Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/87a674db-4abc-3a03-b4a9-358c18ee68c8.roa
File:                     87a674db-4abc-3a03-b4a9-358c18ee68c8.roa (raw, json)
Hash identifier:          wREyb1gyYcjVF7gUBx/m9QbtWbtJfnVGuxoriAmUz8w=
Subject key identifier:   D7:67:17:43:70:1B:BD:01:0C:4A:91:BA:F6:52:56:47:BD:D5:6E:7C
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849F44A675C554B834C679A9000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/87a674db-4abc-3a03-b4a9-358c18ee68c8.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        204.195.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:67:5c:55:4b:83:4c:67:9a:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=02caf455-7f21-4966-9d3d-2b19cb0c0f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:37:a9:53:4d:4f:81:63:45:51:5f:6f:b6:21:
                    52:b7:49:84:fd:3c:20:da:48:07:0d:df:d6:ad:2f:
                    c6:f0:fd:2d:f2:2e:79:4b:73:d6:b1:d0:75:f6:da:
                    a3:75:de:cf:1a:54:bb:9e:17:60:00:d8:7a:8a:a8:
                    98:00:30:2c:f9:df:e1:1c:1a:e2:67:0c:8b:af:25:
                    66:ce:25:3c:09:96:37:8c:52:b1:c9:89:f5:1f:c4:
                    5b:c1:34:15:29:a7:7f:1b:70:11:ff:15:12:3b:95:
                    96:65:9e:79:fd:bf:81:cf:d0:7a:11:c4:b3:db:22:
                    22:dc:a5:a3:d9:0b:e2:f6:91:36:44:fe:3c:e2:f5:
                    2b:60:d0:7e:45:dc:6e:bb:f1:5a:e7:f8:f6:16:2d:
                    87:04:04:9f:5a:53:28:f1:4a:9e:91:86:46:d6:be:
                    6b:b8:0a:30:1d:c0:bf:0d:02:5a:1b:c6:f9:b2:e1:
                    59:a1:06:d4:fb:f9:9f:12:4e:f5:62:af:57:4a:99:
                    2c:0d:d1:a9:8b:66:61:c5:79:fc:1e:82:20:7c:28:
                    7d:eb:6f:11:3f:54:58:9f:d4:0c:1a:eb:7b:71:8b:
                    ff:ee:26:bb:21:ba:95:47:8b:fb:9c:89:ab:0a:55:
                    a6:80:9f:30:ce:ac:62:19:ff:bf:e6:a9:02:ad:b2:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:67:17:43:70:1B:BD:01:0C:4A:91:BA:F6:52:56:47:BD:D5:6E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/87a674db-4abc-3a03-b4a9-358c18ee68c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:be:1a:6f:87:a9:63:44:0b:89:a8:6a:ce:f7:ac:f2:54:ca:
         3c:c9:e0:73:1b:9d:49:7d:a2:55:a4:d0:f6:2b:45:34:ea:d2:
         f6:9b:ce:ea:0f:64:7d:16:a1:16:6e:f4:84:34:89:e0:18:ab:
         67:ad:42:40:49:a8:36:f8:a2:da:4b:96:28:2d:91:99:aa:7a:
         36:cf:ef:27:10:ab:cb:11:aa:85:09:09:36:2c:69:db:ae:3e:
         6c:9c:52:fd:cf:da:23:2b:1d:f6:31:39:17:d0:0a:3a:94:32:
         1a:97:39:25:3d:23:c4:19:de:63:0d:be:7f:3b:f7:49:4d:f2:
         22:aa:7a:ac:92:46:0a:1f:a9:b6:96:09:fd:87:4e:5a:4b:bc:
         da:82:bf:1c:8d:bc:58:fc:ca:a8:6a:03:cc:af:b6:2b:b1:ee:
         94:2d:1d:69:90:66:a7:a4:d7:9c:9e:98:83:b5:11:21:ce:96:
         4b:3b:46:40:5b:75:83:7e:ae:53:52:0d:67:e3:b2:e0:85:f9:
         4b:6e:79:74:6b:8a:40:b1:31:3c:96:00:d6:55:07:03:50:b8:
         8f:33:12:ab:22:05:13:c9:2f:3e:c1:f0:58:30:9d:96:e3:6f:
         06:68:a6:c0:86:0b:5e:05:21:8e:6c:15:f6:42:c7:39:df:15:
         fe:7e:1b:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SmdcVUuDTGeakAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk
MDJjYWY0NTUtN2YyMS00OTY2LTlkM2QtMmIxOWNiMGMwZjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjepU01PgWNFUV9vtiFSt0mE/Twg2kgHDd/W
rS/G8P0t8i55S3PWsdB19tqjdd7PGlS7nhdgANh6iqiYADAs+d/hHBriZwyLryVm
ziU8CZY3jFKxyYn1H8RbwTQVKad/G3AR/xUSO5WWZZ55/b+Bz9B6EcSz2yIi3KWj
2Qvi9pE2RP484vUrYNB+Rdxuu/Fa5/j2Fi2HBASfWlMo8UqekYZG1r5ruAowHcC/
DQJaG8b5suFZoQbU+/mfEk71Yq9XSpksDdGpi2ZhxXn8HoIgfCh9628RP1RYn9QM
Gut7cYv/7ia7IbqVR4v7nImrClWmgJ8wzqxiGf+/5qkCrbJk5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdnF0NwG70BDEqRuvZSVke91W58MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODdhNjc0ZGItNGFiYy0z
YTAzLWI0YTktMzU4YzE4ZWU2OGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMP7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6+Gm+HqWNEC4moas73rPJUyjzJ4HMbnUl9olWk0PYrRTTq0vabzuoP
ZH0WoRZu9IQ0ieAYq2etQkBJqDb4otpLligtkZmqejbP7ycQq8sRqoUJCTYsaduu
PmycUv3P2iMrHfYxORfQCjqUMhqXOSU9I8QZ3mMNvn8790lN8iKqeqySRgofqbaW
Cf2HTlpLvNqCvxyNvFj8yqhqA8yvtiux7pQtHWmQZqek15yemIO1ESHOlks7RkBb
dYN+rlNSDWfjsuCF+UtueXRrikCxMTyWANZVBwNQuI8zEqsiBRPJLz7B8FgwnZbj
bwZopsCGC14FIY5sFfZCxznfFf5+G4c=
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:32:44 2025 by rpki-client