Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/97a42304-d9fa-36cd-91b6-3a7e70667b9b.roa
File:                     97a42304-d9fa-36cd-91b6-3a7e70667b9b.roa (raw, json)
Hash identifier:          +oQr+PUJhxJPSXRPu864xn01nlEGwkLrF+7FZPjd9aE=
Subject key identifier:   9A:CF:06:C9:83:23:63:E1:B9:61:32:4C:06:C6:91:2E:B5:78:13:DD
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD5066A0A6558B7A6CCC0DCC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/97a42304-d9fa-36cd-91b6-3a7e70667b9b.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:6a:0a:65:58:b7:a6:cc:c0:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=063a1400-d42d-461d-a8a1-ad1fdb4ffc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:6d:78:32:73:e1:d2:aa:41:3f:5c:c7:6b:
                    ad:62:8a:2f:31:de:b5:20:70:4f:e7:6f:af:97:34:
                    30:13:01:b5:e7:82:3e:b1:38:4d:ff:98:16:8b:79:
                    7f:26:ee:85:8c:84:d9:94:8c:4b:9e:1d:2c:95:14:
                    89:8c:5f:33:85:c8:47:9c:af:9f:c5:8a:95:9d:f8:
                    f2:d6:e8:1f:a1:a8:3d:92:d5:b7:a3:09:60:33:fd:
                    a0:32:30:f0:d4:42:d6:41:a4:71:dc:87:1c:8f:7d:
                    3f:d4:9c:57:9c:68:e7:13:94:0f:17:e8:62:57:c5:
                    2c:3f:ca:6f:78:22:eb:ee:9f:6d:2a:34:30:4c:15:
                    43:bc:b6:24:06:61:b3:db:6c:f7:28:0a:e9:a5:f0:
                    a6:38:e6:23:8e:05:8a:aa:e5:8c:ea:85:2f:f9:b0:
                    c4:63:12:db:a8:27:8e:d2:7d:56:8b:40:bd:23:ae:
                    6d:ac:36:7c:bb:c2:22:f8:b1:cb:d3:6c:c3:e5:c5:
                    c3:9f:ff:3c:2c:95:e0:65:a9:66:0d:36:36:8a:62:
                    06:25:9f:46:af:b6:9a:7d:17:c3:3f:2f:3c:45:7b:
                    f2:73:06:85:87:73:1d:5a:fd:d5:78:cc:89:51:a4:
                    e1:88:91:81:0a:6f:93:e6:de:d1:cc:0d:c6:e9:9b:
                    8c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CF:06:C9:83:23:63:E1:B9:61:32:4C:06:C6:91:2E:B5:78:13:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/97a42304-d9fa-36cd-91b6-3a7e70667b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f1:01:df:78:41:7a:82:73:2f:3d:e3:d7:34:ed:31:30:e1:
         b6:59:94:7b:1d:69:13:3e:f2:a5:74:9d:47:0b:56:d6:ad:dc:
         17:2e:ed:b2:1f:d3:34:4b:a2:4e:b8:16:a7:51:1f:ab:45:f6:
         d6:cc:78:24:43:9d:ec:90:ae:47:e7:ab:67:2f:13:40:d2:04:
         36:a3:88:c6:cb:5c:d4:eb:ce:42:30:fa:9a:e0:ea:dd:e6:85:
         54:81:b7:10:49:0b:ba:6d:20:50:a9:d3:e3:c6:73:04:68:23:
         25:6d:89:ed:5a:4c:df:62:2e:9f:a3:c4:fd:2a:fd:a3:8e:1a:
         f5:5c:11:39:62:d3:b0:b7:31:21:fa:48:1b:e2:8b:62:fe:fe:
         87:61:1e:2d:5b:16:94:3f:df:e0:c6:42:14:fe:08:5c:6c:5e:
         7a:6c:93:96:ef:86:3b:88:b2:29:e6:13:63:36:37:ee:75:56:
         23:b2:08:bf:6b:fd:81:02:70:cb:bf:78:45:2c:28:20:92:4d:
         b3:89:45:ef:5a:9e:d2:de:df:e4:77:2d:3a:24:e0:12:55:a5:
         f1:6d:e9:93:f3:d6:2f:5e:03:55:64:34:d5:eb:51:dd:93:8c:
         1f:f0:06:03:ad:dd:f0:3d:e5:34:b6:02:f1:ed:5b:98:fe:c6:
         e1:f0:df:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:56 2025 by rpki-client