Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6079fd24-5122-3b87-8865-333b76a70b17.roa
File:                     6079fd24-5122-3b87-8865-333b76a70b17.roa (raw, json)
Hash identifier:          2wONm8Kz0crDBeISf0d+BWlu232nvqW4i7lpUHM54B0=
Subject key identifier:   34:0F:BE:D8:33:53:5F:40:59:84:12:55:4E:A3:37:05:61:60:E3:9E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849F44A68D3F8D7981BF5B6BD88
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6079fd24-5122-3b87-8865-333b76a70b17.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        204.195.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:68:d3:f8:d7:98:1b:f5:b6:bd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=5e42d2ca-6de2-49a6-8915-7c2e2edb82fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:21:81:8b:5c:98:94:99:76:95:90:91:05:ab:
                    4c:98:79:e8:09:67:e9:0e:a5:fe:7b:91:5b:9f:9f:
                    55:e0:47:9d:04:10:6c:19:12:e9:a8:c1:a1:ab:14:
                    ed:3f:96:c9:13:53:24:f3:c5:81:55:91:49:06:55:
                    f0:37:27:40:64:7f:eb:be:4f:10:17:d2:3e:95:f1:
                    b4:bb:d8:b9:b0:b1:f4:34:bb:9c:b3:2b:c6:93:21:
                    d1:1e:fd:a4:7d:cb:7f:a4:5e:7f:d8:8a:f4:32:89:
                    7a:97:87:9f:ed:c2:41:c5:2d:70:cc:da:b3:c7:33:
                    0d:7f:88:83:d4:2d:13:b0:06:4e:c1:a9:36:bd:d8:
                    30:87:88:fb:30:f3:71:ed:1c:31:19:46:ff:d4:86:
                    d5:ac:c3:bb:7e:ea:b0:9e:4e:e5:75:b0:71:30:17:
                    92:8f:71:24:f0:a8:f4:d0:50:d7:65:29:42:59:06:
                    38:10:dc:3b:d2:e0:16:75:a4:81:4a:6f:92:03:09:
                    31:51:c9:e9:35:63:d5:7f:d4:d7:b5:c7:37:e5:ae:
                    16:41:63:03:b8:07:33:6a:ca:e1:50:3e:12:aa:0f:
                    5a:90:b3:71:3d:30:66:72:22:c1:e5:51:f0:d0:16:
                    53:93:ae:8b:73:32:7d:e9:da:3d:9f:8a:36:73:42:
                    d2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0F:BE:D8:33:53:5F:40:59:84:12:55:4E:A3:37:05:61:60:E3:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6079fd24-5122-3b87-8865-333b76a70b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:0e:0a:02:de:34:a5:08:49:a5:11:b9:29:a3:6e:f3:6b:e3:
         63:d0:0d:9d:c6:2f:0d:25:53:c8:91:40:82:37:1c:75:af:d2:
         06:15:b1:bf:41:31:4b:26:a8:57:82:a6:65:3d:13:dd:a3:62:
         1d:35:dd:3f:e6:f1:e5:21:e5:bd:d9:54:db:9c:11:86:7e:ca:
         bc:ba:b2:90:0b:05:f5:cc:73:b5:d4:14:f5:7a:52:9c:fd:59:
         19:73:db:b8:6d:03:ea:05:10:bc:5d:c5:94:05:d5:e9:4c:db:
         5b:16:04:a9:d7:db:33:51:4d:e8:a2:96:0e:24:21:dd:48:cc:
         dd:ed:37:0e:fa:12:43:ce:cd:2e:6c:ff:ad:6e:07:15:e5:70:
         a3:2c:63:27:65:4d:6c:99:07:77:a0:24:c5:7d:2f:80:3b:99:
         00:18:87:61:31:cf:3e:31:2f:3d:99:ff:bf:ed:c7:a1:cb:5b:
         e3:d1:02:b4:ec:99:69:a3:06:cd:7a:fd:5e:45:2a:aa:3c:29:
         d8:7b:0c:80:ae:e5:89:9a:c7:77:f0:93:d9:15:67:12:ec:70:
         df:af:c4:19:56:73:a1:fc:93:f1:90:bf:93:ff:ab:40:d5:a3:
         91:dd:26:d6:ff:a8:5c:43:49:04:eb:7e:0e:06:6a:48:b4:0e:
         81:63:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:52:04 2025 by rpki-client