Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/62417797-3262-3688-802a-8deaa104663c.roa
File:                     62417797-3262-3688-802a-8deaa104663c.roa (raw, json)
Hash identifier:          skhIGsBh9pqeYYZJjvJA+ghtvNfh8502JYeSStG7Gmo=
Subject key identifier:   D3:01:A0:60:E6:B1:1A:10:48:05:E7:1F:65:B2:64:11:3C:F9:1B:1F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AE5C68099AD49A621B7EE3430
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/62417797-3262-3688-802a-8deaa104663c.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        204.195.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:80:99:ad:49:a6:21:b7:ee:34:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=40d40de8-cfe9-4a41-a350-77ab338e333e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f7:2d:81:4a:bc:3d:66:10:e3:73:84:c1:df:
                    6a:23:23:57:3b:e3:13:7b:62:0f:56:3e:70:be:5c:
                    5c:66:55:c3:c3:b4:e6:6c:30:27:bb:9b:dd:50:89:
                    d3:07:cf:3c:b0:69:d3:f6:79:a6:7e:53:0b:ef:65:
                    cc:bd:55:91:c4:a6:f7:6b:ad:79:95:63:a3:7a:53:
                    b2:71:fb:b5:cb:f0:52:b9:3f:ba:3a:35:25:67:ad:
                    ce:88:2c:ea:07:48:4d:56:ac:bd:40:8f:1e:a4:f7:
                    be:6d:25:60:50:80:47:51:78:c3:10:8f:a0:09:df:
                    0d:b1:f9:61:a6:de:4c:dc:af:c5:ec:10:59:04:18:
                    45:05:9b:81:16:25:64:5b:29:be:e9:e9:8e:f3:b9:
                    9a:11:94:b6:6b:f1:10:c6:c1:44:99:88:e2:ae:3a:
                    09:f7:73:27:56:7c:3e:95:39:31:96:d7:bf:36:2d:
                    33:e7:1b:bc:b7:61:8e:23:e6:65:2a:1f:9e:0a:27:
                    dd:85:33:32:6d:78:d0:c2:13:9f:18:cb:83:a8:2e:
                    ef:64:9b:4f:38:3e:d9:5f:76:34:c6:e8:a6:cb:c9:
                    3b:55:0e:d6:cc:2d:f5:29:d3:45:ac:a5:6d:39:52:
                    bb:08:2f:a5:98:7c:d8:3f:b2:21:23:f0:d5:4f:bd:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:01:A0:60:E6:B1:1A:10:48:05:E7:1F:65:B2:64:11:3C:F9:1B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/62417797-3262-3688-802a-8deaa104663c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e5:1a:1d:55:27:c2:85:2c:be:67:f1:88:7e:96:20:b2:ec:
         df:38:bb:84:ce:e1:f6:a4:ec:9e:2c:30:ad:99:fe:15:80:a4:
         d0:b6:58:70:34:af:81:ab:bb:ed:56:15:0f:2e:7c:86:80:39:
         77:08:de:69:b8:a6:8a:5d:29:b2:58:4f:00:f8:83:30:eb:6c:
         a0:a4:9a:20:01:49:6f:f7:5d:78:79:ce:29:86:36:03:ba:7e:
         c4:89:91:9a:4c:d5:28:4b:0f:0e:2e:8a:0a:29:6f:57:82:5f:
         25:64:dd:c0:70:64:5f:77:25:34:21:5f:5b:87:8a:1f:c9:45:
         f3:b2:94:cd:f4:4e:7a:c3:01:1e:e0:82:c8:6b:e6:cc:cd:0e:
         ae:a7:53:30:0d:20:cb:26:5e:4f:26:61:3e:a4:8f:5a:77:b3:
         9e:9a:03:62:65:94:a6:fc:ff:b0:b8:d1:88:2b:b3:5a:1e:2b:
         45:7a:29:b8:eb:54:c2:58:9c:b0:bb:a8:fa:c5:cb:ba:2a:f7:
         a5:49:02:64:70:18:8b:a6:cb:2e:63:12:0f:51:1d:66:63:c3:
         66:55:66:49:85:c6:60:cd:c4:b3:95:40:29:b4:3d:e9:d8:35:
         b0:03:c2:ec:40:a1:19:fa:a6:6f:d7:78:39:c8:b6:12:24:1b:
         4d:8e:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:56:35 2025 by rpki-client