Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/860a423e-5821-3417-a231-43f13e3ac94f.roa
File:                     860a423e-5821-3417-a231-43f13e3ac94f.roa (raw, json)
Hash identifier:          9Lc+4I7VUY1+1lpvVzjYDfGcPg5QteqTjCetIJ+UIjA=
Subject key identifier:   0D:FE:D6:85:9F:C8:46:79:C8:A8:F1:22:10:AA:BC:1E:59:72:7F:D7
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849151161F7AFC4181AA62B8BC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/860a423e-5821-3417-a231-43f13e3ac94f.roa
Signing time:             Wed 05 Mar 2025 02:00:40 +0000
ROA not before:           Wed 05 Mar 2025 02:00:40 +0000
ROA not after:            Tue 03 Jun 2025 01:00:40 +0000
asID:                     13335
IP address blocks:        204.195.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:11:61:f7:af:c4:18:1a:a6:2b:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar  5 02:00:40 2025 GMT
            Not After : Jun  3 01:00:40 2025 GMT
        Subject: CN=bbc8e69e-4773-4f6c-bcf0-514e632a7081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8e:8f:96:33:96:19:db:8e:fe:7f:8d:d4:60:
                    4f:d2:b9:2f:6c:1e:71:3b:a9:c2:8e:23:a7:7a:e0:
                    d2:a6:36:70:f7:55:b2:2f:b0:ea:de:7c:6a:ed:15:
                    49:b9:8a:de:65:38:0c:50:ef:71:07:03:0c:78:04:
                    fb:86:75:dd:9d:30:c4:37:b6:85:fb:23:cb:9a:08:
                    19:e5:2c:68:a9:6f:33:0f:69:b3:ce:0b:19:a7:0e:
                    cf:2a:3a:87:78:5d:1b:ab:5d:e1:21:92:39:c5:5e:
                    e9:db:23:2f:80:97:6c:ba:68:dd:e9:0e:39:a3:0e:
                    65:5f:53:43:a9:0e:77:c9:b5:0f:c8:35:cd:3a:ba:
                    a2:f6:38:ba:4c:72:ac:ac:17:f6:0f:2e:03:1c:d2:
                    fc:1a:d7:ed:88:9b:61:05:5c:00:f9:58:50:5a:b9:
                    b2:93:3b:3f:79:14:dd:b7:48:49:00:8c:5f:0f:cf:
                    32:77:a2:44:d3:72:6f:8f:e6:e1:ce:c3:64:25:06:
                    d1:69:4d:35:65:bc:40:1a:52:e9:d5:b0:4c:50:49:
                    71:bb:aa:e1:76:5d:be:e7:9a:b0:b5:cd:d6:1d:da:
                    f0:36:16:df:ff:de:8b:7c:9b:c9:40:ef:cc:1d:d2:
                    3d:6e:06:6d:41:84:32:e6:a6:8e:2b:61:b9:cc:06:
                    d1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FE:D6:85:9F:C8:46:79:C8:A8:F1:22:10:AA:BC:1E:59:72:7F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/860a423e-5821-3417-a231-43f13e3ac94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4b:da:32:be:14:06:50:31:89:88:aa:e2:c0:a3:5b:9b:16:
         c6:47:fb:50:96:ab:5d:7e:c5:14:a8:2f:7a:06:fa:86:40:88:
         ef:26:d6:85:7c:7b:cb:e3:f0:d5:d5:94:39:b3:3b:b1:07:24:
         9f:9d:0c:11:6a:94:9e:e6:83:1f:00:ce:d3:00:82:55:8a:fb:
         80:80:ef:8c:8a:35:d2:da:c4:0d:c1:cb:c8:69:4b:20:f8:04:
         58:60:46:a4:9e:47:23:7e:40:14:42:08:c8:68:09:74:52:49:
         cc:8d:b2:3f:71:33:5a:73:ea:db:4f:6a:c8:18:7b:34:11:d6:
         00:bc:a6:7b:c7:4e:95:a5:2d:17:e7:88:24:da:e9:06:c8:15:
         57:4a:23:9c:e3:c6:fd:a0:ba:50:e6:24:e1:9e:88:52:6f:70:
         1e:37:d4:6f:89:6d:12:57:b3:99:ee:58:66:69:32:06:27:29:
         d7:05:39:69:02:b6:ee:73:8e:47:39:ed:e2:96:2a:fa:08:ae:
         e0:11:16:61:70:b5:98:9d:a4:31:12:06:76:5d:2a:cc:79:5c:
         c4:53:e2:63:ee:8c:77:da:ae:bc:cc:01:12:ec:bb:46:f6:9f:
         43:cb:47:4d:2b:85:1b:57:94:fb:9b:9d:a2:8a:f0:d8:b5:99:
         7b:a1:82:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEWH3r8QYGqYri8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk
YmJjOGU2OWUtNDc3My00ZjZjLWJjZjAtNTE0ZTYzMmE3MDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu46PljOWGduO/n+N1GBP0rkvbB5xO6nCjiOn
euDSpjZw91WyL7Dq3nxq7RVJuYreZTgMUO9xBwMMeAT7hnXdnTDEN7aF+yPLmggZ
5SxoqW8zD2mzzgsZpw7PKjqHeF0bq13hIZI5xV7p2yMvgJdsumjd6Q45ow5lX1ND
qQ53ybUPyDXNOrqi9ji6THKsrBf2Dy4DHNL8GtftiJthBVwA+VhQWrmykzs/eRTd
t0hJAIxfD88yd6JE03Jvj+bhzsNkJQbRaU01ZbxAGlLp1bBMUElxu6rhdl2+55qw
tc3WHdrwNhbf/96LfJvJQO/MHdI9bgZtQYQy5qaOK2G5zAbRiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3+1oWfyEZ5yKjxIhCqvB5Zcn/XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODYwYTQyM2UtNTgyMS0z
NDE3LWEyMzEtNDNmMTNlM2FjOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtL2jK+FAZQMYmIquLAo1ubFsZH+1CWq11+xRSoL3oG+oZAiO8m1oV8
e8vj8NXVlDmzO7EHJJ+dDBFqlJ7mgx8AztMAglWK+4CA74yKNdLaxA3By8hpSyD4
BFhgRqSeRyN+QBRCCMhoCXRSScyNsj9xM1pz6ttPasgYezQR1gC8pnvHTpWlLRfn
iCTa6QbIFVdKI5zjxv2gulDmJOGeiFJvcB431G+JbRJXs5nuWGZpMgYnKdcFOWkC
tu5zjkc57eKWKvoIruARFmFwtZidpDESBnZdKsx5XMRT4mPujHfarrzMARLsu0b2
n0PLR00rhRtXlPubnaKK8Ni1mXuhguA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:03 2025 by rpki-client