Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2721cc76-984d-3d59-b070-bc496caa0ffd.roa
File:                     2721cc76-984d-3d59-b070-bc496caa0ffd.roa (raw, json)
Hash identifier:          UiGceUZnMjzPJp4hQErw5jdfJav4DAsYEOfZ+JBQ1W4=
Subject key identifier:   84:A2:07:90:70:E4:75:EB:8E:40:71:51:22:AD:28:80:34:8C:90:49
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD5066ED1EDD57FF2B0BBA580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2721cc76-984d-3d59-b070-bc496caa0ffd.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:6e:d1:ed:d5:7f:f2:b0:bb:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=0039eca5-be8f-469a-b194-80fcd12fb59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7e:62:c8:c1:3d:99:22:63:fb:96:d0:de:ab:
                    ae:b5:88:72:ef:e5:1e:53:e5:ef:09:18:e9:5a:d0:
                    19:28:c1:fe:48:8f:c3:46:ae:ba:5a:6f:ad:b1:4f:
                    a5:9d:6f:f5:06:61:1c:3c:8e:50:3a:52:af:b4:4d:
                    e1:d3:9b:39:1c:30:67:68:b9:f2:62:e0:29:05:a5:
                    55:fb:49:3a:1d:50:e8:51:aa:9a:5c:ab:af:da:07:
                    2e:48:b5:ac:f6:37:48:1a:3a:86:1f:11:6e:e1:65:
                    57:f2:a6:3c:3f:e1:b4:00:f2:14:50:60:e1:3f:39:
                    ad:92:2e:0a:dc:8d:78:62:c1:3a:51:6c:1f:d2:04:
                    6d:6a:71:d5:18:be:ac:d7:3e:99:85:37:81:1e:87:
                    82:a6:b7:70:b2:1f:91:f3:b9:e6:3f:62:08:89:ed:
                    44:4a:11:90:3b:6b:78:6a:7d:66:ce:75:87:62:b2:
                    dc:5c:1c:eb:32:80:b3:ee:ba:6c:cb:67:01:01:3b:
                    68:0b:ab:6c:22:85:f5:22:5c:e6:7d:f2:cd:d8:da:
                    44:58:3f:dd:87:9a:43:19:2a:44:42:17:dc:2f:23:
                    4e:29:34:8c:65:82:45:3f:91:14:15:ab:bc:bf:b7:
                    df:d6:a0:dc:f8:0e:6e:ca:68:0e:f3:f8:c2:a5:3f:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A2:07:90:70:E4:75:EB:8E:40:71:51:22:AD:28:80:34:8C:90:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2721cc76-984d-3d59-b070-bc496caa0ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d3:00:c5:c0:65:fe:78:f0:17:18:ac:68:fb:40:6a:1f:6c:
         de:a7:9d:39:2c:28:9b:5a:26:f5:02:7c:ac:5e:d6:81:c5:11:
         39:d2:e9:3b:90:56:16:8f:e8:4d:5c:77:71:1d:23:95:6e:c9:
         87:48:0e:7f:7a:69:06:51:0c:ef:29:84:b3:5e:62:c7:9a:a9:
         50:9b:fd:37:74:43:1f:0b:5b:bf:a3:8d:01:9e:d8:7b:a1:a6:
         85:ea:c4:a7:e8:bf:87:e8:ce:f8:cf:8b:fd:95:c0:b0:9b:03:
         d8:c7:7d:ba:7b:7f:2e:bf:70:94:12:94:63:c0:b6:74:e9:97:
         2a:f7:33:4f:4d:e0:13:62:ee:5a:8f:b1:09:d3:cc:e5:3f:30:
         6c:f1:ec:86:aa:88:c0:95:77:fc:f5:98:d1:4d:72:5b:c3:a9:
         c4:f0:52:1b:2b:f8:7e:fb:e5:16:df:52:e8:08:79:c3:6f:b1:
         a5:df:a4:71:26:99:18:e1:64:de:36:47:71:65:07:d4:b8:a2:
         17:65:f3:5a:32:8d:f3:64:02:7e:77:54:65:0a:4c:35:80:66:
         ff:79:ba:58:ad:9f:49:3c:26:c4:5f:a0:7d:a6:ff:bc:4b:f4:
         c7:27:37:9e:16:4f:75:b9:90:2b:1b:dd:18:62:1a:b5:06:c2:
         28:dc:ff:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:12 2025 by rpki-client