a3:57:18:7f:d5:ac:f8:4c:39:
                    08:95:73:51:7e:15:77:46:12:07:19:c7:9e:a9:5d:
                    f1:c0:28:cb:58:b1:2c:55:c4:3c:f3:d9:4e:ed:7a:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:54:2F:AE:67:78:68:7A:70:C4:D7:19:C8:32:77:0B:E1:FA:63:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/a8db61fd-a1ef-3285-86cf-acdcd2c906c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.72.0/23
                  169.196.76.0/22
                  169.196.116.0/24
                  169.196.156.0/24
                  169.196.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d2:44:9e:48:59:30:21:c3:d9:0a:18:af:e3:ac:64:f5:ea:
         3b:3b:af:26:c5:bc:2a:d0:5d:9d:15:2f:5d:1c:25:5c:a7:c2:
         13:5f:59:7f:f7:91:c4:f2:b0:2d:6b:3e:7b:36:13:ef:06:23:
         d6:69:c1:65:94:2e:3f:2d:4c:60:37:2e:fe:9d:4a:b1:27:61:
         82:b1:aa:d6:fc:a5:ad:24:6d:15:2e:a5:8f:2b:6b:26:54:d8:
         d8:97:3d:5e:e7:a8:96:fb:78:83:26:82:90:c1:c2:83:a5:60:
         eb:4f:29:7d:73:2c:1f:3e:29:f4:23:2d:99:66:06:71:c9:97:
         d4:5e:50:f7:7b:36:12:c4:fb:27:ef:4e:79:eb:e2:93:be:32:
         bc:eb:08:b9:24:95:af:5e:3f:74:c3:37:3a:4f:a7:cc:bd:d7:
         44:d9:a9:bc:ad:d0:16:ff:53:31:5c:c8:09:9f:73:b6:e7:39:
         45:04:25:76:0e:a1:13:42:ff:53:ca:f0:48:2e:fd:a9:3b:47:
         5e:fe:0a:6b:cf:f4:0a:30:21:31:44:71:1e:99:71:c8:be:86:
         d6:9a:4e:c1:bb:62:ec:80:14:c0:75:03:75:3d:97:c4:eb:64:
         f5:88:16:5c:99:6e:80:21:ff:3a:50:88:de:27:5a:43:c8:7a:
         65:9e:b0:75
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEp9FfSWS+fPw10knQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTczZWUxYmItYmI2Yi00Y2M2LWJjYTEtNGMxNjIyZGM0
ZWRiMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk
ZGU5ZTVhMWMtZGFhNC00MDBhLWFjNTctYWVkZjIwNWI2ZDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSq3mWE9u03PG67mRM0GD9b2A4Cp9z2CT53a
Of4s0N5AdyYtTLVbmIdHYi62qKwvgnK+pw7mpqunjyYhQq6ESkYJcmFxbJlbiGol
Nl9rka1MRE5UbEHt+sZcPsK7eCPB/gfLbM938dpwziHjpCOkMIJ7MWwgbhtZooSr
u8cVKjp9Dr85jlljXus/76JwfaQ2r4PdNcC5oXcwagz4a5EiugIF27gw3QUg2bVQ
zL1g9eApJUSGAaxb+9tbNEhfql17llJSNHy9WAgjhNNE9pLJkoAxWherbBKjVxh/
1az4TDkIlXNRfhV3RhIHGceeqV3xwCjLWLEsVcQ889lO7XqGqwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFAlUL65neGh6cMTXGcgydwvh+mMFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NzNl
ZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2MjJkYzRlZGIvYThkYjYxZmQtYTFlZi0z
Mjg1LTg2Y2YtYWNkY2QyYzkwNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTczZWUxYmItYmI2Yi00Y2M2LWJj
YTEtNGMxNjIyZGM0ZWRiLzU3M2VlMWJiLWJiNmItNGNjNi1iY2ExLTRjMTYyMmRj
NGVkYi5jcmwwHwYDVR0jBBgwFoAU5bcwnII1o67jk7VvPhVOUUksQ+AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzNlZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2
MjJkYzRlZGIuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBqcRIAwQC
qcRMAwQAqcR0AwQAqcScAwQBqcTGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIHSRJ5IWTAhw9kKGK/jrGT1
6js7rybFvCrQXZ0VL10cJVynwhNfWX/3kcTysC1rPns2E+8GI9ZpwWWULj8tTGA3
Lv6dSrEnYYKxqtb8pa0kbRUupY8rayZU2NiXPV7nqJb7eIMmgpDBwoOlYOtPKX1z
LB8+KfQjLZlmBnHJl9ReUPd7NhLE+yfvTnnr4pO+MrzrCLkkla9eP3TDNzpPp8y9
10TZqbyt0Bb/UzFcyAmfc7bnOUUEJXYOoRNC/1PK8Egu/ak7R17+CmvP9AowITFE
cR6Zcci+htaaTsG7YuyAFMB1A3U9l8TrZPWIFlyZboAh/zpQiN4nWkPIemWesHU=
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:13:41 2025 by rpki-client