Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/202a2644-b152-3428-a9a2-76838326d233.roa
File:                     202a2644-b152-3428-a9a2-76838326d233.roa (raw, json)
Hash identifier:          UJTLxiRVQcLlZwUZnQPsJgtDY3qAur7d2mEpk7wob3c=
Subject key identifier:   22:BA:01:3C:73:DA:40:23:2A:3A:B0:72:DA:A4:21:B4:D6:76:DC:B2
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD5066B3D3DC78DA16F7B6000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/202a2644-b152-3428-a9a2-76838326d233.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:6b:3d:3d:c7:8d:a1:6f:7b:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=5fb28434-4974-476f-9315-1d27ad5ae489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:97:b4:7b:9b:9c:53:ed:29:a7:f4:50:f2:3f:
                    94:09:1a:fe:6c:4a:4e:29:e9:b3:3a:bd:bd:9f:80:
                    61:33:9e:c5:df:14:1a:65:4b:3e:0c:28:d9:d2:cf:
                    93:07:86:49:a9:4b:83:1b:f5:08:44:a3:bd:7b:9f:
                    c1:34:27:79:33:e1:45:6f:ac:82:6d:7c:38:36:a0:
                    2c:19:fb:9d:ee:e1:bb:e9:97:9e:05:c2:33:5b:28:
                    f5:87:e2:6c:17:c9:72:f1:cb:72:ae:c4:d2:66:bb:
                    27:ad:61:33:17:7a:9f:04:94:64:51:1b:23:6d:6b:
                    14:53:d7:f6:7e:06:ec:1f:30:79:35:b7:79:68:40:
                    a4:dd:79:d6:29:7b:25:c2:4e:92:11:9e:6d:94:fa:
                    8e:81:90:6c:76:34:f1:af:43:6f:de:1b:de:38:f5:
                    30:6d:69:e9:2f:33:b7:34:ea:52:c7:3a:b4:64:ee:
                    b9:a0:e1:de:2f:b9:ee:fa:62:e2:b0:41:87:69:7c:
                    4c:b9:68:4f:18:29:08:0a:03:c7:0e:8f:63:5c:0a:
                    08:56:08:0e:dd:d3:01:65:f6:f3:48:1a:a9:fe:34:
                    7e:cb:df:d3:4f:e3:d1:51:62:a0:74:42:ac:d3:c8:
                    f3:2f:ec:11:9e:e6:82:9e:8d:7d:37:2e:8d:5a:5b:
                    e5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BA:01:3C:73:DA:40:23:2A:3A:B0:72:DA:A4:21:B4:D6:76:DC:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/202a2644-b152-3428-a9a2-76838326d233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:72:5c:69:a5:50:7b:8d:47:f6:1a:e2:9c:dd:b6:0f:da:
         c8:c1:d9:db:43:5f:2e:61:8b:75:86:66:18:d1:cd:4c:f7:23:
         13:02:56:08:4d:9e:38:7a:37:d2:8f:8b:43:24:21:d5:73:9b:
         58:01:15:17:5f:30:72:3a:35:8c:c5:50:d7:27:9d:09:dd:f6:
         e3:ee:e8:77:67:93:ac:55:8c:90:d9:a0:37:f6:6d:3b:03:d3:
         20:72:1f:52:53:72:86:58:55:7a:73:90:24:14:3d:50:d6:e7:
         f4:69:fa:68:73:76:92:8d:29:d8:ea:41:15:e9:18:de:e2:5e:
         63:3f:8b:b6:53:db:78:71:27:62:e7:68:7a:c8:5b:86:84:e3:
         31:8f:4c:51:bc:3b:e6:24:f1:3d:59:ea:f9:6d:36:2e:55:47:
         ce:b6:08:e4:3c:e1:d9:b2:3e:d6:0c:9d:33:87:b6:06:58:41:
         50:74:6f:42:e4:07:81:57:70:3f:cc:33:85:10:c9:3a:35:f6:
         54:ac:e4:e8:48:e4:1c:27:c9:6a:b5:4e:01:06:53:82:f3:d1:
         cd:98:ed:0b:dc:c1:d3:94:95:0b:d9:fb:b8:54:58:93:d8:d7:
         11:8c:08:cd:bd:77:ce:48:4b:dc:da:8e:36:ba:01:09:58:f1:
         14:ea:38:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:54:14 2025 by rpki-client