Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1340615b-1f97-3909-95a6-e4a0e3e503ab.roa
File:                     1340615b-1f97-3909-95a6-e4a0e3e503ab.roa (raw, json)
Hash identifier:          vWuWXgk1hIgQjmKolHazZDujmQ4So/JVYq6NFcIiZeY=
Subject key identifier:   EE:50:EF:3B:AD:7A:DB:C2:DE:96:75:96:55:42:DE:3E:11:9C:D2:93
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A6F20820D4DB3BB0E2B1CFF00
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1340615b-1f97-3909-95a6-e4a0e3e503ab.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     15164
IP address blocks:        158.247.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:82:0d:4d:b3:bb:0e:2b:1c:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=6548fd67-4a72-46c2-b87a-9d1f05ada7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1a:7c:6e:42:b0:95:f0:8d:35:40:99:44:40:
                    20:ba:df:29:4b:e7:1e:8c:3a:be:55:20:03:51:87:
                    ec:e3:88:d1:7c:4d:cc:f4:54:2c:36:9c:ca:58:51:
                    5c:7b:7b:da:b8:25:ee:08:fc:55:7a:f1:b1:bd:1f:
                    ef:d0:49:f5:e6:5f:df:77:be:d9:d8:32:97:78:6d:
                    b7:02:a1:22:a3:d3:71:1b:8e:09:26:f6:ef:94:18:
                    82:b9:63:a7:24:ac:18:59:75:17:0a:51:dc:be:d9:
                    2c:30:3e:6c:b3:79:8f:d0:08:a9:2c:20:e9:0c:c5:
                    11:b1:87:85:86:a1:63:9e:2b:98:cd:db:66:50:d8:
                    33:f0:4d:b4:7e:29:5e:d3:67:74:4b:2a:22:42:d7:
                    e8:29:76:29:f8:24:07:06:89:e3:63:63:df:78:45:
                    e0:02:ad:b1:3e:4a:07:5b:76:7e:d5:84:d7:bd:f8:
                    74:08:e4:59:1b:ee:5d:f5:e0:b8:4c:2e:f3:b9:9e:
                    89:4f:83:39:72:36:af:ed:37:54:7c:64:77:6c:bb:
                    b5:40:08:96:22:37:1a:57:52:1e:bb:96:1e:58:af:
                    0c:de:ac:2b:c4:9e:23:40:94:a7:fa:1d:7b:67:8a:
                    f5:e6:9a:f2:1d:cf:97:da:ae:66:83:4c:f4:92:fc:
                    f6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:50:EF:3B:AD:7A:DB:C2:DE:96:75:96:55:42:DE:3E:11:9C:D2:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1340615b-1f97-3909-95a6-e4a0e3e503ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.247.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:38:8e:61:e2:e2:ca:c2:da:58:b7:00:95:65:80:08:af:19:
         4e:01:84:9a:4a:da:22:bb:78:1a:64:42:57:58:b0:6b:9a:cc:
         a9:33:5d:4b:54:aa:34:44:f8:d7:b0:bb:e5:52:1c:1e:43:4a:
         79:bc:58:97:8e:f7:71:d2:cb:97:cd:17:5f:61:b8:9b:45:a8:
         7f:82:d7:82:d3:0c:9a:eb:40:0b:c1:c6:47:99:30:a0:1b:fb:
         af:23:77:6e:c4:a4:45:1e:08:67:f6:41:f7:d7:cb:20:a0:7a:
         04:64:41:76:d3:d9:b3:00:4f:de:5e:39:b1:04:2f:4e:01:e1:
         1c:e0:94:66:45:83:68:4a:22:f5:52:ed:f4:11:67:28:21:9a:
         5c:29:55:f6:67:fa:fe:d8:68:2f:e7:0b:56:29:08:07:a4:11:
         da:21:7c:e4:af:25:9c:99:9b:7d:a9:e8:86:58:e9:bc:fb:43:
         f2:cb:51:88:4b:2c:78:ef:79:6e:5a:54:06:57:24:08:01:19:
         ac:3b:e4:ed:68:f0:f8:4a:a5:9f:8f:74:d7:cc:3b:aa:0e:24:
         71:b2:b9:21:ed:73:07:b3:ef:ba:78:0f:a8:59:1d:b1:d9:29:
         81:ea:f3:9c:a9:eb:cf:f7:ce:e7:91:b9:3e:dd:9d:42:0a:be:
         0b:b3:4b:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIIINTbO7Disc/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk
NjU0OGZkNjctNGE3Mi00NmMyLWI4N2EtOWQxZjA1YWRhN2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhp8bkKwlfCNNUCZREAgut8pS+cejDq+VSAD
UYfs44jRfE3M9FQsNpzKWFFce3vauCXuCPxVevGxvR/v0En15l/fd77Z2DKXeG23
AqEio9NxG44JJvbvlBiCuWOnJKwYWXUXClHcvtksMD5ss3mP0AipLCDpDMURsYeF
hqFjniuYzdtmUNgz8E20file02d0SyoiQtfoKXYp+CQHBonjY2PfeEXgAq2xPkoH
W3Z+1YTXvfh0CORZG+5d9eC4TC7zuZ6JT4M5cjav7TdUfGR3bLu1QAiWIjcaV1Ie
u5YeWK8M3qwrxJ4jQJSn+h17Z4r15pryHc+X2q5mg0z0kvz2qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO5Q7zutetvC3pZ1llVC3j4RnNKTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMTM0MDYxNWItMWY5Ny0z
OTA5LTk1YTYtZTRhMGUzZTUwM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnvdNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALg4jmHi4srC2li3AJVlgAivGU4BhJpK2iK7eBpkQldYsGuazKkzXUtU
qjRE+Newu+VSHB5DSnm8WJeO93HSy5fNF19huJtFqH+C14LTDJrrQAvBxkeZMKAb
+68jd27EpEUeCGf2QffXyyCgegRkQXbT2bMAT95eObEEL04B4RzglGZFg2hKIvVS
7fQRZyghmlwpVfZn+v7YaC/nC1YpCAekEdohfOSvJZyZm32p6IZY6bz7Q/LLUYhL
LHjveW5aVAZXJAgBGaw75O1o8PhKpZ+PdNfMO6oOJHGyuSHtcwez77p4D6hZHbHZ
KYHq85yp68/3zueRuT7dnUIKvguzS/o=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:41:23 2025 by rpki-client