Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f8a6abde-6743-3711-aa5d-bca3ffa4c6c5.roa
File:                     f8a6abde-6743-3711-aa5d-bca3ffa4c6c5.roa (raw, json)
Hash identifier:          54KxsIcAzptRkje8ukQu8ey3B1F+B1+UrQpsfUB88Nk=
Subject key identifier:   69:57:B8:10:87:49:BF:D4:D6:C4:23:54:C7:4D:57:DF:14:FE:5A:2E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584C969C5C4728ACC4A29930E300
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f8a6abde-6743-3711-aa5d-bca3ffa4c6c5.roa
Signing time:             Tue 20 Jan 2026 14:00:39 +0000
ROA not before:           Tue 20 Jan 2026 14:00:39 +0000
ROA not after:            Mon 20 Apr 2026 13:00:39 +0000
asID:                     13335
IP address blocks:        204.195.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:96:9c:5c:47:28:ac:c4:a2:99:30:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jan 20 14:00:39 2026 GMT
            Not After : Apr 20 13:00:39 2026 GMT
        Subject: CN=ad1c0f65-8cab-402e-be96-1f4c2992e2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1f:07:28:63:d7:4a:11:88:eb:09:75:43:28:
                    96:3f:4d:7c:3a:0f:25:d7:eb:2b:67:83:89:19:c5:
                    eb:a9:34:57:17:b6:42:73:28:0a:28:de:e4:80:90:
                    e2:8a:44:37:82:3e:59:69:85:ec:f2:0c:fc:68:b7:
                    81:cb:55:1c:e4:18:07:88:c3:ea:95:df:2f:6c:24:
                    c8:c5:9c:ed:d4:6e:e4:d0:e4:39:29:83:39:99:40:
                    fb:75:5c:d7:73:98:dd:2f:8d:4f:61:9d:75:50:b0:
                    ca:d7:ad:cc:8e:ca:77:b0:b2:fb:81:c4:ed:77:24:
                    6a:b4:cf:49:13:d7:c8:38:1b:e8:a8:74:dd:9d:68:
                    f4:bc:c7:a1:c8:c0:93:c6:fe:d0:6c:4a:b0:23:cb:
                    f3:de:49:9a:47:71:22:94:d7:85:3b:3e:06:cb:02:
                    fe:26:2f:6e:66:28:b8:d1:94:3f:d0:39:6c:af:c6:
                    81:4e:6f:ad:24:b8:30:7d:a4:b5:f0:ea:2b:0f:7b:
                    ce:97:7a:37:4d:e7:ff:36:63:57:19:af:af:4e:bf:
                    e8:a7:ae:63:4f:2c:97:51:e1:bf:a2:ae:29:8f:47:
                    bf:b9:8f:ce:fd:42:dc:42:04:e4:0a:9a:e3:dc:8f:
                    d8:7b:45:ad:a6:cf:f8:cb:5a:a4:39:8b:52:ad:b3:
                    85:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:57:B8:10:87:49:BF:D4:D6:C4:23:54:C7:4D:57:DF:14:FE:5A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f8a6abde-6743-3711-aa5d-bca3ffa4c6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:55:a5:f3:3c:52:1c:ba:29:1b:33:98:cf:cf:ed:c3:17:8c:
         28:df:19:dc:07:a1:ab:a6:07:e6:8a:78:ea:b7:18:63:fd:52:
         27:a3:7b:1d:de:46:41:9a:da:59:59:d5:40:84:ad:ae:4d:3d:
         66:29:11:63:7a:9c:f3:50:c9:d8:40:10:dc:3e:ef:e9:93:97:
         88:35:0c:cd:a9:94:88:17:5b:0f:22:0a:0b:0b:0a:1a:9d:33:
         43:83:b6:7b:5f:d5:c3:cc:b7:31:41:27:df:aa:cd:5d:fc:dc:
         86:5f:31:05:5a:b8:c8:a6:1b:d4:b6:dd:b8:1b:45:7b:b3:dc:
         57:d2:4c:ac:60:9c:13:85:97:f4:77:6f:53:a7:91:3b:23:bc:
         ca:59:f9:96:71:6b:dc:10:ee:8c:1f:5b:56:91:1c:1f:e7:65:
         cf:54:32:b9:35:f5:5d:46:77:bd:a1:fe:c5:c9:09:26:28:4d:
         32:eb:f4:1a:27:af:14:53:b4:e9:0a:b5:51:14:4d:1c:d4:45:
         64:b8:60:77:29:41:29:4d:ed:80:4f:b3:6b:f8:e8:00:7a:dc:
         3a:61:5c:c9:e7:eb:38:6a:b8:f1:fa:00:36:70:a3:c8:ea:40:
         a0:7e:d8:35:94:dd:6e:bd:fc:02:ed:c6:62:5d:85:ef:5e:3d:
         7e:38:23:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnFxHKKzEopkw4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk
YWQxYzBmNjUtOGNhYi00MDJlLWJlOTYtMWY0YzI5OTJlMmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh8HKGPXShGI6wl1QyiWP018Og8l1+srZ4OJ
GcXrqTRXF7ZCcygKKN7kgJDiikQ3gj5ZaYXs8gz8aLeBy1Uc5BgHiMPqld8vbCTI
xZzt1G7k0OQ5KYM5mUD7dVzXc5jdL41PYZ11ULDK163Mjsp3sLL7gcTtdyRqtM9J
E9fIOBvoqHTdnWj0vMehyMCTxv7QbEqwI8vz3kmaR3EilNeFOz4GywL+Ji9uZii4
0ZQ/0Dlsr8aBTm+tJLgwfaS18OorD3vOl3o3Tef/NmNXGa+vTr/op65jTyyXUeG/
oq4pj0e/uY/O/ULcQgTkCprj3I/Ye0Wtps/4y1qkOYtSrbOFVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGlXuBCHSb/U1sQjVMdNV98U/louMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjhhNmFiZGUtNjc0My0z
NzExLWFhNWQtYmNhM2ZmYTRjNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADhVpfM8Uhy6KRszmM/P7cMXjCjfGdwHoaumB+aKeOq3GGP9Uiejex3e
RkGa2llZ1UCEra5NPWYpEWN6nPNQydhAENw+7+mTl4g1DM2plIgXWw8iCgsLChqd
M0ODtntf1cPMtzFBJ9+qzV383IZfMQVauMimG9S23bgbRXuz3FfSTKxgnBOFl/R3
b1OnkTsjvMpZ+ZZxa9wQ7owfW1aRHB/nZc9UMrk19V1Gd72h/sXJCSYoTTLr9Bon
rxRTtOkKtVEUTRzURWS4YHcpQSlN7YBPs2v46AB63DphXMnn6zhquPH6ADZwo8jq
QKB+2DWU3W69/ALtxmJdhe9ePX44I9U=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:45 2026 by rpki-client