Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c2f259cf-2a0f-3553-9dc9-a6d24113713c.roa
File:                     c2f259cf-2a0f-3553-9dc9-a6d24113713c.roa (raw, json)
Hash identifier:          3Spvfu7YQ1K3uvNV7D6jTFpQleJrqPzcpgh9PIBKBqQ=
Subject key identifier:   D7:48:1D:A1:39:5B:73:CD:69:A7:9D:AF:CD:20:6D:36:A4:14:E7:66
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD5066FF9EBB7E49A2B431580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c2f259cf-2a0f-3553-9dc9-a6d24113713c.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:6f:f9:eb:b7:e4:9a:2b:43:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=7a1422dd-093b-4c34-a569-223862ff1ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:00:66:9a:38:8b:03:3f:70:e1:63:b1:29:7e:
                    d0:cf:7c:23:9e:4d:cf:f9:cf:f1:af:19:bd:a5:88:
                    b7:98:01:e9:c3:a1:19:40:14:bd:39:15:7f:16:66:
                    90:18:7f:d7:ca:e5:8a:44:66:09:c6:cc:e5:0b:1e:
                    db:01:35:e7:ac:db:7b:6f:60:54:a2:6b:a8:3d:80:
                    05:36:fb:f8:63:c7:27:8a:fb:f5:29:78:9d:7d:3c:
                    03:3e:91:86:17:3e:92:39:19:fd:24:4f:9a:f1:6f:
                    a1:43:9c:aa:f5:30:34:7d:bd:67:41:92:a6:40:de:
                    8d:21:5b:17:3b:17:86:0f:5c:78:6c:55:68:85:8f:
                    71:c5:dd:9e:c4:ff:b2:bd:4e:2f:fe:ee:01:d2:56:
                    98:07:b9:cb:57:be:1e:76:01:57:a3:3b:30:25:62:
                    52:11:63:73:f1:00:2f:71:56:00:63:8d:d7:e1:f4:
                    de:28:26:42:29:5f:9f:64:b7:9c:40:a4:65:03:80:
                    da:43:e2:34:53:3e:0e:91:05:d7:45:f3:4d:f8:31:
                    89:09:22:42:2c:3b:c7:f0:1d:5e:09:41:19:12:37:
                    77:b3:fd:b5:38:df:7d:af:5c:e9:8b:16:8d:b2:9f:
                    bb:0e:22:0a:bb:52:25:6f:2d:0b:01:15:93:4a:37:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:48:1D:A1:39:5B:73:CD:69:A7:9D:AF:CD:20:6D:36:A4:14:E7:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c2f259cf-2a0f-3553-9dc9-a6d24113713c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:22:16:77:cf:e0:c5:fa:57:59:3b:91:37:84:85:a0:b0:9f:
         e5:d4:d3:51:15:d6:b7:26:d0:ee:38:94:d6:c6:45:86:90:f7:
         44:a3:0f:75:04:05:7a:8f:5c:00:8e:09:5c:eb:ff:a8:77:da:
         33:d1:93:55:9b:98:cc:c7:26:3b:8a:96:69:39:b2:de:25:f3:
         1d:e9:66:2f:10:bb:d3:50:69:da:77:70:05:9f:2a:3f:6f:23:
         92:99:34:d5:e3:ab:50:40:78:70:3d:7c:a6:9f:d1:72:56:d8:
         89:fd:6d:13:51:a4:ef:0d:f9:41:f0:e2:0c:a2:18:4b:b5:2b:
         b8:f0:8d:44:8b:fa:45:e7:df:c1:ea:42:ec:f5:41:e2:4d:2c:
         d7:f0:4d:e6:19:86:74:e6:0d:3b:1f:28:2c:33:a3:50:9d:8d:
         1c:7f:36:af:6f:9f:1c:f3:fb:35:e0:92:71:ff:fa:0f:c6:6e:
         2b:0b:d5:c9:17:e6:0d:66:6f:62:47:d8:39:df:e4:98:9c:d1:
         14:dc:b5:fc:42:53:f0:ba:34:e3:c9:e4:f4:b9:3a:e2:34:b4:
         b6:45:62:13:4b:6d:56:19:77:54:1f:2a:f4:6f:16:6c:f0:30:
         13:47:56:d0:9b:2c:2b:78:a0:7e:d8:11:51:b4:2d:ff:73:a1:
         14:8f:26:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBm/567fkmitDFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk
N2ExNDIyZGQtMDkzYi00YzM0LWE1NjktMjIzODYyZmYxYWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwBmmjiLAz9w4WOxKX7Qz3wjnk3P+c/xrxm9
pYi3mAHpw6EZQBS9ORV/FmaQGH/XyuWKRGYJxszlCx7bATXnrNt7b2BUomuoPYAF
Nvv4Y8cnivv1KXidfTwDPpGGFz6SORn9JE+a8W+hQ5yq9TA0fb1nQZKmQN6NIVsX
OxeGD1x4bFVohY9xxd2exP+yvU4v/u4B0laYB7nLV74edgFXozswJWJSEWNz8QAv
cVYAY43X4fTeKCZCKV+fZLecQKRlA4DaQ+I0Uz4OkQXXRfNN+DGJCSJCLDvH8B1e
CUEZEjd3s/21ON99r1zpixaNsp+7DiIKu1Ilby0LARWTSjeVswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdIHaE5W3PNaaedr80gbTakFOdmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYzJmMjU5Y2YtMmEwZi0z
NTUzLTlkYzktYTZkMjQxMTM3MTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8iFnfP4MX6V1k7kTeEhaCwn+XU01EV1rcm0O44lNbGRYaQ90SjD3UE
BXqPXACOCVzr/6h32jPRk1WbmMzHJjuKlmk5st4l8x3pZi8Qu9NQadp3cAWfKj9v
I5KZNNXjq1BAeHA9fKaf0XJW2In9bRNRpO8N+UHw4gyiGEu1K7jwjUSL+kXn38Hq
Quz1QeJNLNfwTeYZhnTmDTsfKCwzo1CdjRx/Nq9vnxzz+zXgknH/+g/GbisL1ckX
5g1mb2JH2Dnf5Jic0RTctfxCU/C6NOPJ5PS5OuI0tLZFYhNLbVYZd1QfKvRvFmzw
MBNHVtCbLCt4oH7YEVG0Lf9zoRSPJhc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:50 2025 by rpki-client