Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/4107572f-7f73-39cf-a83b-21e385062b8e.roa
File:                     4107572f-7f73-39cf-a83b-21e385062b8e.roa (raw, json)
Hash identifier:          kOIgeHUVI+dOhL94EzQ741d39SYhmN52kxpB5akV0Ks=
Subject key identifier:   55:01:85:8B:D5:61:3C:27:B4:08:33:C2:33:AD:5F:82:AF:9D:2E:4A
Certificate issuer:       /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
Certificate serial:       010D0C9F43285849FB4529E9205570C3AA5C2580
Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/4107572f-7f73-39cf-a83b-21e385062b8e.roa
Signing time:             Mon 26 May 2025 13:01:03 +0000
ROA not before:           Mon 26 May 2025 13:01:03 +0000
ROA not after:            Sun 24 Aug 2025 13:01:03 +0000
asID:                     6939
IP address blocks:        173.249.230.0/24 maxlen: 32
                          173.249.235.0/24 maxlen: 32
                          173.249.240.0/24 maxlen: 32
                          173.249.245.0/24 maxlen: 32
                          173.249.250.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:45:29:e9:20:55:70:c3:aa:5c:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
        Validity
            Not Before: May 26 13:01:03 2025 GMT
            Not After : Aug 24 13:01:03 2025 GMT
        Subject: CN=78adcede-3898-4138-a070-4c7e6f285c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:17:b3:53:3a:4d:c3:ac:56:c6:ab:a0:3a:
                    1f:2a:c0:c6:21:27:81:d8:52:f4:3c:7f:8b:8a:49:
                    90:a8:dc:99:38:5f:da:57:d9:80:b3:4d:c5:8b:24:
                    01:99:6f:31:9d:3d:fc:ac:e2:bb:03:35:94:d8:bb:
                    cf:5a:40:af:7d:b4:79:3e:5e:de:84:d3:8a:a0:34:
                    26:6f:9f:4d:ed:54:5a:04:c2:9d:ed:ca:ab:e6:7b:
                    c6:e5:b6:27:93:0f:03:ee:75:1f:bf:6f:a5:e0:1d:
                    c5:9f:4f:46:d5:5b:d2:1c:45:1f:45:6f:f7:14:58:
                    20:64:c2:63:2e:be:18:bc:69:f5:16:85:6f:0e:19:
                    a8:83:8d:d6:59:71:55:02:18:e1:9c:bf:b1:eb:78:
                    60:66:e9:e7:b7:8f:1c:63:36:b8:8f:3f:40:5f:39:
                    f3:72:87:53:45:51:d7:31:1c:f0:70:8f:d7:90:ed:
                    c0:c7:76:fe:53:f0:be:d6:cc:75:39:bd:f2:ad:c0:
                    d6:f8:2d:09:9d:14:d7:1c:d1:7c:92:b9:f4:83:2b:
                    2f:f9:a0:a4:bd:3c:fd:fb:75:cd:4e:39:c6:36:d8:
                    33:e9:87:1c:10:a8:c5:98:9a:53:14:80:a8:2b:08:
                    0e:7a:e5:03:59:36:8a:99:cd:bb:41:50:64:20:e4:
                    46:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:01:85:8B:D5:61:3C:27:B4:08:33:C2:33:AD:5F:82:AF:9D:2E:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/4107572f-7f73-39cf-a83b-21e385062b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl

            X509v3 Authority Key Identifier:
                keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.230.0/24
