Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa
File:                     401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa (raw, json)
Hash identifier:          eFv70gXmKcwKu54wTEH8qvq8Q1zSbUQ4aYMx6hqbdHk=
Subject key identifier:   4D:F7:19:80:8D:4C:49:0A:80:13:22:60:6C:4D:34:BF:31:3D:A1:EA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD5066E3991ED728AB4D7B790
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:6e:39:91:ed:72:8a:b4:d7:b7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=2f9cf6ed-2e99-4d4a-9324-94fded884069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:93:88:c4:d9:e3:14:44:d7:ba:e2:25:e9:
                    37:d7:62:89:68:a3:8d:3f:c3:e3:b6:d0:d5:81:66:
                    f6:44:f7:8a:0a:ca:f0:bf:c1:a6:9e:34:38:c3:e5:
                    2a:0f:f5:48:92:88:d7:65:87:c9:bf:8c:bd:a4:c2:
                    99:cc:c5:b1:29:4f:3c:da:4a:90:f6:67:1b:cc:bf:
                    8d:d9:80:4d:84:41:5a:e3:ef:d2:71:71:60:d0:84:
                    1d:e9:c5:fd:25:87:fd:76:b9:f4:43:35:60:aa:04:
                    6b:40:87:94:f0:05:40:0c:c8:45:06:3b:cb:42:fa:
                    fa:b8:53:a1:cd:58:62:43:36:b3:af:49:9b:88:df:
                    c8:8a:e0:6c:09:8c:36:62:70:8c:5d:bf:07:95:e6:
                    fc:69:43:ef:63:76:71:78:ab:a3:54:e7:be:52:8b:
                    74:a4:96:00:e6:98:d3:4e:b2:55:4a:a7:19:f7:36:
                    71:0f:8b:3a:2a:9e:9d:94:95:4e:ec:b8:0f:9b:6e:
                    5b:12:a8:29:ae:1f:19:8f:30:6b:98:bf:38:cf:6a:
                    a6:b8:1b:0d:22:2e:42:14:36:18:27:12:49:b8:9b:
                    09:cf:20:05:be:8a:a8:34:4f:cb:89:b6:af:fa:3a:
                    2d:73:05:5f:36:e7:87:07:06:b7:ab:7a:6b:81:c3:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F7:19:80:8D:4C:49:0A:80:13:22:60:6C:4D:34:BF:31:3D:A1:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/401bdf4b-0eed-3028-9d97-7d9065ff01d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:33:de:c9:ca:89:28:86:f4:13:fe:a7:7f:ee:cf:19:16:f0:
         15:5f:41:49:64:eb:18:c0:88:49:bf:db:b7:57:7b:15:0e:9a:
         a2:2b:07:11:d7:73:d0:bd:9f:65:67:9a:bc:a4:7d:f6:14:5a:
         20:ab:11:c2:dc:e6:b4:f9:78:81:00:cd:5d:f6:5e:94:72:30:
         e8:2a:25:29:72:80:c3:88:41:3c:4b:73:bb:2f:72:19:2c:36:
         0d:6c:38:be:98:c1:60:18:a2:18:e8:40:e6:09:15:b2:28:6c:
         75:02:f0:eb:46:86:db:44:4e:1e:e3:0e:77:30:b8:30:9d:48:
         9e:6a:91:7e:0b:bf:ad:aa:f5:08:f0:c7:06:94:ba:e9:b3:14:
         08:0e:c7:8d:00:73:c9:a1:82:72:a3:91:41:5d:0d:6e:54:ab:
         6d:f0:e2:b6:57:89:29:45:92:1f:c4:8f:d8:22:9f:f3:a3:80:
         48:7d:7a:01:31:ed:8c:2e:9f:ef:fc:ea:39:3c:d4:ab:f9:b7:
         0f:43:ec:8d:ff:4b:fa:93:c0:8b:ad:72:b9:21:49:70:dc:56:
         83:7b:39:17:ea:2e:b7:d2:a5:74:fe:8d:bd:49:d0:3e:45:f3:
         e6:67:25:04:13:e5:fd:b3:0d:d9:5c:01:b7:74:75:8d:72:17:
         12:e3:c5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:00:37 2025 by rpki-client