Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/17867b21-0c1e-3b6c-8c19-6ea3c4c357c6.roa
File:                     17867b21-0c1e-3b6c-8c19-6ea3c4c357c6.roa (raw, json)
Hash identifier:          ABGkkOavNe4I6BWGyOoNKBZHyh7ujKHPY9NEuZ9UkEs=
Subject key identifier:   B8:93:FB:FC:13:A4:91:B6:8A:DF:94:9E:BE:AA:3A:30:F1:A7:17:34
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1612186C1BF511FD7128880
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/17867b21-0c1e-3b6c-8c19-6ea3c4c357c6.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        97.78.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:21:86:c1:bf:51:1f:d7:12:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=aae76b2b-f39d-4d54-a4af-f9de16ece98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:30:b5:f9:6b:97:b4:a9:3b:43:f8:ae:63:
                    20:e5:38:3c:9f:92:f9:3f:e5:f0:c2:8e:cd:ff:ff:
                    ea:fe:db:dd:af:3a:8b:7f:85:af:43:02:25:b0:c2:
                    20:a7:61:66:fb:ab:1f:c5:8d:9c:40:42:26:85:55:
                    7a:64:d3:76:1f:f3:7c:06:89:e0:42:c1:b1:19:c8:
                    51:4c:f7:b8:2f:d8:f0:c7:9d:83:4b:9b:68:45:87:
                    be:d8:72:10:6f:f3:26:20:53:30:d2:42:c4:55:07:
                    09:89:66:b8:53:df:7a:bd:6d:ab:a9:c5:d8:66:93:
                    54:98:19:8e:3c:ac:9c:e4:fd:44:77:f4:d7:09:cc:
                    88:35:63:6c:57:09:07:a3:9f:40:c8:ee:6b:72:37:
                    a6:ad:2e:bb:a3:0e:33:07:6a:2a:5e:0b:6a:74:76:
                    82:ee:00:e1:c3:89:54:b9:cd:6e:7f:ae:0f:fa:a8:
                    49:5a:9f:34:83:a3:f3:9e:b4:8b:4e:d0:b0:b4:7a:
                    70:26:0e:25:17:74:63:60:5d:41:48:e3:19:e8:0c:
                    12:67:09:45:1c:94:8f:b3:e3:b5:97:c8:49:47:67:
                    b9:e6:ce:51:83:b6:82:9f:c8:1d:c1:12:11:86:2c:
                    6d:b2:22:ab:a8:cb:5b:a0:b4:31:bd:af:f6:ca:bd:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:93:FB:FC:13:A4:91:B6:8A:DF:94:9E:BE:AA:3A:30:F1:A7:17:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/17867b21-0c1e-3b6c-8c19-6ea3c4c357c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.78.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9a:a9:ce:ba:90:ee:68:9f:d0:ad:ca:4d:13:87:e8:b3:eb:
         2c:b6:67:e0:a1:1f:0c:42:3d:23:8b:5c:6b:03:e9:e5:9a:1e:
         0b:5a:05:01:a5:bc:b8:35:0a:80:4d:b2:3e:98:79:a6:3e:ed:
         1d:b3:2e:06:f0:62:3b:62:16:71:5d:83:de:79:38:1a:18:1c:
         b5:89:3e:60:90:56:84:ec:07:d6:c6:7f:97:a0:4a:5d:d9:54:
         11:33:95:eb:e5:6b:98:09:fe:45:20:c1:56:c6:bd:1d:e5:16:
         7a:b3:a2:33:88:cf:57:2c:fc:f8:35:81:4e:b5:9a:3c:2b:a3:
         98:48:e5:7a:a4:92:4b:0d:20:80:a4:13:54:04:b1:7e:96:74:
         5b:22:7c:1f:c4:e0:ab:a4:5b:fe:94:3c:ba:6f:0b:96:95:14:
         f5:d3:1e:81:76:a6:6f:54:cb:19:8f:1d:bc:22:4c:55:1f:24:
         23:1d:a2:2e:d3:c3:60:e6:14:ff:80:22:4f:a3:6a:0e:6a:23:
         99:d6:be:87:7e:68:19:8c:05:f5:bb:f5:10:4e:49:8d:77:77:
         ad:f3:f0:b4:af:89:ed:b7:cf:56:e4:bb:ea:aa:c2:9e:f2:02:
         6c:f7:40:e9:df:dd:88:cd:8d:a8:5a:4f:a0:2f:3f:54:e4:da:
         6b:58:7c:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYSGGwb9RH9cSiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
YWFlNzZiMmItZjM5ZC00ZDU0LWE0YWYtZjlkZTE2ZWNlOThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfgwtflrl7SpO0P4rmMg5Tg8n5L5P+Xwwo7N
///q/tvdrzqLf4WvQwIlsMIgp2Fm+6sfxY2cQEImhVV6ZNN2H/N8BongQsGxGchR
TPe4L9jwx52DS5toRYe+2HIQb/MmIFMw0kLEVQcJiWa4U996vW2rqcXYZpNUmBmO
PKyc5P1Ed/TXCcyINWNsVwkHo59AyO5rcjemrS67ow4zB2oqXgtqdHaC7gDhw4lU
uc1uf64P+qhJWp80g6PznrSLTtCwtHpwJg4lF3RjYF1BSOMZ6AwSZwlFHJSPs+O1
l8hJR2e55s5Rg7aCn8gdwRIRhixtsiKrqMtboLQxva/2yr2q+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLiT+/wTpJG2it+Unr6qOjDxpxc0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMTc4NjdiMjEtMGMxZS0z
YjZjLThjMTktNmVhM2M0YzM1N2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYU7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWaqc66kO5on9Ctyk0Th+iz6yy2Z+ChHwxCPSOLXGsD6eWaHgtaBQGl
vLg1CoBNsj6YeaY+7R2zLgbwYjtiFnFdg955OBoYHLWJPmCQVoTsB9bGf5egSl3Z
VBEzlevla5gJ/kUgwVbGvR3lFnqzojOIz1cs/Pg1gU61mjwro5hI5XqkkksNIICk
E1QEsX6WdFsifB/E4KukW/6UPLpvC5aVFPXTHoF2pm9UyxmPHbwiTFUfJCMdoi7T
w2DmFP+AIk+jag5qI5nWvod+aBmMBfW79RBOSY13d63z8LSvie23z1bku+qqwp7y
Amz3QOnf3YjNjahaT6AvP1Tk2mtYfMQ=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:11 2025 by rpki-client