Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/56abc555-2d6c-3d1b-beb6-5ca968ada2bb.roa
File:                     56abc555-2d6c-3d1b-beb6-5ca968ada2bb.roa (raw, json)
Hash identifier:          BbZDRQxC8s8c2W6BVa93G8+bnkw5rcl9QS8NBYnr95o=
Subject key identifier:   4F:D0:3C:1A:4F:5F:CC:17:AF:B9:45:12:12:34:8A:8F:B7:F0:88:ED
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD5066A1DE5F8E266828E9B00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/56abc555-2d6c-3d1b-beb6-5ca968ada2bb.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:6a:1d:e5:f8:e2:66:82:8e:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=7cb888a2-8b3f-4aad-809d-978d22be8f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:1d:81:36:77:75:3f:6a:5e:ba:b4:12:fd:
                    79:9e:a7:0c:77:11:05:fe:ef:a3:66:44:7a:a6:39:
                    5a:fc:96:49:ea:b4:d5:53:8e:c9:73:9b:a2:a9:a6:
                    17:6a:05:fb:47:99:57:1b:be:fb:ce:12:97:d5:6e:
                    5f:97:0d:ac:fd:7f:e1:33:92:93:8b:73:32:13:75:
                    ef:17:80:73:a7:f8:ee:24:76:b3:30:e0:aa:4c:56:
                    3b:39:18:ea:59:58:ec:5a:81:2f:24:3e:b5:02:16:
                    07:25:20:14:7a:b0:9f:0d:3c:1a:29:46:0d:34:e5:
                    4f:3c:35:97:44:74:e0:af:59:10:55:1c:16:35:ec:
                    6e:29:c2:09:bd:cc:2e:d5:87:18:57:ec:ed:0c:73:
                    74:8b:f2:da:bd:8a:da:24:be:20:63:63:88:bd:5d:
                    f3:39:b5:91:2f:4f:98:71:ce:f5:8f:45:d7:dc:50:
                    75:a8:09:e0:a4:ce:72:4d:80:1f:19:d6:b6:cf:94:
                    29:66:0d:3c:75:79:91:c7:77:b9:3d:7f:db:a8:1c:
                    1f:0c:8c:2b:03:a0:e4:9b:0e:c9:d5:47:1f:f1:d6:
                    60:aa:22:ab:0f:26:17:f6:af:57:02:a0:bd:8f:86:
                    4b:f5:c5:51:df:d2:90:ba:bb:fb:0a:5f:63:ec:85:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D0:3C:1A:4F:5F:CC:17:AF:B9:45:12:12:34:8A:8F:B7:F0:88:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/56abc555-2d6c-3d1b-beb6-5ca968ada2bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:af:21:5e:b3:66:c0:f2:9a:cc:43:07:b7:34:1a:ed:f8:c7:
         3c:8f:76:c6:2f:60:17:09:81:a9:0f:a7:6a:9e:53:b5:71:90:
         18:83:cc:e0:c1:eb:e3:d3:7e:a7:af:47:23:9b:60:d5:15:ea:
         fa:36:1d:03:b5:a4:e8:b6:e9:4f:ce:8f:3b:a9:fa:f9:24:3e:
         3e:5b:49:dd:80:1f:e9:2e:5a:eb:8c:52:8d:18:b3:58:ac:5c:
         92:fa:47:78:3b:31:fc:79:30:7f:19:5c:b1:49:a9:5b:c9:1b:
         11:4d:1c:0b:c3:b6:0e:38:cd:88:99:91:6b:55:e1:b8:d2:1f:
         20:6a:a2:97:ed:9c:fd:96:88:1d:f2:a5:b4:23:c2:82:22:37:
         4c:b0:35:24:d9:4d:c1:69:15:29:f7:b3:8a:18:84:ad:f1:48:
         ce:7e:79:23:1c:ea:e3:a4:d9:e0:68:ef:fa:86:ea:b9:3f:9d:
         48:06:af:4b:7d:11:2f:9b:4e:29:36:56:f8:7c:f5:44:c5:a1:
         97:6e:3c:ea:6c:d0:a5:22:a8:d5:d1:0d:2b:47:96:57:0e:c1:
         6c:4f:79:cd:ce:f3:9f:5b:cc:db:fd:9f:09:47:f7:c8:69:ad:
         a5:95:f8:45:27:56:36:5c:5f:d7:7b:c4:a7:ec:85:0f:61:3e:
         73:6b:3b:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmod5fjiZoKOmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk
N2NiODg4YTItOGIzZi00YWFkLTgwOWQtOTc4ZDIyYmU4ZjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWcdgTZ3dT9qXrq0Ev15nqcMdxEF/u+jZkR6
pjla/JZJ6rTVU47Jc5uiqaYXagX7R5lXG777zhKX1W5flw2s/X/hM5KTi3MyE3Xv
F4Bzp/juJHazMOCqTFY7ORjqWVjsWoEvJD61AhYHJSAUerCfDTwaKUYNNOVPPDWX
RHTgr1kQVRwWNexuKcIJvcwu1YcYV+ztDHN0i/LavYraJL4gY2OIvV3zObWRL0+Y
cc71j0XX3FB1qAngpM5yTYAfGda2z5QpZg08dXmRx3e5PX/bqBwfDIwrA6Dkmw7J
1Ucf8dZgqiKrDyYX9q9XAqC9j4ZL9cVR39KQurv7Cl9j7IVvBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/QPBpPX8wXr7lFEhI0io+38IjtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTZhYmM1NTUtMmQ2Yy0z
ZDFiLWJlYjYtNWNhOTY4YWRhMmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByvIV6zZsDymsxDB7c0Gu34xzyPdsYvYBcJgakPp2qeU7VxkBiDzODB
6+PTfqevRyObYNUV6vo2HQO1pOi26U/Ojzup+vkkPj5bSd2AH+kuWuuMUo0Ys1is
XJL6R3g7Mfx5MH8ZXLFJqVvJGxFNHAvDtg44zYiZkWtV4bjSHyBqopftnP2WiB3y
pbQjwoIiN0ywNSTZTcFpFSn3s4oYhK3xSM5+eSMc6uOk2eBo7/qG6rk/nUgGr0t9
ES+bTik2Vvh89UTFoZduPOps0KUiqNXRDStHllcOwWxPec3O859bzNv9nwlH98hp
raWV+EUnVjZcX9d7xKfshQ9hPnNrO8I=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:45:31 2025 by rpki-client