Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb/801b8317-b0d1-3461-8306-196926bd4d9a.roa
File:                     801b8317-b0d1-3461-8306-196926bd4d9a.roa (raw, json)
Hash identifier:          D8MhRoIp0RSQiVu6ePC6goHTTCi0DG+LNWNHoJJg5+s=
Subject key identifier:   C1:BB:C2:39:AA:61:1B:D0:83:9D:42:DD:FA:D7:56:13:C0:0A:53:31
Certificate issuer:       /CN=86203c54-64ec-4eb5-83b1-fe00dfa4f2fb
Certificate serial:       010D0C9F4328584A3B7AFDD2EF6241763CB99680
Authority key identifier: 9E:E0:9E:D9:21:71:C0:83:30:75:CA:BE:BB:84:A2:A6:A7:5E:F1:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb/801b8317-b0d1-3461-8306-196926bd4d9a.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     18530
IP address blocks:        209.177.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:fd:d2:ef:62:41:76:3c:b9:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86203c54-64ec-4eb5-83b1-fe00dfa4f2fb
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=d6994c3b-5b1b-43b4-bde8-8aa97b88895b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c7:cc:ae:37:db:22:19:f7:8b:de:de:fe:8d:
                    47:c4:06:f3:ff:e8:d8:d4:30:40:e6:9f:d6:88:d3:
                    94:32:8a:bf:a0:f0:f5:b6:b1:7f:f9:54:3a:19:6d:
                    5f:e7:16:0a:16:88:3c:96:8a:be:65:df:d8:bb:05:
                    e6:0c:81:8e:fe:dd:5e:36:42:6c:76:f8:d5:8f:10:
                    bb:bf:17:8f:cd:98:92:12:0f:49:59:a1:fb:2d:fb:
                    4d:44:b7:9e:23:04:27:49:a1:84:7a:5e:55:a9:ea:
                    b2:77:30:f3:45:82:aa:3d:5b:28:9d:fc:fe:b6:4f:
                    65:0f:c9:52:bd:b4:37:6e:96:68:a6:aa:0d:5c:e3:
                    d9:34:57:fe:7f:7d:ad:c8:75:f5:27:f1:f7:e6:9f:
                    d1:42:19:83:91:27:c9:50:ce:4a:bd:7c:c3:ea:a0:
                    6d:bc:1e:00:8a:db:6f:47:d3:06:b7:36:11:28:01:
                    f9:15:4c:6a:cf:3c:4c:d9:e5:ef:36:c5:8e:3f:bf:
                    08:2b:35:c3:47:c8:32:00:01:b0:d1:f4:0a:35:80:
                    7d:de:1b:fc:18:4b:c5:f1:9f:93:6f:95:4d:ff:8a:
                    28:3a:d2:21:4b:fb:9a:a8:ac:18:d6:53:c7:91:dc:
                    3a:e9:f8:54:ac:5e:c9:fd:70:7d:b5:05:f7:dd:0d:
                    c8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BB:C2:39:AA:61:1B:D0:83:9D:42:DD:FA:D7:56:13:C0:0A:53:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb/801b8317-b0d1-3461-8306-196926bd4d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb.crl

            X509v3 Authority Key Identifier:
                keyid:9E:E0:9E:D9:21:71:C0:83:30:75:CA:BE:BB:84:A2:A6:A7:5E:F1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86203c54-64ec-4eb5-83b1-fe00dfa4f2fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.177.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:31:dc:b9:4f:72:19:ae:e8:32:2d:e1:8a:bd:be:1e:aa:
