Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11f726b6-96f1-3faf-8644-bdb6161ae2be.roa
File:                     11f726b6-96f1-3faf-8644-bdb6161ae2be.roa (raw, json)
Hash identifier:          +QkzayLCdapAofTIVqMBsDDEes9BbIk0K9TF+KmZ0Lo=
Subject key identifier:   CF:DF:03:6F:22:AB:7F:C8:80:C3:7A:E0:BA:0E:F2:15:07:34:CF:B0
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849F44A69ADE9CAADD23D3D4640
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11f726b6-96f1-3faf-8644-bdb6161ae2be.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        204.195.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:69:ad:e9:ca:ad:d2:3d:3d:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=6a9ff788-46f8-473a-8ea7-2bc2eb97dc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c8:80:d2:91:69:06:7b:04:43:61:ec:66:65:
                    75:26:b2:db:ca:91:a6:74:37:62:af:ac:f6:15:bd:
                    1a:ce:2a:78:f9:9b:e7:dc:ba:15:d0:00:3e:77:9a:
                    20:ab:3c:41:1a:62:c4:f7:95:02:d1:ac:19:04:35:
                    fa:92:51:da:a0:52:c2:7c:f9:d8:98:c9:e3:f0:79:
                    17:75:3d:46:39:ed:fb:14:91:0c:4d:21:c5:eb:a8:
                    55:2f:53:6b:7e:e6:53:96:c0:23:08:ad:d9:88:f1:
                    cc:e4:79:f0:81:3f:ae:17:80:95:c7:5f:48:1d:57:
                    e4:13:51:01:e7:9c:c5:da:03:87:35:21:2b:3c:c7:
                    7c:dc:09:2e:82:a1:ea:f1:f6:cb:da:41:1f:b5:32:
                    70:6f:17:b0:10:8d:fd:9f:f1:c1:56:a2:28:16:04:
                    ec:9d:b0:52:73:8b:ee:50:58:8f:34:1a:3f:92:f8:
                    4b:eb:c3:58:e1:18:2d:1e:4b:6f:4b:f9:6c:49:a3:
                    13:74:0d:00:d1:d4:37:9a:1f:d5:1d:99:39:a3:55:
                    f6:e4:1e:22:9f:cb:27:0e:ec:20:37:8a:40:75:a9:
                    5a:61:79:29:de:83:76:4e:55:c9:9a:a8:aa:8b:72:
                    4a:ec:b6:5a:2c:cf:7b:4e:97:0e:48:43:5b:0c:f4:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DF:03:6F:22:AB:7F:C8:80:C3:7A:E0:BA:0E:F2:15:07:34:CF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11f726b6-96f1-3faf-8644-bdb6161ae2be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f3:fa:c1:20:33:78:c3:0b:9d:99:69:01:4f:f4:b4:50:02:
         34:54:7b:50:b7:ee:55:38:3b:f8:3f:b3:36:b9:b9:e4:73:44:
         b9:09:55:d7:fe:27:fb:22:2a:52:50:1e:c0:54:2b:a8:26:a1:
         b9:01:79:3e:02:59:b5:c4:91:65:61:97:ce:c0:f5:0e:e8:6a:
         7c:a7:81:b1:c2:c1:69:03:17:af:31:6c:bd:cb:1e:d9:6e:38:
         53:2c:78:df:ab:d1:af:3a:8d:fd:9d:ed:95:01:dd:3a:57:a3:
         c0:ff:0d:89:e6:fb:ab:11:4c:90:77:74:fd:b9:36:c6:59:cb:
         df:23:e0:42:06:3d:b0:bd:21:ad:e1:f3:56:4a:99:3e:8c:96:
         bc:05:c5:9a:39:67:c2:a6:15:8d:8c:7a:2b:66:dd:2b:d1:9d:
         4d:c6:db:da:cc:60:cc:cc:a8:29:cd:d3:ee:cc:fb:64:9b:ed:
         fe:f9:16:41:8b:dc:81:f5:99:96:f2:22:0e:b4:c9:d2:49:b5:
         e9:a5:f7:a3:37:a6:70:72:95:f8:c3:d9:c9:eb:41:17:9f:b8:
         e7:5b:bc:71:d0:52:80:ad:d5:74:01:fa:d9:01:f1:7c:52:b1:
         62:9a:df:f5:e9:51:41:c8:f9:e9:64:30:3a:ec:ab:19:2f:19:
         30:4d:5d:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0Smmt6cqt0j09RkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk
NmE5ZmY3ODgtNDZmOC00NzNhLThlYTctMmJjMmViOTdkYzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisiA0pFpBnsEQ2HsZmV1JrLbypGmdDdir6z2
Fb0azip4+Zvn3LoV0AA+d5ogqzxBGmLE95UC0awZBDX6klHaoFLCfPnYmMnj8HkX
dT1GOe37FJEMTSHF66hVL1NrfuZTlsAjCK3ZiPHM5HnwgT+uF4CVx19IHVfkE1EB
55zF2gOHNSErPMd83AkugqHq8fbL2kEftTJwbxewEI39n/HBVqIoFgTsnbBSc4vu
UFiPNBo/kvhL68NY4RgtHktvS/lsSaMTdA0A0dQ3mh/VHZk5o1X25B4in8snDuwg
N4pAdalaYXkp3oN2TlXJmqiqi3JK7LZaLM97TpcOSENbDPSwCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/fA28iq3/IgMN64LoO8hUHNM+wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMTFmNzI2YjYtOTZmMS0z
ZmFmLTg2NDQtYmRiNjE2MWFlMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjz+sEgM3jDC52ZaQFP9LRQAjRUe1C37lU4O/g/sza5ueRzRLkJVdf+
J/siKlJQHsBUK6gmobkBeT4CWbXEkWVhl87A9Q7oanyngbHCwWkDF68xbL3LHtlu
OFMseN+r0a86jf2d7ZUB3TpXo8D/DYnm+6sRTJB3dP25NsZZy98j4EIGPbC9Ia3h
81ZKmT6MlrwFxZo5Z8KmFY2Meitm3SvRnU3G29rMYMzMqCnN0+7M+2Sb7f75FkGL
3IH1mZbyIg60ydJJteml96M3pnBylfjD2cnrQRefuOdbvHHQUoCt1XQB+tkB8XxS
sWKa3/XpUUHI+elkMDrsqxkvGTBNXe8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:43:31 2025 by rpki-client