Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9bc70c30-49f2-33a7-a5dc-57fddd9558a0.roa
File:                     9bc70c30-49f2-33a7-a5dc-57fddd9558a0.roa (raw, json)
Hash identifier:          FuEpukFUFGzBvoaAK6EG/nLZiW1uzorSQ1nyE+FLMIY=
Subject key identifier:   17:44:71:67:10:85:17:B8:07:F4:75:5A:2B:3E:79:92:72:C7:E0:83
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD50671263C12FF633891FEC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9bc70c30-49f2-33a7-a5dc-57fddd9558a0.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:71:26:3c:12:ff:63:38:91:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=c78c6ee6-a506-402a-a8d6-5649caced26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ba:a7:8e:0b:17:08:ea:0c:a3:a9:b4:02:7d:
                    57:4d:8b:09:6b:8d:2a:a4:03:8b:85:d8:9b:00:6e:
                    a3:2a:33:95:cf:ae:cd:08:a4:c1:84:b7:ae:13:a7:
                    fd:e0:7e:b7:03:28:4d:ed:49:7a:ec:35:b2:29:e6:
                    11:47:0b:ef:03:0a:52:c5:a7:14:98:2f:a2:ee:b4:
                    1b:b6:9a:57:d3:44:fd:0d:00:63:28:3f:5f:cc:f0:
                    ad:9d:12:e8:17:10:04:7e:95:8c:3a:9f:0e:c0:66:
                    d5:9a:43:62:d1:8f:7b:01:c6:8f:37:ca:a2:25:cf:
                    8b:d8:9c:e8:10:37:2a:5c:31:6e:b9:0f:bd:08:70:
                    1b:d4:8d:36:82:23:69:e0:29:9c:e3:ae:2c:1e:39:
                    e5:7e:ba:dc:82:87:68:3a:ac:7a:a4:0b:cb:12:db:
                    54:4b:4d:a3:5b:75:17:80:da:6f:23:15:05:e8:d4:
                    45:3f:c2:68:17:e6:f8:c9:37:6c:87:ef:8c:3d:79:
                    d9:c3:d9:41:3c:6f:d0:7f:7a:98:57:0f:26:bc:e8:
                    cc:64:88:26:68:61:5e:20:01:5b:74:fd:3f:bb:df:
                    29:d2:ac:83:47:2d:30:8e:c5:89:ed:2e:cd:88:11:
                    24:0d:87:ab:ab:ee:f6:2e:15:12:b8:77:eb:03:69:
                    27:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:44:71:67:10:85:17:B8:07:F4:75:5A:2B:3E:79:92:72:C7:E0:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9bc70c30-49f2-33a7-a5dc-57fddd9558a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e1:29:2e:1b:94:7a:39:6b:1a:5a:95:af:58:7a:2e:e8:3c:
         eb:74:77:0c:cc:af:58:5b:8b:00:cc:9d:35:c4:31:6c:31:11:
         33:be:f5:e0:db:00:15:ac:8f:78:34:99:98:06:d7:32:e3:45:
         17:16:0e:a6:6e:c6:28:b9:3c:05:98:03:45:94:58:05:49:30:
         76:a9:c2:da:82:89:b6:e3:fd:63:ef:82:c3:8e:f7:63:e1:f2:
         c9:7f:1e:68:f8:15:2f:8f:46:9d:05:89:58:f6:1b:f8:fb:cd:
         ec:37:b8:96:23:81:fa:97:bb:cb:00:cc:c3:c0:03:bc:cb:b5:
         1a:43:91:26:d7:86:fe:2c:cf:2f:90:af:f4:46:89:fc:f5:91:
         77:d7:af:0e:6b:14:5a:1f:c1:ba:07:d1:11:ab:dd:21:00:4a:
         0f:dc:45:82:c4:8d:25:49:7b:36:0f:cb:b5:97:28:47:05:5b:
         f6:60:be:d3:9d:28:59:b7:ea:e5:26:73:2b:af:19:50:61:81:
         99:ae:b0:f7:55:cc:3b:ae:fa:ad:cc:a6:02:48:1d:17:5e:b9:
         fd:c5:0f:bb:2c:ab:e1:0a:f4:d7:31:49:d2:ee:0c:ac:4a:19:
         30:f2:48:64:ec:97:40:e8:6f:30:6c:28:53:87:bc:9f:83:8a:
         c2:d5:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:28 2025 by rpki-client