Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa
File:                     99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa (raw, json)
Hash identifier:          /xc1ElJEJR/5KW0PHOZieIKilBztjEHzz9UkP9GL+jU=
Subject key identifier:   F5:9A:A1:13:72:60:92:2D:D4:F7:3A:61:17:15:6E:4B:79:D8:E2:ED
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F4328584A46A5AFED4E4F42D36B1BBC80
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     23675
IP address blocks:        208.70.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:af:ed:4e:4f:42:d3:6b:1b:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=9231b282-33cd-4ff8-8346-f6c47714b69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:d5:06:90:bc:90:33:2b:68:a3:50:c2:4d:
                    d1:70:79:1d:e1:2c:33:15:71:b5:e5:61:61:ce:73:
                    75:90:6c:06:48:9c:c6:a9:21:b5:03:63:a0:8e:88:
                    6d:c2:b3:90:95:4c:44:eb:f7:a5:78:a1:59:9c:69:
                    8e:fa:ea:a1:86:58:b4:cd:da:84:2e:cc:a9:5c:dd:
                    06:b4:ad:fa:f0:d4:4d:6c:f2:5e:9f:22:be:ed:01:
                    14:e3:74:08:f8:5d:aa:52:5c:f9:2b:44:2c:47:80:
                    38:f5:2c:37:5c:ce:90:32:6a:58:b7:34:d0:8d:54:
                    ab:a8:fb:1a:da:99:45:49:49:51:34:d3:a6:4d:f9:
                    89:65:24:d7:c4:7b:4f:f5:bd:b5:73:cc:17:49:e0:
                    3a:ab:81:fc:ed:f9:de:80:e9:66:ba:f7:58:ad:d4:
                    d6:1d:97:4a:37:75:8e:64:95:f6:22:db:ac:a6:68:
                    6d:c1:20:e5:64:60:6d:91:f4:a9:62:84:61:10:b5:
                    0c:04:b2:9c:40:ac:81:8d:a2:b0:9a:7c:ef:db:e6:
                    d6:0c:00:64:2f:9b:61:63:53:cd:d0:4a:2f:d8:24:
                    7a:46:29:d3:1f:72:4b:d7:e3:2d:5d:89:96:a4:e7:
                    0d:22:6c:a8:af:99:a9:0a:de:83:07:b8:b8:7a:1a:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9A:A1:13:72:60:92:2D:D4:F7:3A:61:17:15:6E:4B:79:D8:E2:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/99e0a2b2-bb67-37ba-837a-b54f0ac68617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ca:42:f1:6d:8f:b7:86:e6:6b:9a:be:4e:32:02:3d:f6:1c:
         ab:74:d7:be:86:d3:48:1f:96:5e:78:3a:51:a0:c8:ce:81:47:
         44:22:c3:55:9a:78:92:ea:61:1a:bd:ae:ca:06:a8:57:6c:37:
         bf:29:7b:37:e5:49:d7:e9:9b:10:70:bb:1b:43:13:c7:12:1e:
         73:ce:27:39:8b:5b:49:8a:3a:c7:c6:3f:58:00:df:5a:5e:59:
         8f:7e:eb:d8:96:e7:45:09:7c:7c:21:56:37:75:d7:4c:b7:89:
         82:ce:60:ad:88:b1:2f:ff:e0:77:1a:67:bd:77:47:a3:d9:2a:
         eb:4a:16:68:3f:e5:92:32:7b:4f:5c:fb:b4:32:4b:b5:01:c7:
         1e:23:01:7a:0b:c9:f8:b2:be:52:c0:4e:74:b2:39:c7:00:00:
         30:0b:71:bb:67:ad:bc:7d:e2:69:f6:49:97:54:b9:05:b0:c9:
         3b:78:87:41:22:2f:94:3b:52:06:d0:4c:74:ce:e4:d1:74:4e:
         79:62:02:6b:74:27:32:96:39:41:3a:c7:fb:0d:d1:65:ce:dc:
         eb:11:b1:96:77:72:a0:54:7c:94:72:d1:81:a4:21:25:91:06:
         98:ae:ea:d0:fe:62:9a:1d:12:24:ac:17:7f:04:87:58:b3:a4:
         21:44:34:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGpa/tTk9C02sbvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNi
ZmQ2MB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk
OTIzMWIyODItMzNjZC00ZmY4LTgzNDYtZjZjNDc3MTRiNjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubnVBpC8kDMraKNQwk3RcHkd4SwzFXG15WFh
znN1kGwGSJzGqSG1A2OgjohtwrOQlUxE6/eleKFZnGmO+uqhhli0zdqELsypXN0G
tK368NRNbPJenyK+7QEU43QI+F2qUlz5K0QsR4A49Sw3XM6QMmpYtzTQjVSrqPsa
2plFSUlRNNOmTfmJZSTXxHtP9b21c8wXSeA6q4H87fnegOlmuvdYrdTWHZdKN3WO
ZJX2ItuspmhtwSDlZGBtkfSpYoRhELUMBLKcQKyBjaKwmnzv2+bWDABkL5thY1PN
0Eov2CR6RinTH3JL1+MtXYmWpOcNImyor5mpCt6DB7i4ehrNAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPWaoRNyYJIt1Pc6YRcVbkt52OLtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0
YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvOTllMGEyYjItYmI2Ny0z
N2JhLTgzN2EtYjU0ZjBhYzY4NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzdjNGM2MmEtM2Y2ZC00YzFjLThi
ZGItMzcwNjI0NmNiZmQ2Lzc3YzRjNjJhLTNmNmQtNGMxYy04YmRiLTM3MDYyNDZj
YmZkNi5jcmwwHwYDVR0jBBgwFoAU4p3oDYbgi/0iz/5leJQg8L1y3xMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2
MjQ2Y2JmZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLKQvFtj7eG5muavk4yAj32HKt0176G00gfll54OlGgyM6BR0Qiw1Wa
eJLqYRq9rsoGqFdsN78pezflSdfpmxBwuxtDE8cSHnPOJzmLW0mKOsfGP1gA31pe
WY9+69iW50UJfHwhVjd110y3iYLOYK2IsS//4HcaZ713R6PZKutKFmg/5ZIye09c
+7QyS7UBxx4jAXoLyfiyvlLATnSyOccAADALcbtnrbx94mn2SZdUuQWwyTt4h0Ei
L5Q7UgbQTHTO5NF0TnliAmt0JzKWOUE6x/sN0WXO3OsRsZZ3cqBUfJRy0YGkISWR
Bpiu6tD+YpodEiSsF38Eh1izpCFENAc=
-----END CERTIFICATE-----
Generated at Mon Jun 30 11:43:40 2025 by rpki-client