                  173.249.235.0/24
                  173.249.240.0/24
                  173.249.245.0/24
                  173.249.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d5:54:f2:b8:ea:a9:8d:3f:00:a9:0c:d3:1e:fa:a4:fe:d2:
         7b:15:18:26:e3:f5:21:ff:76:d2:89:13:dd:2a:03:fd:09:c9:
         15:b2:ce:f5:33:8b:34:5d:e2:5e:bb:01:8b:05:92:b0:ae:4b:
         1f:d9:be:7b:7f:f8:a8:a7:1e:12:cd:e1:ed:69:9b:f8:7e:fe:
         39:a7:0d:5a:6b:7f:38:b9:be:49:30:c5:7a:7e:72:a3:00:c7:
         ea:98:a0:26:a4:5f:d6:9c:4d:e4:cf:1a:17:9d:d5:fa:d4:84:
         65:1a:77:4e:64:cf:45:20:a9:76:fa:ed:4e:4e:76:7d:2f:0c:
         79:f8:74:a2:76:6b:20:7e:b3:26:0d:35:10:aa:c0:9b:d3:95:
         44:a2:20:1b:38:d7:be:79:12:42:e9:1e:c4:7d:f6:f2:2b:9f:
         a2:3d:06:35:e3:0c:4a:59:6f:fe:e3:af:bf:27:9d:1b:8a:26:
         b2:83:6c:16:52:29:24:68:96:5c:d8:99:b0:cd:3d:6f:91:73:
         2b:4b:ae:dd:16:d1:e8:cb:ae:25:c7:ff:a5:0d:1c:82:0e:e6:
         3c:47:2a:e6:24:2c:e0:35:fe:47:c7:a7:81:eb:76:dd:d9:4b:
         25:41:60:98:38:54:dd:64:99:81:aa:1e:6c:85:11:f3:5b:5a:
         cc:23:d1:63
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEn7RSnpIFVww6pcJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTMzYmVhMGUtY2Q1Mi00OWE4LTljY2EtYTA1Y2MzM2Nl
MDczMB4XDTI1MDUyNjEzMDEwM1oXDTI1MDgyNDEzMDEwM1owLzEtMCsGA1UEAxMk
NzhhZGNlZGUtMzg5OC00MTM4LWEwNzAtNGM3ZTZmMjg1YzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOMXs1M6TcOsVsaroDofKsDGISeB2FL0PH+L
ikmQqNyZOF/aV9mAs03FiyQBmW8xnT38rOK7AzWU2LvPWkCvfbR5Pl7ehNOKoDQm
b59N7VRaBMKd7cqr5nvG5bYnkw8D7nUfv2+l4B3Fn09G1VvSHEUfRW/3FFggZMJj
Lr4YvGn1FoVvDhmog43WWXFVAhjhnL+x63hgZunnt48cYza4jz9AXznzcodTRVHX
MRzwcI/XkO3Ax3b+U/C+1sx1Ob3yrcDW+C0JnRTXHNF8krn0gysv+aCkvTz9+3XN
TjnGNtgz6YccEKjFmJpTFICoKwgOeuUDWTaKmc27QVBkIORGiQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFFUBhYvVYTwntAgzwjOtX4KvnS5KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MzNi
ZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVjYzMzY2UwNzMvNDEwNzU3MmYtN2Y3My0z
OWNmLWE4M2ItMjFlMzg1MDYyYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTMzYmVhMGUtY2Q1Mi00OWE4LTlj
Y2EtYTA1Y2MzM2NlMDczLzUzM2JlYTBlLWNkNTItNDlhOC05Y2NhLWEwNWNjMzNj
ZTA3My5jcmwwHwYDVR0jBBgwFoAUMxi/JZqnskOqqLLCHXyjj+mzZWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81MzNiZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVj
YzMzY2UwNzMuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQArfnmAwQA
rfnrAwQArfnwAwQArfn1AwQArfn6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEPVVPK46qmNPwCpDNMe+qT+
0nsVGCbj9SH/dtKJE90qA/0JyRWyzvUzizRd4l67AYsFkrCuSx/Zvnt/+KinHhLN
4e1pm/h+/jmnDVprfzi5vkkwxXp+cqMAx+qYoCakX9acTeTPGhed1frUhGUad05k
z0UgqXb67U5Odn0vDHn4dKJ2ayB+syYNNRCqwJvTlUSiIBs41755EkLpHsR99vIr
n6I9BjXjDEpZb/7jr78nnRuKJrKDbBZSKSRollzYmbDNPW+RcytLrt0W0ejLriXH
/6UNHIIO5jxHKuYkLOA1/kfHp4Hrdt3ZSyVBYJg4VN1kmYGqHmyFEfNbWswj0WM=
-----END CERTIFICATE-----
Generated at Wed Jun 4 23:18:58 2025 by rpki-client