         9e:7c:42:b7:2f:db:f2:7c:20:06:81:45:82:6e:6e:1c:90:2b:
         2a:3c:26:50:73:41:77:19:2e:95:a8:7f:2c:26:5b:0e:54:c5:
         32:31:46:ab:21:e9:8e:9c:5a:80:e3:e4:bf:79:80:ad:a8:17:
         8f:75:72:4e:50:98:a7:4c:3d:fb:38:67:1a:41:3a:9e:b0:fc:
         57:de:0c:38:d7:a8:eb:97:2a:48:d5:78:af:00:4b:aa:30:b8:
         b6:e3:cd:2a:3f:d6:23:7f:ae:5a:50:85:17:d4:e1:55:2d:1c:
         6d:89:86:df:ef:56:ec:ce:7c:71:1c:03:ff:e4:35:fc:54:73:
         9b:25:89:41:9d:96:18:a6:1b:91:01:3e:0d:2b:9f:2c:45:de:
         cb:25:3c:18:b6:ad:13:e7:0d:03:70:63:46:a6:80:74:b1:24:
         96:f3:ef:a9:35:8d:8a:78:3c:8e:89:91:2d:8c:f6:f0:18:bb:
         ba:ee:a7:0c:63:37:c8:8e:e9:3c:b6:f4:7d:d2:f5:0e:a6:30:
         be:82:54:76:e7:b8:92:fe:b1:b5:f4:14:e8:3d:b4:97:86:29:
         93:43:81:fd:ae:18:b4:b5:0b:d9:fb:e9:c2:09:6e:81:ff:2a:
         a7:11:be:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ev3S72JBdjy5loAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODYyMDNjNTQtNjRlYy00ZWI1LTgzYjEtZmUwMGRmYTRm
MmZiMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
ZDY5OTRjM2ItNWIxYi00M2I0LWJkZTgtOGFhOTdiODg4OTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMfMrjfbIhn3i97e/o1HxAbz/+jY1DBA5p/W
iNOUMoq/oPD1trF/+VQ6GW1f5xYKFog8loq+Zd/YuwXmDIGO/t1eNkJsdvjVjxC7
vxePzZiSEg9JWaH7LftNRLeeIwQnSaGEel5VqeqydzDzRYKqPVsonfz+tk9lD8lS
vbQ3bpZopqoNXOPZNFf+f32tyHX1J/H35p/RQhmDkSfJUM5KvXzD6qBtvB4Aittv
R9MGtzYRKAH5FUxqzzxM2eXvNsWOP78IKzXDR8gyAAGw0fQKNYB93hv8GEvF8Z+T
b5VN/4ooOtIhS/uaqKwY1lPHkdw66fhUrF7J/XB9tQX33Q3IgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMG7wjmqYRvQg51C3frXVhPAClMxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NjIw
M2M1NC02NGVjLTRlYjUtODNiMS1mZTAwZGZhNGYyZmIvODAxYjgzMTctYjBkMS0z
NDYxLTgzMDYtMTk2OTI2YmQ0ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODYyMDNjNTQtNjRlYy00ZWI1LTgz
YjEtZmUwMGRmYTRmMmZiLzg2MjAzYzU0LTY0ZWMtNGViNS04M2IxLWZlMDBkZmE0
ZjJmYi5jcmwwHwYDVR0jBBgwFoAUnuCe2SFxwIMwdcq+u4Sipqde8e8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84NjIwM2M1NC02NGVjLTRlYjUtODNiMS1mZTAw
ZGZhNGYyZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bFPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmhMdy5T3IZrugyLeGKvb4eqp58Qrcv2/J8IAaBRYJubhyQKyo8JlBz
QXcZLpWofywmWw5UxTIxRqsh6Y6cWoDj5L95gK2oF491ck5QmKdMPfs4ZxpBOp6w
/FfeDDjXqOuXKkjVeK8AS6owuLbjzSo/1iN/rlpQhRfU4VUtHG2Jht/vVuzOfHEc
A//kNfxUc5sliUGdlhimG5EBPg0rnyxF3sslPBi2rRPnDQNwY0amgHSxJJbz76k1
jYp4PI6JkS2M9vAYu7rupwxjN8iO6Ty29H3S9Q6mML6CVHbnuJL+sbX0FOg9tJeG
KZNDgf2uGLS1C9n76cIJboH/KqcRvps=
-----END CERTIFICATE-----
Generated at Thu Jun 19 20:13:53 2025 by rpki-client