Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa
File:                     5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa (raw, json)
Hash identifier:          4oGPNqcWFFr1GZKpYDLUXFGfEbP8kJ553mkh8AQRpXE=
Subject key identifier:   51:D3:8D:57:77:EA:DB:F4:B4:C8:6D:7D:75:C4:CA:0F:21:01:58:A2
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584A7E7B55E48500415FFAD3CF80
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        129.77.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:55:e4:85:00:41:5f:fa:d3:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=fd4f96f8-ec2d-4b6a-9c75-56fa1206b593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:bb:56:8d:0f:c7:2c:99:54:f6:6b:99:08:
                    9e:ab:f9:fe:b3:0e:f1:f4:4c:9a:18:c5:cf:f2:95:
                    13:d0:b1:1e:d4:71:55:98:54:77:86:45:56:68:f8:
                    03:0d:ef:fd:fe:e4:19:8e:7d:88:a1:14:f4:6a:03:
                    f0:5a:6a:f9:76:8f:b6:c1:ea:a9:b9:1a:63:26:6a:
                    d2:23:44:5f:cd:42:41:79:dd:cd:9a:3b:0f:d7:06:
                    50:87:d1:08:3e:a9:9c:43:69:bb:7c:51:83:98:35:
                    89:2b:9e:64:a1:b4:2d:6d:bf:4a:d5:5a:77:9f:70:
                    f7:30:78:51:aa:dc:9b:02:a3:ab:b9:ea:db:0c:ef:
                    7e:c5:f0:8a:a1:22:92:9c:5e:0a:1e:40:14:b4:5d:
                    2f:fe:5e:0f:66:48:1a:b6:91:5e:c9:ea:e6:86:45:
                    e9:06:92:c8:be:b2:68:fe:ec:79:75:6f:62:95:d3:
                    3e:be:f4:4b:9b:fe:ce:47:80:17:2b:41:d7:c3:2d:
                    c0:f8:99:62:cf:e6:b7:63:98:77:81:c9:5a:f6:23:
                    8d:df:48:ac:1e:3d:8d:86:bc:9c:31:76:44:8e:77:
                    2c:cc:be:ea:55:43:c7:88:86:0c:0a:a6:66:74:d4:
                    cc:ad:9d:78:25:e7:32:90:78:12:d4:b6:12:06:9b:
                    c4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D3:8D:57:77:EA:DB:F4:B4:C8:6D:7D:75:C4:CA:0F:21:01:58:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.77.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:18:38:57:49:56:55:53:eb:bd:5e:6a:83:41:28:39:54:d4:
         76:a0:56:a2:ea:89:eb:6c:35:71:00:41:b6:90:a4:1f:d3:e8:
         75:cf:39:aa:ae:a3:67:f9:1a:e9:6a:cf:62:73:00:ff:7c:db:
         5d:35:47:92:59:9c:92:a0:65:a3:37:b9:9d:3e:8d:f0:db:cc:
         59:91:db:14:09:8b:0d:4c:e2:fc:85:b2:6a:69:72:81:b7:e5:
         94:2d:d4:e0:b2:01:32:a6:33:fa:25:cb:86:03:9a:aa:c9:39:
         97:fd:47:75:63:7b:89:1f:a1:d4:89:70:00:eb:8b:24:38:d7:
         92:0b:96:1f:44:df:e7:66:de:4c:59:9f:b7:d9:7c:99:a1:4e:
         41:bb:f3:94:52:1e:cd:7d:4e:3e:55:26:ad:2d:0b:10:92:85:
         ce:54:6d:c9:d0:8b:4e:47:bf:81:66:d2:a6:fd:ac:b4:2a:87:
         e4:2a:c6:7e:a9:63:21:82:6c:8e:f0:9f:8c:4c:e4:b3:63:95:
         e6:f7:a4:09:af:7f:c2:1c:11:3b:49:17:8a:15:16:7b:18:e6:
         63:a6:87:38:a3:81:29:d4:3d:57:86:4e:d6:8a:84:fb:90:9f:
         1e:65:c0:ac:91:9d:ad:a8:ad:01:bb:62:da:bf:14:44:c1:76:
         75:1c:bb:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e1XkhQBBX/rTz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
ZmQ0Zjk2ZjgtZWMyZC00YjZhLTljNzUtNTZmYTEyMDZiNTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxa7Vo0PxyyZVPZrmQieq/n+sw7x9EyaGMXP
8pUT0LEe1HFVmFR3hkVWaPgDDe/9/uQZjn2IoRT0agPwWmr5do+2weqpuRpjJmrS
I0RfzUJBed3NmjsP1wZQh9EIPqmcQ2m7fFGDmDWJK55kobQtbb9K1Vp3n3D3MHhR
qtybAqOruerbDO9+xfCKoSKSnF4KHkAUtF0v/l4PZkgatpFeyermhkXpBpLIvrJo
/ux5dW9ildM+vvRLm/7OR4AXK0HXwy3A+Jliz+a3Y5h3gcla9iON30isHj2Nhryc
MXZEjncszL7qVUPHiIYMCqZmdNTMrZ14JecykHgS1LYSBpvEcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFHTjVd36tv0tMhtfXXEyg8hAViiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNWI1NDFkZjctYzIyNy0z
YzFhLThhN2QtMGNlNGU5MmU0ZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgU0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALAYOFdJVlVT671eaoNBKDlU1HagVqLqietsNXEAQbaQpB/T6HXPOaqu
o2f5Gulqz2JzAP982101R5JZnJKgZaM3uZ0+jfDbzFmR2xQJiw1M4vyFsmppcoG3
5ZQt1OCyATKmM/oly4YDmqrJOZf9R3Vje4kfodSJcADriyQ415ILlh9E3+dm3kxZ
n7fZfJmhTkG785RSHs19Tj5VJq0tCxCShc5UbcnQi05Hv4Fm0qb9rLQqh+Qqxn6p
YyGCbI7wn4xM5LNjleb3pAmvf8IcETtJF4oVFnsY5mOmhzijgSnUPVeGTtaKhPuQ
nx5lwKyRna2orQG7Ytq/FETBdnUcu34=
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:37:54 2025 by rpki-client