Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8cb93861-183e-382c-a2b3-763d37baf63b.roa
File:                     8cb93861-183e-382c-a2b3-763d37baf63b.roa (raw, json)
Hash identifier:          kzCzgY6fnsvZ+pdK9HOez0kByQBHTHBlgBKh1yp5jic=
Subject key identifier:   0D:B7:36:7E:7F:8D:A8:DB:53:93:3E:EE:24:C1:BE:EB:56:F3:C6:53
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD50670CCCC63A440BAB9DF00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8cb93861-183e-382c-a2b3-763d37baf63b.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:70:cc:cc:63:a4:40:ba:b9:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=ced57ced-4801-48f8-bc3c-5732bc2ef191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:61:62:77:ae:e8:31:ee:5c:07:8b:f2:7b:
                    7d:ba:62:d5:c6:68:c0:7a:3e:22:67:4d:b2:c9:18:
                    5e:52:21:47:fb:8b:b7:e7:57:90:49:18:d8:26:b8:
                    9c:ef:8e:2e:34:1b:2a:98:1e:ef:38:4b:b3:27:e6:
                    45:b9:bb:28:51:f8:6a:64:db:30:02:7e:3c:a9:f8:
                    dd:cf:19:5d:3b:61:66:e6:36:c4:b7:8a:29:e7:00:
                    e5:b8:37:32:1a:4a:5e:4c:00:4c:09:d8:99:ce:57:
                    4e:3e:f4:2e:f1:67:e2:ac:21:51:0c:14:89:6c:d5:
                    26:33:9a:ad:c4:32:86:6e:77:e7:37:33:44:3b:e5:
                    b5:2d:1c:67:92:cd:32:c0:4b:9b:c1:cd:48:f7:66:
                    3f:17:9d:29:f0:12:38:fb:c9:c0:19:dc:a2:d7:f9:
                    d5:b6:1b:c4:99:af:85:41:e3:18:13:b1:87:a5:c2:
                    c5:56:c7:9b:18:ef:7d:d5:08:9f:76:8e:5c:b2:d8:
                    b8:aa:d3:1b:80:88:76:70:0b:b5:8f:63:29:78:cd:
                    b0:04:50:a4:48:ae:c8:54:4a:bd:e7:c0:cf:e6:06:
                    d4:8f:dd:09:4f:11:c6:91:a3:e2:56:37:3d:c0:10:
                    8f:1b:d8:58:18:f4:5d:64:2a:2b:16:b3:3a:42:00:
                    e6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B7:36:7E:7F:8D:A8:DB:53:93:3E:EE:24:C1:BE:EB:56:F3:C6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8cb93861-183e-382c-a2b3-763d37baf63b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:11:03:80:65:e7:42:ad:c6:ba:4a:d9:98:d4:45:42:5c:cb:
         4c:6f:94:e1:95:ab:e8:9f:a7:45:7e:ef:1c:1e:6f:af:01:c0:
         b2:21:99:32:50:e0:d3:ef:7f:27:26:54:57:ad:3d:d7:04:fa:
         24:4b:34:a9:7a:78:4f:c3:55:fa:a9:2d:f3:df:e7:9b:1a:83:
         65:a5:20:d7:b6:03:af:48:8c:06:be:1e:11:fb:09:8d:73:a6:
         c1:65:3f:2e:04:5f:f2:af:53:39:92:73:a4:af:a5:00:e8:b1:
         a8:6f:20:62:8d:73:33:30:30:67:20:c5:92:23:ae:eb:be:ae:
         61:b4:ac:83:37:d1:a7:7c:26:2d:5f:b8:d6:64:81:c9:87:05:
         88:53:99:eb:c3:ae:9c:b3:1a:3a:73:8e:b2:3b:67:72:80:db:
         8c:d9:f2:b3:34:fe:22:bb:22:c1:7f:9d:f5:fb:15:05:39:ec:
         46:4e:6f:9a:db:66:45:25:d2:dd:a6:87:bd:a3:a3:ed:3c:ce:
         03:e0:9a:1e:c9:40:e1:9b:b1:e8:4c:ea:0e:c8:a6:33:18:2f:
         08:06:42:7d:f2:76:10:c3:b6:e1:68:e1:6c:08:f1:9e:f4:ee:
         73:e8:63:95:46:98:fb:97:3b:2d:45:f0:8b:00:53:d7:c3:bf:
         82:3f:b9:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBnDMzGOkQLq53wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk
Y2VkNTdjZWQtNDgwMS00OGY4LWJjM2MtNTczMmJjMmVmMTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooZhYneu6DHuXAeL8nt9umLVxmjAej4iZ02y
yRheUiFH+4u351eQSRjYJric744uNBsqmB7vOEuzJ+ZFubsoUfhqZNswAn48qfjd
zxldO2Fm5jbEt4op5wDluDcyGkpeTABMCdiZzldOPvQu8WfirCFRDBSJbNUmM5qt
xDKGbnfnNzNEO+W1LRxnks0ywEubwc1I92Y/F50p8BI4+8nAGdyi1/nVthvEma+F
QeMYE7GHpcLFVsebGO991Qifdo5csti4qtMbgIh2cAu1j2MpeM2wBFCkSK7IVEq9
58DP5gbUj90JTxHGkaPiVjc9wBCPG9hYGPRdZCorFrM6QgDmvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA23Nn5/jajbU5M+7iTBvutW88ZTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOGNiOTM4NjEtMTgzZS0z
ODJjLWEyYjMtNzYzZDM3YmFmNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMP+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkRA4Bl50KtxrpK2ZjURUJcy0xvlOGVq+ifp0V+7xweb68BwLIhmTJQ
4NPvfycmVFetPdcE+iRLNKl6eE/DVfqpLfPf55sag2WlINe2A69IjAa+HhH7CY1z
psFlPy4EX/KvUzmSc6SvpQDosahvIGKNczMwMGcgxZIjruu+rmG0rIM30ad8Ji1f
uNZkgcmHBYhTmevDrpyzGjpzjrI7Z3KA24zZ8rM0/iK7IsF/nfX7FQU57EZOb5rb
ZkUl0t2mh72jo+08zgPgmh7JQOGbsehM6g7IpjMYLwgGQn3ydhDDtuFo4WwI8Z70
7nPoY5VGmPuXOy1F8IsAU9fDv4I/uao=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:58:11 2025 by rpki-client