Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7b7fd1a6-1f40-39e9-b118-15cc12d6db3e.roa
File:                     7b7fd1a6-1f40-39e9-b118-15cc12d6db3e.roa (raw, json)
Hash identifier:          UGN+vxFhPZWeupebu5WvQvsYFSx92hq8IwoycdqX020=
Subject key identifier:   EF:17:A1:AB:5F:3E:CD:78:85:C6:59:8B:9C:DA:45:C2:F3:A5:37:01
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7085EFCF99E61B5ECC77C2E0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7b7fd1a6-1f40-39e9-b118-15cc12d6db3e.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     7861
IP address blocks:        209.91.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:ef:cf:99:e6:1b:5e:cc:77:c2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=648102e2-bfa9-43d6-a4d1-f0b69ce77974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a1:d4:1b:4a:18:68:da:5e:f7:fe:26:e7:27:
                    f5:5b:66:68:a9:67:11:0d:1f:2c:cf:e6:cb:f6:ea:
                    29:77:3e:21:ed:66:c5:5e:51:f6:12:61:3f:4c:3b:
                    83:c5:53:7b:31:65:a0:31:50:c0:95:e3:05:0b:39:
                    15:77:25:ee:56:8e:b7:01:62:55:e7:f5:3e:5e:af:
                    50:54:ed:ce:41:a7:07:9e:47:b6:7c:31:dc:0c:82:
                    d0:d6:0c:4d:9e:c8:25:25:2b:20:ed:04:4b:bd:c9:
                    c5:9c:91:4a:ac:48:38:fd:56:c4:93:86:2a:79:11:
                    e6:7c:ab:24:e9:d0:25:86:d2:9e:4e:a1:10:13:c4:
                    0f:63:7b:0a:6f:fa:f0:2b:8b:a0:44:77:bd:73:1a:
                    5d:c5:d5:5b:43:7e:cf:6d:9e:d2:c1:8c:a1:a5:14:
                    7f:6d:7d:ee:d6:55:c8:26:9a:15:e5:65:18:43:6d:
                    8c:df:38:4e:8b:88:82:32:ac:c8:cb:6b:09:4e:be:
                    eb:2d:0a:b3:93:55:b7:9f:58:52:34:72:90:e8:db:
                    e5:61:14:22:0d:a7:6e:45:1b:c4:7f:e1:e0:81:3f:
                    b5:6e:ad:20:40:20:bf:f2:03:2b:06:58:46:b7:b8:
                    2d:63:df:15:35:05:11:ee:0c:41:80:91:35:25:76:
                    f6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:17:A1:AB:5F:3E:CD:78:85:C6:59:8B:9C:DA:45:C2:F3:A5:37:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7b7fd1a6-1f40-39e9-b118-15cc12d6db3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.91.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:fe:2a:30:f0:6f:c2:33:b9:a0:4e:ad:9c:05:46:b6:4a:ad:
         cc:18:33:07:84:2c:f7:08:3e:e9:24:65:4d:68:87:fe:36:94:
         87:08:4c:2f:09:d5:5a:f6:7f:da:8d:11:f9:b0:5b:39:31:9b:
         b2:c2:4d:53:e1:cc:9c:7f:86:9a:1c:ab:ba:8d:df:bc:1f:02:
         ce:5f:eb:9d:a7:2f:04:bb:6c:3c:c7:ca:63:89:aa:09:5a:62:
         9e:39:5c:20:f6:fc:17:f7:ff:21:10:10:04:86:25:6b:50:1c:
         91:0f:f5:ce:15:e9:0a:cb:24:95:bd:cf:b1:19:c2:43:a8:ac:
         58:b0:56:7f:7c:f8:78:19:6b:9c:90:6b:0c:2e:7b:1b:89:fe:
         ae:80:4a:bb:7b:50:72:39:75:8e:5c:ad:d0:ae:28:4a:1c:50:
         57:37:47:fc:83:9e:e7:86:5f:5c:bf:81:55:59:84:62:c4:28:
         fc:87:7b:64:8c:b1:41:b3:80:72:9d:a1:43:96:c9:2f:57:a6:
         a4:96:61:76:a7:88:07:ed:03:93:a9:54:eb:d3:62:9f:e5:56:
         e2:a8:35:71:55:96:cb:2d:3d:19:82:21:92:5e:2c:8e:03:99:
         a8:48:84:70:26:e4:1f:ff:f7:a8:e7:06:f5:57:d8:c4:04:85:
         ab:0e:40:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhe/PmeYbXsx3wuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
NjQ4MTAyZTItYmZhOS00M2Q2LWE0ZDEtZjBiNjljZTc3OTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKHUG0oYaNpe9/4m5yf1W2ZoqWcRDR8sz+bL
9uopdz4h7WbFXlH2EmE/TDuDxVN7MWWgMVDAleMFCzkVdyXuVo63AWJV5/U+Xq9Q
VO3OQacHnke2fDHcDILQ1gxNnsglJSsg7QRLvcnFnJFKrEg4/VbEk4YqeRHmfKsk
6dAlhtKeTqEQE8QPY3sKb/rwK4ugRHe9cxpdxdVbQ37PbZ7SwYyhpRR/bX3u1lXI
JpoV5WUYQ22M3zhOi4iCMqzIy2sJTr7rLQqzk1W3n1hSNHKQ6NvlYRQiDaduRRvE
f+HggT+1bq0gQCC/8gMrBlhGt7gtY98VNQUR7gxBgJE1JXb2cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8XoatfPs14hcZZi5zaRcLzpTcBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2I3ZmQxYTYtMWY0MC0z
OWU5LWIxMTgtMTVjYzEyZDZkYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VtNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADP+KjDwb8IzuaBOrZwFRrZKrcwYMweELPcIPukkZU1oh/42lIcITC8J
1Vr2f9qNEfmwWzkxm7LCTVPhzJx/hpocq7qN37wfAs5f652nLwS7bDzHymOJqgla
Yp45XCD2/Bf3/yEQEASGJWtQHJEP9c4V6QrLJJW9z7EZwkOorFiwVn98+HgZa5yQ
awwuexuJ/q6ASrt7UHI5dY5crdCuKEocUFc3R/yDnueGX1y/gVVZhGLEKPyHe2SM
sUGzgHKdoUOWyS9XpqSWYXaniAftA5OpVOvTYp/lVuKoNXFVlsstPRmCIZJeLI4D
mahIhHAm5B//96jnBvVX2MQEhasOQA0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:22 2025 by rpki-client