Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0f30e15-1ff8-38c6-9b43-afc4f9fb0e89.roa
File:                     d0f30e15-1ff8-38c6-9b43-afc4f9fb0e89.roa (raw, json)
Hash identifier:          0FTg7p0iEZ0HbenRy+Fcnb2uUyb0EbyEfo6C++Y6dHc=
Subject key identifier:   C5:90:0C:0E:36:DE:73:07:2C:DA:44:20:16:7A:CE:11:D9:DE:D7:69
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E654FD7A5CF7C55D83E95FC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0f30e15-1ff8-38c6-9b43-afc4f9fb0e89.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        173.245.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:fd:7a:5c:f7:c5:5d:83:e9:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=aefc74a0-affe-468e-9827-bb934220b7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:a2:65:bd:97:cf:84:8b:88:49:0f:f4:50:
                    cc:ab:62:f0:3c:3b:96:39:4d:22:1f:3c:7a:98:86:
                    84:b5:07:8a:c1:94:52:ac:44:ec:a4:67:fc:26:bd:
                    99:b5:80:08:5d:e5:a3:e8:f9:b8:c6:a0:2f:79:35:
                    68:c9:2c:22:8d:aa:ae:1e:6c:84:c8:fa:57:6e:b1:
                    d4:44:03:b0:90:70:a5:77:ac:c8:7c:8e:a8:43:7d:
                    63:98:66:b9:6c:de:82:9c:fb:22:dd:d7:05:94:e9:
                    7f:c2:25:2c:8e:9f:6f:cd:03:19:5b:28:e6:9a:3d:
                    83:b4:0e:7c:55:69:0f:5b:e5:83:ac:cb:75:4b:72:
                    3c:2b:3f:cd:58:ee:7b:65:01:e4:8a:07:70:32:c0:
                    34:c1:03:c2:0e:bb:62:72:af:1e:7c:d0:cf:4e:3a:
                    4f:2f:f4:f4:ea:1e:f2:65:04:3c:59:aa:24:b7:80:
                    01:ef:16:10:64:8a:67:5a:7e:8e:67:e9:22:70:14:
                    38:58:9c:a8:3f:69:7a:41:03:32:95:72:22:c4:23:
                    db:7e:c0:6b:8e:6b:ec:51:51:98:5e:ee:53:74:9e:
                    e0:70:d7:87:e9:b3:3c:f1:64:95:c4:c4:c1:4c:7c:
                    78:c9:f4:d9:b6:53:a0:14:75:1d:6c:b9:d8:4f:cb:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:90:0C:0E:36:DE:73:07:2C:DA:44:20:16:7A:CE:11:D9:DE:D7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0f30e15-1ff8-38c6-9b43-afc4f9fb0e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:8b:71:7b:85:10:87:d3:53:ad:b8:09:be:14:46:ef:bf:aa:
         11:10:89:ab:07:2d:c8:4d:84:09:bc:6d:c2:ff:84:08:59:1e:
         8b:1f:7e:ec:23:4c:36:1b:62:50:2e:31:71:09:bd:93:23:0a:
         92:ec:02:cf:bd:54:fe:43:c7:a5:2c:7c:92:7a:cf:a4:ff:70:
         9b:a6:b4:b0:33:c2:99:fb:fc:43:9c:6f:61:63:54:b5:68:da:
         d8:28:37:d2:0a:77:75:59:08:1b:bb:80:dc:b0:6e:c9:99:11:
         b3:04:25:d3:83:35:87:33:9c:fe:66:51:29:5a:1d:39:cb:b6:
         e5:87:69:4a:e2:15:6a:73:a7:42:97:2c:ef:7c:25:5f:1e:47:
         cc:e1:90:c3:07:e7:e7:04:79:46:e5:f0:4f:77:d4:db:52:6a:
         08:6d:32:26:df:62:0c:00:ba:68:66:ff:ae:27:b6:f0:f9:40:
         11:57:cd:c8:dd:b8:fc:88:b2:25:e4:5f:58:dd:ba:57:29:31:
         ee:7d:99:0a:a9:cd:81:f3:e3:a4:0e:22:01:17:c7:c3:35:72:
         f3:7e:f6:2d:98:96:75:4f:e5:1b:3d:12:3b:7b:73:52:fa:50:
         1c:0e:fb:67:e8:59:67:b5:ef:ca:db:dd:a0:6d:49:3b:20:b1:
         73:4f:35:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVP16XPfFXYPpX8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
YWVmYzc0YTAtYWZmZS00NjhlLTk4MjctYmI5MzQyMjBiN2M0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLOiZb2Xz4SLiEkP9FDMq2LwPDuWOU0iHzx6
mIaEtQeKwZRSrETspGf8Jr2ZtYAIXeWj6Pm4xqAveTVoySwijaquHmyEyPpXbrHU
RAOwkHCld6zIfI6oQ31jmGa5bN6CnPsi3dcFlOl/wiUsjp9vzQMZWyjmmj2DtA58
VWkPW+WDrMt1S3I8Kz/NWO57ZQHkigdwMsA0wQPCDrticq8efNDPTjpPL/T06h7y
ZQQ8Waokt4AB7xYQZIpnWn6OZ+kicBQ4WJyoP2l6QQMylXIixCPbfsBrjmvsUVGY
Xu5TdJ7gcNeH6bM88WSVxMTBTHx4yfTZtlOgFHUdbLnYT8vxZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWQDA423nMHLNpEIBZ6zhHZ3tdpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDBmMzBlMTUtMWZmOC0z
OGM2LTliNDMtYWZjNGY5ZmIwZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfU/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKuLcXuFEIfTU624Cb4URu+/qhEQiasHLchNhAm8bcL/hAhZHosffuwj
TDYbYlAuMXEJvZMjCpLsAs+9VP5Dx6UsfJJ6z6T/cJumtLAzwpn7/EOcb2FjVLVo
2tgoN9IKd3VZCBu7gNywbsmZEbMEJdODNYcznP5mUSlaHTnLtuWHaUriFWpzp0KX
LO98JV8eR8zhkMMH5+cEeUbl8E931NtSaghtMibfYgwAumhm/64ntvD5QBFXzcjd
uPyIsiXkX1jdulcpMe59mQqpzYHz46QOIgEXx8M1cvN+9i2YlnVP5Rs9Ejt7c1L6
UBwO+2foWWe178rb3aBtSTsgsXNPNUw=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:22:16 2025 by rpki-client