Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f07fd6a-8dbe-3216-af1c-51aa557ae6f1.roa
File:                     3f07fd6a-8dbe-3216-af1c-51aa557ae6f1.roa (raw, json)
Hash identifier:          kjb4YFvLaJ86Iu4G4cyEjeHt3IbNdhzWFrENPFekshE=
Subject key identifier:   C6:D2:62:71:91:B1:6D:59:04:57:88:1F:42:B3:EF:F3:8B:B5:AB:B7
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD50670E4130F2123B0D86DC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f07fd6a-8dbe-3216-af1c-51aa557ae6f1.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:70:e4:13:0f:21:23:b0:d8:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=1407b84a-dd36-46e3-b3de-c0644533a7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:92:ca:57:d5:e2:bc:8f:fb:b6:73:0a:75:
                    c4:52:86:37:43:96:c4:c2:33:5f:60:d8:4f:ed:a8:
                    6f:83:ad:5d:6b:12:fd:39:cb:12:c6:14:2c:99:97:
                    03:30:71:09:dd:39:a2:4d:b7:b4:11:91:d4:a0:50:
                    74:51:ef:b7:ec:42:10:6e:e1:03:7b:0b:0f:cd:c1:
                    f7:0f:dd:27:92:f5:cf:4c:d9:8a:aa:2d:c0:9e:b0:
                    0d:d0:0d:d9:0f:97:03:eb:7e:60:8d:64:a1:de:e7:
                    15:db:fa:40:93:cb:41:8a:f6:b9:e1:2a:54:ca:ad:
                    23:82:5a:e6:e8:8a:a7:7a:94:02:6b:d8:7c:5e:23:
                    71:65:bc:aa:80:65:19:55:40:fc:e5:6d:33:34:87:
                    9d:47:89:5c:02:1b:b7:73:1b:73:4c:78:a0:8f:01:
                    66:cf:1d:81:d5:9a:7d:a0:45:dd:98:9a:3c:56:e9:
                    24:fb:46:e0:eb:57:9e:8d:f8:a3:85:7a:f0:5c:41:
                    cc:84:a6:2f:a1:8b:c4:50:eb:dd:73:7a:e3:7c:45:
                    22:f1:ec:98:d9:98:70:25:7e:87:5e:86:ee:01:e2:
                    ea:57:f8:e6:8e:2b:1b:4a:25:cb:4a:ce:6e:75:dd:
                    29:7d:c2:de:e0:fe:0f:a8:b4:5e:de:41:2e:c8:8c:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D2:62:71:91:B1:6D:59:04:57:88:1F:42:B3:EF:F3:8B:B5:AB:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f07fd6a-8dbe-3216-af1c-51aa557ae6f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:5a:57:52:f5:12:fb:91:0b:c6:32:98:cc:79:43:44:f6:21:
         6e:b2:13:54:e9:ab:8e:3c:92:fe:72:08:aa:37:dc:55:c4:4e:
         71:ae:ff:43:55:50:ff:fb:60:bb:5a:0a:0b:fd:0d:2a:e5:f5:
         1a:55:dd:91:d4:07:9e:b0:36:dd:a2:22:1f:89:9c:ae:e1:a5:
         0f:06:66:66:df:0a:73:4e:c6:f4:29:96:5d:a8:c2:85:93:3b:
         85:83:89:a6:ec:0d:9d:6c:7a:df:3d:95:d8:15:89:32:fb:54:
         d9:14:72:58:ad:78:3b:10:51:45:ae:7a:48:56:ea:d3:01:dc:
         fe:0a:93:3b:95:d3:49:3f:45:dd:db:14:0c:40:89:b9:40:47:
         9b:6c:1b:6d:df:19:09:f2:51:50:60:f6:e9:7a:2e:ed:5b:71:
         c6:48:6a:69:3f:9a:eb:b7:ef:19:3c:a2:73:20:6b:f1:1e:15:
         88:22:d2:db:94:30:bc:9e:5d:d6:f9:50:54:bc:c3:1f:d7:e6:
         ee:43:45:ce:d9:c4:73:a9:55:75:cb:a7:03:21:18:1a:ea:88:
         5f:ed:75:c8:f9:a0:50:70:08:22:0e:c9:32:21:80:58:fc:a8:
         a2:97:ba:56:f2:6b:0e:e9:c9:c3:37:87:fb:35:89:c0:b8:6b:
         7f:f6:72:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBnDkEw8hI7DYbcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk
MTQwN2I4NGEtZGQzNi00NmUzLWIzZGUtYzA2NDQ1MzNhN2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiCSylfV4ryP+7ZzCnXEUoY3Q5bEwjNfYNhP
7ahvg61daxL9OcsSxhQsmZcDMHEJ3TmiTbe0EZHUoFB0Ue+37EIQbuEDewsPzcH3
D90nkvXPTNmKqi3AnrAN0A3ZD5cD635gjWSh3ucV2/pAk8tBiva54SpUyq0jglrm
6IqnepQCa9h8XiNxZbyqgGUZVUD85W0zNIedR4lcAhu3cxtzTHigjwFmzx2B1Zp9
oEXdmJo8Vukk+0bg61eejfijhXrwXEHMhKYvoYvEUOvdc3rjfEUi8eyY2ZhwJX6H
XobuAeLqV/jmjisbSiXLSs5udd0pfcLe4P4PqLRe3kEuyIzA/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMbSYnGRsW1ZBFeIH0Kz7/OLtau3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2YwN2ZkNmEtOGRiZS0z
MjE2LWFmMWMtNTFhYTU1N2FlNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlaV1L1EvuRC8YymMx5Q0T2IW6yE1Tpq448kv5yCKo33FXETnGu/0NV
UP/7YLtaCgv9DSrl9RpV3ZHUB56wNt2iIh+JnK7hpQ8GZmbfCnNOxvQpll2owoWT
O4WDiabsDZ1set89ldgViTL7VNkUcliteDsQUUWuekhW6tMB3P4KkzuV00k/Rd3b
FAxAiblAR5tsG23fGQnyUVBg9ul6Lu1bccZIamk/muu37xk8onMga/EeFYgi0tuU
MLyeXdb5UFS8wx/X5u5DRc7ZxHOpVXXLpwMhGBrqiF/tdcj5oFBwCCIOyTIhgFj8
qKKXulbyaw7pycM3h/s1icC4a3/2cpo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:58:15 2025 by rpki-client