Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/99a1ede5-8f4f-3d10-ab92-ffdd215eb8b3.roa
File:                     99a1ede5-8f4f-3d10-ab92-ffdd215eb8b3.roa (raw, json)
Hash identifier:          LNPdeYogeCe7xy3RHFAWt/gajFBlZUfl48Zf3fRQk2s=
Subject key identifier:   6F:F1:9E:58:23:E2:AF:09:75:F6:CC:4E:F2:2D:B1:8F:9A:10:D8:7E
Certificate issuer:       /CN=a68ef886-c437-4b77-8d56-b917b6150d9a
Certificate serial:       010D0C9F4328584AB737B6DFF19E24A3A22F7A60
Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/99a1ede5-8f4f-3d10-ab92-ffdd215eb8b3.roa
Signing time:             Fri 01 Aug 2025 20:45:57 +0000
ROA not before:           Fri 01 Aug 2025 20:45:57 +0000
ROA not after:            Thu 30 Oct 2025 20:45:57 +0000
asID:                     91
IP address blocks:        204.145.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:37:b6:df:f1:9e:24:a3:a2:2f:7a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a
        Validity
            Not Before: Aug  1 20:45:57 2025 GMT
            Not After : Oct 30 20:45:57 2025 GMT
        Subject: CN=33bb4b9b-7b42-4de4-872b-27a26776078c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:a3:b7:60:06:03:15:eb:ae:af:b3:62:2f:
                    85:04:20:75:3e:44:5d:82:9b:87:52:09:c6:9b:d4:
                    a4:b3:18:ca:66:1a:f2:97:50:34:da:a2:3e:78:53:
                    c7:56:f7:50:e2:a8:31:90:8e:f5:8b:5a:0e:58:a4:
                    f9:9b:0d:95:d6:68:ba:da:ae:28:a2:f2:6c:0f:59:
                    2c:05:88:4e:bf:7e:3a:d4:10:dc:aa:47:1a:17:b1:
                    f8:83:cf:49:23:be:80:d9:2f:ba:8c:26:d3:bb:6d:
                    9b:ad:65:77:32:63:4e:96:60:3f:ca:24:11:44:c2:
                    7a:39:a0:85:f8:46:03:d8:ee:b3:94:13:7c:6c:cf:
                    a3:21:17:93:47:8c:b3:86:76:b8:94:65:49:10:b7:
                    af:62:26:6c:8b:a5:30:ac:79:06:17:67:ba:5c:4f:
                    53:52:42:9f:0a:4e:75:c8:2b:d3:bb:7c:88:8f:64:
                    68:56:f9:3f:10:a9:84:b4:53:a7:68:83:ff:ef:a2:
                    5d:77:ab:11:d8:1e:fb:8c:1d:8b:bb:89:d5:c6:64:
                    0e:3e:e7:91:08:1a:dd:cc:1b:92:d2:72:ec:97:d5:
                    0f:3a:67:23:18:14:4c:84:71:2b:8c:8f:5d:14:c4:
                    76:a4:0b:ea:8c:52:31:53:92:10:b8:51:34:87:19:
                    a9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F1:9E:58:23:E2:AF:09:75:F6:CC:4E:F2:2D:B1:8F:9A:10:D8:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/99a1ede5-8f4f-3d10-ab92-ffdd215eb8b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl

            X509v3 Authority Key Identifier:
                keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.145.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d7:fd:3b:0f:9a:a4:da:a2:ba:6a:e5:32:06:0d:fe:17:88:
         5b:e2:1f:10:3e:ac:83:5b:84:90:e9:0d:01:8b:0d:ad:d0:ac:
         8b:f1:94:7a:14:98:b3:95:6e:1a:88:8d:6b:0e:c1:a0:33:90:
         0b:6a:77:d1:3a:47:d9:d3:46:98:ab:d0:6e:6b:f7:50:71:f5:
         0c:67:43:0d:55:cc:6a:e6:7b:4f:f6:5c:50:de:0d:14:01:6f:
         ac:14:91:1c:cc:98:6e:ec:ee:2f:8b:45:44:33:11:11:e8:5d:
         3d:25:f7:dc:96:d2:3b:6a:25:c2:65:80:eb:e4:c6:76:0b:0b:
         d9:dd:f3:87:c2:7b:94:48:d3:91:d9:87:e6:32:2b:28:46:13:
         85:c9:5d:9e:e3:e9:75:ec:b1:40:10:ad:b3:32:45:c9:96:17:
         4c:1e:43:28:19:a0:53:bb:83:76:4f:bf:23:60:97:12:46:37:
         87:2f:a4:40:2c:c8:f7:72:ad:cf:c8:d5:d0:e0:97:05:d5:ce:
         d1:28:a9:b1:6e:2b:fe:6f:be:34:fa:de:15:d4:87:e8:95:09:
         06:88:c7:c8:23:5b:cf:83:6b:b3:17:3d:e7:33:12:29:05:94:
         d4:51:07:8a:ef:66:bb:42:0f:df:b4:c1:8d:e8:47:87:c7:3e:
         c0:1d:b5:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3N7bf8Z4ko6IvemAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw
ZDlhMB4XDTI1MDgwMTIwNDU1N1oXDTI1MTAzMDIwNDU1N1owLzEtMCsGA1UEAxMk
MzNiYjRiOWItN2I0Mi00ZGU0LTg3MmItMjdhMjY3NzYwNzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov6jt2AGAxXrrq+zYi+FBCB1PkRdgpuHUgnG
m9SksxjKZhryl1A02qI+eFPHVvdQ4qgxkI71i1oOWKT5mw2V1mi62q4oovJsD1ks
BYhOv3461BDcqkcaF7H4g89JI76A2S+6jCbTu22brWV3MmNOlmA/yiQRRMJ6OaCF
+EYD2O6zlBN8bM+jIReTR4yzhna4lGVJELevYiZsi6UwrHkGF2e6XE9TUkKfCk51
yCvTu3yIj2RoVvk/EKmEtFOnaIP/76Jdd6sR2B77jB2Lu4nVxmQOPueRCBrdzBuS
0nLsl9UPOmcjGBRMhHErjI9dFMR2pAvqjFIxU5IQuFE0hxmprQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG/xnlgj4q8JdfbMTvItsY+aENh+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl
Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvOTlhMWVkZTUtOGY0Zi0z
ZDEwLWFiOTItZmZkZDIxNWViOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk
NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1
MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3
YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJHNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELX/TsPmqTaorpq5TIGDf4XiFviHxA+rINbhJDpDQGLDa3QrIvxlHoU
mLOVbhqIjWsOwaAzkAtqd9E6R9nTRpir0G5r91Bx9QxnQw1VzGrme0/2XFDeDRQB
b6wUkRzMmG7s7i+LRUQzERHoXT0l99yW0jtqJcJlgOvkxnYLC9nd84fCe5RI05HZ
h+YyKyhGE4XJXZ7j6XXssUAQrbMyRcmWF0weQygZoFO7g3ZPvyNglxJGN4cvpEAs
yPdyrc/I1dDglwXVztEoqbFuK/5vvjT63hXUh+iVCQaIx8gjW8+Da7MXPeczEikF
lNRRB4rvZrtCD9+0wY3oR4fHPsAdtZE=
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:10:26 2025 by rpki-client