Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/32dde319-0457-358d-a7bd-2a910a0b3183.roa
File:                     32dde319-0457-358d-a7bd-2a910a0b3183.roa (raw, json)
Hash identifier:          ojqnfF9r/pO5zn9iwGoqHFyD/f3hZKY0cXHCC6h2KsY=
Subject key identifier:   7D:BB:18:7C:1E:AA:54:E3:16:2C:F2:23:57:F0:F3:31:D2:69:B0:56
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD506711117A8EA96A17C8BC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/32dde319-0457-358d-a7bd-2a910a0b3183.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:71:11:17:a8:ea:96:a1:7c:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=2aec2d66-8df3-4714-939f-3ff4bcdc3502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:09:b8:8c:29:fb:e2:46:f5:85:a8:85:60:0b:
                    fa:32:b3:1f:b1:e4:8d:7e:67:e5:36:28:3a:95:7d:
                    8b:19:ec:a4:bb:4a:43:8f:11:48:b6:7a:81:b0:d5:
                    f3:6e:e6:cd:bc:53:a8:6a:9a:37:12:06:af:7c:1a:
                    41:55:2b:8d:a7:b2:03:e5:0e:93:44:81:34:94:63:
                    5d:b2:93:d6:26:d1:0e:8d:58:47:ce:83:96:0c:ce:
                    be:33:e7:7a:3a:a3:92:de:76:f9:2f:a7:62:78:c5:
                    93:07:51:d0:a1:d7:23:d7:3f:2f:0d:19:53:66:a1:
                    4a:ea:95:ec:88:70:f5:eb:d2:4c:98:aa:f8:4d:fd:
                    4f:a3:7f:8e:e1:75:8d:55:cb:78:bf:08:4e:28:c5:
                    79:da:79:f4:22:8e:6f:f3:8b:34:4e:ef:94:45:17:
                    7d:4a:ae:f5:d2:64:d7:45:2f:6a:d4:8f:57:86:07:
                    87:aa:d9:5b:55:41:8e:d5:c2:1f:ad:31:6e:ba:1f:
                    0a:bb:e6:47:41:81:af:e7:61:34:9e:7d:aa:52:c3:
                    4b:8a:63:ea:b3:e8:b1:1b:e5:87:fe:ae:45:8d:3e:
                    96:8e:43:6c:56:13:38:92:bb:f2:db:db:23:83:59:
                    88:34:a1:dc:c7:8f:74:75:4c:63:8b:28:1f:0f:78:
                    dc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BB:18:7C:1E:AA:54:E3:16:2C:F2:23:57:F0:F3:31:D2:69:B0:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/32dde319-0457-358d-a7bd-2a910a0b3183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:cf:e6:4d:cd:5b:af:a6:c9:57:57:6a:05:4d:99:3f:81:c9:
         5b:e4:02:60:5a:90:8c:44:1d:58:63:23:ba:09:37:6d:4d:ca:
         d5:f2:af:63:16:9b:ae:61:20:3a:74:ca:74:26:2c:8c:49:a9:
         8d:7b:9f:46:ff:09:bd:6a:5d:65:c8:68:1c:00:b9:0e:a3:86:
         1a:a4:c5:35:32:f4:6c:9e:dd:7a:ab:77:cc:04:37:d3:72:2e:
         71:08:6b:7b:91:e1:e2:24:a4:26:b4:51:6a:24:12:34:47:1d:
         9f:89:fa:92:61:a2:fd:d3:39:07:c4:09:ca:09:cd:4e:7b:d7:
         bc:45:07:7a:0a:db:76:5d:8d:81:6f:25:5e:ad:8e:9d:34:48:
         7d:0a:f3:24:2c:39:45:34:27:00:f6:7d:2a:81:e6:16:c2:14:
         9e:52:11:19:0d:bb:4e:e5:77:e7:ff:00:66:e4:fc:6b:f3:73:
         1b:5e:90:3f:73:ae:ad:a3:b3:e5:12:34:e8:eb:a7:14:b2:c5:
         26:ad:1d:c4:df:31:05:8f:25:05:99:a8:f4:80:d8:41:de:75:
         12:2d:74:36:35:89:4c:eb:b1:85:c7:82:2e:30:77:d9:32:51:
         9f:9d:8f:35:47:66:e9:63:c9:2c:27:7a:a4:08:e4:e1:1d:1f:
         7e:64:26:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:14 2025 by rpki-client