Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77d955de-89c8-3302-9e63-2aaae63e9d92.roa
File:                     77d955de-89c8-3302-9e63-2aaae63e9d92.roa (raw, json)
Hash identifier:          Es0TFyPesjw+12OJYOVyzdvVlQRML7mt3+x6fRqx4p8=
Subject key identifier:   B1:64:96:0E:77:C0:9A:BB:B6:BB:D1:85:55:90:83:27:F1:D3:EC:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB377E0348A0E8EB41CB0C980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77d955de-89c8-3302-9e63-2aaae63e9d92.roa
Signing time:             Thu 31 Jul 2025 12:32:00 +0000
ROA not before:           Thu 31 Jul 2025 12:32:00 +0000
ROA not after:            Wed 29 Oct 2025 12:32:00 +0000
asID:                     396566
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:77:e0:34:8a:0e:8e:b4:1c:b0:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 31 12:32:00 2025 GMT
            Not After : Oct 29 12:32:00 2025 GMT
        Subject: CN=18a6e4d6-a38d-4cf6-a31c-2f4e17987e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a0:31:53:77:bf:71:1c:ed:7c:41:1f:7f:a9:
                    3d:7f:cb:58:3b:56:1f:10:6f:06:e3:fc:a5:42:1a:
                    f8:f4:ff:1b:32:5f:b5:55:72:fa:90:53:ef:6f:18:
                    14:a8:ad:91:56:71:68:79:3a:3e:8c:ba:6b:fe:87:
                    7f:00:f2:24:fb:52:6c:e9:75:a1:ee:0b:13:e3:ba:
                    70:86:2f:90:f8:8f:aa:a7:79:f8:6a:d8:6a:3d:c4:
                    18:74:7c:ef:74:b5:41:bb:3e:39:32:c4:f2:75:26:
                    e9:6a:84:bb:d8:90:6a:a7:89:ae:a6:27:58:ec:a2:
                    dc:db:ed:1a:07:1f:c4:be:25:05:a1:b9:fd:69:f7:
                    13:51:2a:73:de:79:46:9e:58:81:6e:c3:f2:7e:50:
                    48:ab:ef:7b:a0:27:00:fe:da:90:a7:fd:8d:f1:f7:
                    47:b1:13:c1:34:8a:c7:b7:7c:a1:62:5b:ff:54:e0:
                    6e:2b:68:14:77:48:92:a0:ca:a3:91:aa:26:29:81:
                    2a:94:cb:82:63:5d:07:8f:9f:ab:66:c3:15:dd:39:
                    2c:e2:6b:7e:e8:42:fc:77:9a:62:18:c5:c3:06:f9:
                    a6:ad:2a:34:e8:92:7b:47:5a:70:db:4c:ed:82:07:
                    1e:ef:01:0c:d0:8a:ba:10:47:bb:25:13:51:4f:c0:
                    83:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:64:96:0E:77:C0:9A:BB:B6:BB:D1:85:55:90:83:27:F1:D3:EC:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77d955de-89c8-3302-9e63-2aaae63e9d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:90:cb:40:14:12:85:28:61:00:83:1f:a6:39:9f:87:09:63:
         24:75:03:57:f9:62:7f:01:25:04:77:30:f9:17:49:84:54:72:
         bc:47:5e:f8:59:ba:ca:03:35:c6:14:1f:3f:8e:c2:46:4a:c4:
         0a:6f:df:b8:d3:0a:ba:e0:11:5a:02:ea:ef:8b:95:d5:9f:0e:
         68:25:92:d8:09:6e:32:88:1e:a1:4c:2c:89:7c:52:c2:3b:8c:
         b6:7e:13:2a:fa:99:1d:66:00:19:0e:99:e6:ac:5e:95:4e:63:
         bd:d3:c8:bf:ca:37:45:b1:13:31:92:29:e4:fc:c4:95:64:46:
         bb:e0:fa:20:65:fb:e4:b1:6c:8b:cd:df:95:3d:3e:9f:40:4f:
         6b:a8:f0:c1:4e:09:95:aa:00:b0:84:e4:5d:df:df:85:e9:53:
         5e:6d:f3:de:52:d0:f0:87:9b:46:4b:55:f6:f1:fb:ef:ce:1b:
         55:3f:51:8d:6a:c4:a8:ac:4a:d2:bc:06:df:36:62:26:b9:26:
         06:af:2d:28:18:23:04:10:6d:51:a7:76:b0:9b:4a:cf:b6:86:
         e4:4d:91:c4:a2:7c:f0:9d:ff:2c:9b:0e:16:cb:fa:fa:3d:49:
         52:6a:89:64:f9:ea:99:2c:97:d4:5e:eb:88:68:10:1c:25:41:
         f9:16:4f:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzd+A0ig6OtBywyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDczMTEyMzIwMFoXDTI1MTAyOTEyMzIwMFowLzEtMCsGA1UEAxMk
MThhNmU0ZDYtYTM4ZC00Y2Y2LWEzMWMtMmY0ZTE3OTg3ZTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06AxU3e/cRztfEEff6k9f8tYO1YfEG8G4/yl
Qhr49P8bMl+1VXL6kFPvbxgUqK2RVnFoeTo+jLpr/od/APIk+1Js6XWh7gsT47pw
hi+Q+I+qp3n4athqPcQYdHzvdLVBuz45MsTydSbpaoS72JBqp4mupidY7KLc2+0a
Bx/EviUFobn9afcTUSpz3nlGnliBbsPyflBIq+97oCcA/tqQp/2N8fdHsRPBNIrH
t3yhYlv/VOBuK2gUd0iSoMqjkaomKYEqlMuCY10Hj5+rZsMV3Tks4mt+6EL8d5pi
GMXDBvmmrSo06JJ7R1pw20ztggce7wEM0Iq6EEe7JRNRT8CDNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLFklg53wJq7trvRhVWQgyfx0+w3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzdkOTU1ZGUtODljOC0z
MzAyLTllNjMtMmFhYWU2M2U5ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKQy0AUEoUoYQCDH6Y5n4cJYyR1A1f5Yn8BJQR3MPkXSYRUcrxHXvhZ
usoDNcYUHz+OwkZKxApv37jTCrrgEVoC6u+LldWfDmglktgJbjKIHqFMLIl8UsI7
jLZ+Eyr6mR1mABkOmeasXpVOY73TyL/KN0WxEzGSKeT8xJVkRrvg+iBl++SxbIvN
35U9Pp9AT2uo8MFOCZWqALCE5F3f34XpU15t895S0PCHm0ZLVfbx++/OG1U/UY1q
xKisStK8Bt82Yia5JgavLSgYIwQQbVGndrCbSs+2huRNkcSifPCd/yybDhbL+vo9
SVJqiWT56pksl9Re64hoEBwlQfkWT9E=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:23:35 2025 by rpki-client