Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d99eb1fc-ec62-390f-962b-34f2be494eac.roa
File:                     d99eb1fc-ec62-390f-962b-34f2be494eac.roa (raw, json)
Hash identifier:          8n7Iicy7TSzN0fiy7Hi2IwlEcD4eZcq41Ncb8OKTXiY=
Subject key identifier:   68:EE:31:F5:BC:A9:86:11:E1:FF:79:0F:16:01:51:C9:A0:26:A6:42
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F9BCDFCA4A2D4B2DFEB452880
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d99eb1fc-ec62-390f-962b-34f2be494eac.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     13335
IP address blocks:        204.195.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:fc:a4:a2:d4:b2:df:eb:45:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=7f944cf3-e788-4b44-ac33-4ee43e1233cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:c7:d0:12:a3:e4:ce:85:8b:f4:da:db:4b:
                    08:31:be:9f:cb:48:50:df:11:5a:05:e9:e7:2f:79:
                    20:43:55:0d:43:f9:29:53:32:46:92:7f:e6:ef:6c:
                    d2:5a:13:e1:0a:7f:6f:f4:be:00:64:33:bd:84:11:
                    f9:c4:81:eb:2b:36:21:7d:e1:78:2c:bb:3a:ea:0f:
                    1a:15:99:44:4b:52:27:8f:d7:82:9b:7f:76:38:25:
                    5b:a7:27:d8:6b:2d:79:76:b8:28:53:0a:44:75:4e:
                    05:82:54:76:6d:b8:0a:4d:ed:35:7d:ff:fe:5e:63:
                    2a:4a:db:76:1e:d8:c6:b8:88:b9:b8:1b:ab:25:1a:
                    61:50:20:92:18:6f:7b:f3:b4:1d:a0:15:f6:94:0d:
                    c5:a2:9e:a3:6b:db:bd:53:d4:b9:51:61:63:11:87:
                    c6:ab:9c:97:89:31:31:57:f8:28:e4:2e:21:52:88:
                    b5:74:a5:b7:b5:8e:8e:de:e0:00:45:98:22:f7:84:
                    99:49:0a:9b:f4:38:40:e8:6c:11:9a:2d:e3:56:83:
                    03:c9:2d:68:4f:08:35:85:f7:5d:6a:13:06:e7:2a:
                    9b:83:0c:74:bd:89:13:82:8d:ec:39:c8:c6:91:f6:
                    f9:aa:52:9e:73:2d:d5:af:de:a1:20:96:33:1f:a3:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EE:31:F5:BC:A9:86:11:E1:FF:79:0F:16:01:51:C9:A0:26:A6:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d99eb1fc-ec62-390f-962b-34f2be494eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:72:6f:4b:8d:01:14:6f:c1:a8:4e:88:2e:a2:62:6f:7b:
         1a:6d:49:16:bd:ab:1f:cb:6d:ff:3c:15:3e:ff:85:50:45:8d:
         8e:77:03:46:ac:63:e7:6d:55:98:8b:eb:a2:9d:87:d5:2f:69:
         03:3c:be:ee:aa:db:10:93:b9:fb:f3:38:67:a5:01:cd:33:34:
         aa:4d:1f:64:91:02:95:d7:81:ef:31:0e:9a:a9:a6:1c:a8:7f:
         37:51:5c:ee:d8:2a:ec:95:39:62:e4:f2:d4:a0:24:4d:48:81:
         b3:14:94:59:a5:58:fc:26:86:30:d8:3b:1c:68:c6:d4:34:b3:
         bf:d9:23:86:b7:6a:71:25:cd:b8:2a:3e:2d:fe:29:92:2c:71:
         6b:59:5c:fc:be:b2:9d:4b:0d:b9:3f:7c:c5:c3:ca:8f:48:18:
         24:98:80:7d:17:9f:c4:9e:72:11:95:41:cf:06:2a:11:3d:05:
         ca:5e:ec:5f:a9:b7:49:a7:76:e7:da:f3:0d:0e:7a:1f:80:80:
         4a:84:5d:29:4f:4f:6d:db:26:5e:58:1a:fd:52:48:9c:6a:db:
         70:01:86:4c:7a:d4:89:d8:61:87:18:aa:cc:8a:b4:71:67:87:
         f3:4b:14:fe:d7:02:78:6c:f8:41:0b:9a:a6:2f:74:ad:f1:5a:
         ed:d8:69:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzfykotSy3+tFKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
N2Y5NDRjZjMtZTc4OC00YjQ0LWFjMzMtNGVlNDNlMTIzM2NmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/nH0BKj5M6Fi/Ta20sIMb6fy0hQ3xFaBenn
L3kgQ1UNQ/kpUzJGkn/m72zSWhPhCn9v9L4AZDO9hBH5xIHrKzYhfeF4LLs66g8a
FZlES1Inj9eCm392OCVbpyfYay15drgoUwpEdU4FglR2bbgKTe01ff/+XmMqStt2
HtjGuIi5uBurJRphUCCSGG9787QdoBX2lA3Fop6ja9u9U9S5UWFjEYfGq5yXiTEx
V/go5C4hUoi1dKW3tY6O3uAARZgi94SZSQqb9DhA6GwRmi3jVoMDyS1oTwg1hfdd
ahMG5yqbgwx0vYkTgo3sOcjGkfb5qlKecy3Vr96hIJYzH6MtkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjuMfW8qYYR4f95DxYBUcmgJqZCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDk5ZWIxZmMtZWM2Mi0z
OTBmLTk2MmItMzRmMmJlNDk0ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMP3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABw3cm9LjQEUb8GoToguomJvexptSRa9qx/Lbf88FT7/hVBFjY53A0as
Y+dtVZiL66Kdh9UvaQM8vu6q2xCTufvzOGelAc0zNKpNH2SRApXXge8xDpqpphyo
fzdRXO7YKuyVOWLk8tSgJE1IgbMUlFmlWPwmhjDYOxxoxtQ0s7/ZI4a3anElzbgq
Pi3+KZIscWtZXPy+sp1LDbk/fMXDyo9IGCSYgH0Xn8SechGVQc8GKhE9Bcpe7F+p
t0mndufa8w0Oeh+AgEqEXSlPT23bJl5YGv1SSJxq23ABhkx61InYYYcYqsyKtHFn
h/NLFP7XAnhs+EELmqYvdK3xWu3Yabo=
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:44:45 2026 by rpki-client