Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/bc03ef31-23dd-3af7-bae3-71da91faa331.roa
File:                     bc03ef31-23dd-3af7-bae3-71da91faa331.roa (raw, json)
Hash identifier:          QgfHjXpq8Xgj2juJtnffdecA4owE+mMpV+cegq5fmd0=
Subject key identifier:   FC:F4:11:5E:6E:9A:14:33:FA:3D:94:F6:B8:FF:89:10:B7:E7:C9:10
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584AB4EB78E3B1FB308912FCBD80
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/bc03ef31-23dd-3af7-bae3-71da91faa331.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     8560
IP address blocks:        192.195.77.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:78:e3:b1:fb:30:89:12:fc:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=135d8c70-085d-4808-b9e2-94e2150640b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:27:78:d8:2a:b1:6f:e9:46:61:ed:f4:28:
                    fb:5f:5c:02:27:85:ac:23:cf:90:43:e5:2a:7e:3a:
                    33:96:04:48:3f:1b:71:09:69:75:26:85:53:f9:54:
                    29:06:36:38:b2:29:58:5e:c9:ff:c6:66:64:85:57:
                    4f:27:9c:3f:2d:63:2b:76:87:ff:2a:96:27:90:99:
                    56:ca:c8:94:76:c9:ca:c3:5c:ab:d3:98:44:e9:5e:
                    7f:92:c6:7b:70:05:7d:79:71:82:62:2c:85:1a:e7:
                    a6:ba:03:f9:53:ed:86:2a:fc:d7:52:6f:a7:2e:64:
                    c6:b7:dd:3a:90:5c:ff:8c:89:02:a0:cf:81:d8:40:
                    53:7c:b9:75:07:7f:32:a9:4d:a9:92:ee:d8:81:89:
                    1d:d1:1a:d6:c6:52:24:57:d0:ad:27:29:cd:d1:10:
                    66:1d:ff:5a:6c:6e:09:dc:cf:fd:e4:bc:34:ba:99:
                    34:9d:44:4c:01:8a:99:af:46:c3:3f:13:c4:01:7e:
                    50:92:cd:b4:a7:08:51:20:56:89:dd:1b:bf:e8:9b:
                    a7:2c:e1:14:9b:db:5d:dd:5d:2c:d2:14:6a:ad:d3:
                    de:62:a1:ef:1a:5b:98:06:74:d7:be:77:79:b5:3c:
                    81:de:fa:3f:5e:8d:95:7b:52:75:15:e1:71:53:e0:
                    71:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F4:11:5E:6E:9A:14:33:FA:3D:94:F6:B8:FF:89:10:B7:E7:C9:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/bc03ef31-23dd-3af7-bae3-71da91faa331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.195.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c5:af:f8:84:7e:53:6f:10:4e:c1:6f:a0:dd:43:0d:a2:30:
         84:09:23:df:1c:d8:96:9e:08:f5:21:4f:77:e0:be:ec:29:41:
         65:8f:56:91:e4:f7:5f:15:a5:a1:62:8f:ae:cf:23:87:c2:b3:
         1e:0c:18:cf:08:a4:86:a5:31:24:d1:9b:14:9f:f1:38:49:8e:
         d4:96:6c:68:c7:4c:00:e8:40:c8:84:de:c2:f0:c2:68:a1:8b:
         da:93:cd:8c:d7:3d:55:bf:ed:19:52:67:80:0e:16:18:43:4e:
         77:e4:12:e9:05:fc:1c:aa:10:ad:88:e8:25:90:d0:66:c4:e8:
         79:06:74:0d:70:ae:dd:83:f6:f2:65:f1:31:7d:2e:04:02:67:
         56:86:3d:7e:df:df:3d:ea:aa:1e:a6:30:17:7f:cc:eb:9b:6b:
         22:20:17:2f:29:c0:b3:f6:83:d7:bb:ee:74:52:5f:9a:23:26:
         9a:36:6d:d5:74:94:76:32:c7:bf:d0:26:12:6b:bf:26:01:65:
         03:9f:72:e6:aa:89:75:1e:45:e7:8e:67:50:66:04:d8:7a:83:
         2d:70:0b:0c:75:c9:ba:f5:41:72:30:d2:1c:55:a2:37:dd:34:
         ed:03:41:52:3d:62:15:e1:e7:af:b2:fa:eb:ab:2e:aa:2d:ac:
         a3:fd:20:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063jjsfswiRL8vYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
MTM1ZDhjNzAtMDg1ZC00ODA4LWI5ZTItOTRlMjE1MDY0MGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dsneNgqsW/pRmHt9Cj7X1wCJ4WsI8+QQ+Uq
fjozlgRIPxtxCWl1JoVT+VQpBjY4silYXsn/xmZkhVdPJ5w/LWMrdof/KpYnkJlW
ysiUdsnKw1yr05hE6V5/ksZ7cAV9eXGCYiyFGuemugP5U+2GKvzXUm+nLmTGt906
kFz/jIkCoM+B2EBTfLl1B38yqU2pku7YgYkd0RrWxlIkV9CtJynN0RBmHf9abG4J
3M/95Lw0upk0nURMAYqZr0bDPxPEAX5Qks20pwhRIFaJ3Ru/6JunLOEUm9td3V0s
0hRqrdPeYqHvGluYBnTXvnd5tTyB3vo/Xo2Ve1J1FeFxU+BxSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPz0EV5umhQz+j2U9rj/iRC358kQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvYmMwM2VmMzEtMjNkZC0z
YWY3LWJhZTMtNzFkYTkxZmFhMzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMNNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbFr/iEflNvEE7Bb6DdQw2iMIQJI98c2JaeCPUhT3fgvuwpQWWPVpHk
918VpaFij67PI4fCsx4MGM8IpIalMSTRmxSf8ThJjtSWbGjHTADoQMiE3sLwwmih
i9qTzYzXPVW/7RlSZ4AOFhhDTnfkEukF/ByqEK2I6CWQ0GbE6HkGdA1wrt2D9vJl
8TF9LgQCZ1aGPX7f3z3qqh6mMBd/zOubayIgFy8pwLP2g9e77nRSX5ojJpo2bdV0
lHYyx7/QJhJrvyYBZQOfcuaqiXUeReeOZ1BmBNh6gy1wCwx1ybr1QXIw0hxVojfd
NO0DQVI9YhXh56+y+uurLqotrKP9IPI=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:57:34 2025 by rpki-client