Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/77bad959-d6f6-3d31-898e-5c3bcbfea8fe.roa
File:                     77bad959-d6f6-3d31-898e-5c3bcbfea8fe.roa (raw, json)
Hash identifier:          bwPjpAsOs2L9m+pOJAsW2yCLCJsK9Yxs/3+fSgZ9zhk=
Subject key identifier:   25:1F:80:28:F0:21:26:02:D8:B7:1F:3B:07:F0:F6:BD:E2:21:21:F7
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F4328584B1806D1D0325012563B320D00
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/77bad959-d6f6-3d31-898e-5c3bcbfea8fe.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     30383
IP address blocks:        198.208.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d1:d0:32:50:12:56:3b:32:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=bd99396d-dfbe-4fbf-837c-673dff8d5cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:39:48:58:45:61:40:6b:cd:23:0b:3e:c0:6e:
                    7d:73:17:e0:9c:25:dd:df:6d:b2:21:8d:23:e6:53:
                    e7:51:f6:5a:79:60:98:ed:06:1f:6b:2a:17:80:40:
                    b1:b2:59:70:b2:96:5b:7f:51:a9:2d:ea:b4:06:ee:
                    b9:e8:b6:95:91:79:9a:75:62:58:f6:9f:df:ea:73:
                    70:ec:5a:c7:32:fd:31:1a:52:f3:ca:bf:fb:5b:3c:
                    ea:4a:1b:4b:61:7c:1f:b2:b7:29:ca:98:ca:a8:3c:
                    f1:f5:af:dd:cb:f9:35:dc:20:2f:bd:35:7f:b8:a8:
                    75:62:69:09:23:cd:25:35:da:43:9a:9f:cd:07:2e:
                    7b:49:3a:40:ff:fe:f9:2f:4f:75:78:8f:c4:76:12:
                    14:e7:b0:33:e3:ac:15:75:fe:f1:07:b5:56:b6:54:
                    f0:07:16:ee:c3:44:77:b9:6a:9e:1b:d1:ec:95:a5:
                    06:41:30:24:52:d5:21:5c:eb:a4:75:8b:d3:be:3e:
                    2d:72:39:50:ba:da:a3:36:1b:f4:8e:3e:41:58:70:
                    eb:89:f2:50:6e:8d:37:8f:f5:4a:22:1c:ba:7e:83:
                    44:80:05:02:97:eb:2b:7e:b8:be:2a:5f:5f:bd:9c:
                    05:6a:71:89:e6:8e:ad:5b:91:fe:32:e1:35:1b:69:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1F:80:28:F0:21:26:02:D8:B7:1F:3B:07:F0:F6:BD:E2:21:21:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/77bad959-d6f6-3d31-898e-5c3bcbfea8fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:90:a6:32:05:2e:fe:32:db:6e:40:a1:66:12:6f:e0:be:a8:
         b0:85:d3:5c:a5:3e:82:b6:37:86:17:9d:f0:4e:96:40:f3:80:
         8f:9d:4c:51:f8:b9:53:b4:c8:ce:90:70:59:4a:08:11:91:33:
         d5:0a:b0:d9:cf:15:ab:f0:54:14:ce:86:b6:be:00:f3:91:c8:
         72:2f:0c:2b:2c:fb:1a:11:ad:19:76:bf:c0:eb:cf:c1:20:3d:
         a5:3f:61:a6:aa:ee:5f:88:9e:02:6e:9c:1f:68:99:f5:22:be:
         40:83:a4:b3:24:7d:8e:a5:68:21:20:de:bd:1f:6c:b4:52:0e:
         68:c3:98:4b:cf:34:4a:54:9b:4a:d2:4e:06:94:be:03:00:f0:
         ec:47:9c:65:ec:f6:b2:e2:fc:ce:f4:cf:3f:db:71:98:e9:82:
         25:0a:64:52:f8:bf:6d:8f:a2:15:95:d0:f8:80:8d:d2:6f:fe:
         66:db:fb:c4:c3:e9:4c:64:3f:af:f8:c2:d9:be:b7:29:b4:78:
         59:79:93:c8:20:9b:99:7b:74:bd:fc:8d:6f:f9:2a:68:a4:7b:
         5b:26:79:13:e4:46:c4:85:15:cb:f4:18:f6:47:39:da:72:a0:
         d2:2f:64:92:7c:44:b9:cb:ec:5c:93:45:cf:0c:eb:fc:5c:8b:
         c6:f0:ea:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtHQMlASVjsyDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl
M2U0MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
YmQ5OTM5NmQtZGZiZS00ZmJmLTgzN2MtNjczZGZmOGQ1Y2VjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjlIWEVhQGvNIws+wG59cxfgnCXd322yIY0j
5lPnUfZaeWCY7QYfayoXgECxsllwspZbf1GpLeq0Bu656LaVkXmadWJY9p/f6nNw
7FrHMv0xGlLzyr/7WzzqShtLYXwfsrcpypjKqDzx9a/dy/k13CAvvTV/uKh1YmkJ
I80lNdpDmp/NBy57STpA//75L091eI/EdhIU57Az46wVdf7xB7VWtlTwBxbuw0R3
uWqeG9HslaUGQTAkUtUhXOukdYvTvj4tcjlQutqjNhv0jj5BWHDrifJQbo03j/VK
Ihy6foNEgAUCl+srfri+Kl9fvZwFanGJ5o6tW5H+MuE1G2mdyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCUfgCjwISYC2LcfOwfw9r3iISH3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2
N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvNzdiYWQ5NTktZDZmNi0z
ZDMxLTg5OGUtNWMzYmNiZmVhOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm
YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0
ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj
NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqQpjIFLv4y225AoWYSb+C+qLCF01ylPoK2N4YXnfBOlkDzgI+dTFH4
uVO0yM6QcFlKCBGRM9UKsNnPFavwVBTOhra+APORyHIvDCss+xoRrRl2v8Drz8Eg
PaU/Yaaq7l+IngJunB9omfUivkCDpLMkfY6laCEg3r0fbLRSDmjDmEvPNEpUm0rS
TgaUvgMA8OxHnGXs9rLi/M70zz/bcZjpgiUKZFL4v22PohWV0PiAjdJv/mbb+8TD
6UxkP6/4wtm+tym0eFl5k8ggm5l7dL38jW/5Kmike1smeRPkRsSFFcv0GPZHOdpy
oNIvZJJ8RLnL7FyTRc8M6/xci8bw6gE=
-----END CERTIFICATE-----
Generated at Sat Sep 20 02:24:06 2025 by rpki-client