Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d4f9a49-dc28-3351-bde3-98642755927b.roa
File:                     2d4f9a49-dc28-3351-bde3-98642755927b.roa (raw, json)
Hash identifier:          IVOduAWzGQ6jX7ZC5lYnH3tAdD5cAxWIO3k6vYBcgCg=
Subject key identifier:   3F:5B:0F:ED:86:CB:08:2E:AD:D5:06:EC:D3:F3:AA:AC:B7:75:BD:98
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E577F501404B5FDB66E68C060
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d4f9a49-dc28-3351-bde3-98642755927b.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        204.195.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:50:14:04:b5:fd:b6:6e:68:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=86716942-a908-45b1-98cf-7a351679d13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7a:47:8b:19:6a:d2:2f:a1:c3:57:11:00:ab:
                    55:46:8c:11:b6:af:7e:c3:52:f8:23:51:24:02:40:
                    ec:b3:a1:80:30:9a:92:5e:8e:97:2a:c9:35:b6:7e:
                    dd:14:8d:87:4c:af:57:ae:b8:7c:86:2c:0e:ed:ff:
                    73:70:b0:50:b1:55:42:03:34:b5:9e:ae:e2:ff:98:
                    37:29:98:1a:ef:0b:a1:83:2b:0f:a0:97:ff:20:21:
                    09:5b:33:cf:f8:9c:4b:50:4e:1d:88:91:15:65:fa:
                    ae:6e:c3:cf:f4:f2:96:e6:3a:74:1f:7e:c6:15:b7:
                    d7:c9:38:5c:f6:25:16:e1:82:8f:d3:32:f0:a6:8d:
                    30:9d:c4:b6:1e:bc:b7:46:00:03:c6:4d:fc:17:0f:
                    e9:44:4e:80:56:54:ea:6c:a5:2f:a1:ff:9d:49:ed:
                    1e:ea:84:c6:c8:45:89:ab:e3:cf:3a:45:39:fc:4c:
                    69:a5:12:d7:5a:9e:d8:e0:31:c3:84:31:32:3d:52:
                    20:ce:c5:74:1c:e5:7d:18:a4:19:4b:88:e1:07:cc:
                    4a:71:68:0e:ec:08:83:1b:1e:75:94:07:69:58:89:
                    81:88:29:8a:b3:df:fd:cd:46:8b:d8:20:a4:3b:b8:
                    6b:4d:0c:78:9f:9c:66:e5:10:aa:cd:13:f7:83:95:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5B:0F:ED:86:CB:08:2E:AD:D5:06:EC:D3:F3:AA:AC:B7:75:BD:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d4f9a49-dc28-3351-bde3-98642755927b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:5b:04:bf:04:a0:f7:fc:a8:c1:73:b4:2b:22:84:c1:01:cb:
         44:97:ae:ce:46:9b:c8:2d:b4:a1:de:2c:1c:36:5b:a4:47:4b:
         89:5c:37:fd:1b:60:26:e4:35:46:4f:e1:ed:4e:f7:8a:62:1f:
         b2:76:2b:42:5e:f5:fd:7a:00:fb:ef:b7:22:1f:77:88:3c:d3:
         c4:cc:ba:ba:43:93:2e:c3:ff:f3:40:90:b6:32:0a:d6:59:90:
         b3:4f:2b:0f:1c:2c:58:30:47:b3:e0:9f:f4:09:1d:bc:10:06:
         85:57:c6:5b:6c:0f:d4:b4:5e:12:a0:f4:1b:32:4f:9f:19:b9:
         09:19:cc:f7:47:b8:28:b5:9f:f7:99:1f:1f:f2:ec:4a:52:5f:
         bb:44:0f:d3:28:53:90:7f:28:11:c4:b4:9e:68:a6:94:87:2f:
         2d:b7:7e:67:a0:9c:8c:4b:f5:fc:c3:3a:3c:0f:33:c8:7b:3f:
         99:6f:ff:e3:11:41:69:aa:d6:b9:0f:d0:c3:72:c6:e4:f9:d6:
         ff:46:69:d6:69:11:0c:cb:3f:b2:90:50:6a:ab:71:64:d8:a2:
         88:2d:4b:90:5b:b8:91:da:6c:ba:b2:74:39:96:8e:f5:16:b5:
         ad:89:98:28:d7:fd:e2:88:47:d3:6a:e1:f3:71:9d:66:0d:a5:
         df:19:26:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Xf1AUBLX9tm5owGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk
ODY3MTY5NDItYTkwOC00NWIxLTk4Y2YtN2EzNTE2NzlkMTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4npHixlq0i+hw1cRAKtVRowRtq9+w1L4I1Ek
AkDss6GAMJqSXo6XKsk1tn7dFI2HTK9Xrrh8hiwO7f9zcLBQsVVCAzS1nq7i/5g3
KZga7wuhgysPoJf/ICEJWzPP+JxLUE4diJEVZfqubsPP9PKW5jp0H37GFbfXyThc
9iUW4YKP0zLwpo0wncS2Hry3RgADxk38Fw/pRE6AVlTqbKUvof+dSe0e6oTGyEWJ
q+PPOkU5/ExppRLXWp7Y4DHDhDEyPVIgzsV0HOV9GKQZS4jhB8xKcWgO7AiDGx51
lAdpWImBiCmKs9/9zUaL2CCkO7hrTQx4n5xm5RCqzRP3g5VtuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD9bD+2GywgurdUG7NPzqqy3db2YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmQ0ZjlhNDktZGMyOC0z
MzUxLWJkZTMtOTg2NDI3NTU5MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzMPUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABBbBL8EoPf8qMFztCsihMEBy0SXrs5Gm8gttKHeLBw2W6RHS4lcN/0b
YCbkNUZP4e1O94piH7J2K0Je9f16APvvtyIfd4g808TMurpDky7D//NAkLYyCtZZ
kLNPKw8cLFgwR7Pgn/QJHbwQBoVXxltsD9S0XhKg9BsyT58ZuQkZzPdHuCi1n/eZ
Hx/y7EpSX7tED9MoU5B/KBHEtJ5oppSHLy23fmegnIxL9fzDOjwPM8h7P5lv/+MR
QWmq1rkP0MNyxuT51v9GadZpEQzLP7KQUGqrcWTYoogtS5BbuJHabLqydDmWjvUW
ta2JmCjX/eKIR9Nq4fNxnWYNpd8ZJjE=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:45:53 2026 by rpki-client