Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa
File:                     a815da88-cfa8-3af3-ada0-55a72b6309b2.roa (raw, json)
Hash identifier:          3eLMsRicbETH1A1IkYma/YCZFblocjWsqMFB3J4eJTs=
Subject key identifier:   EB:AF:00:87:ED:DC:29:86:50:85:13:80:EF:EE:A6:FD:71:55:4A:C6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD5066D02F657BDD10B4E7540
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:6d:02:f6:57:bd:d1:0b:4e:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=cab3dd3a-ed83-44ab-b82e-0b02b4f08202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:9d:ca:95:b9:03:1e:9a:8d:72:78:4d:f9:
                    84:fc:f1:2f:70:e8:04:a6:ba:7f:75:d0:49:5b:7b:
                    82:97:a5:f9:a3:ad:e1:75:9b:5b:f6:8f:63:17:d9:
                    47:67:b0:6b:f2:a1:ca:e2:0e:35:d7:7f:ce:86:77:
                    71:2e:db:10:16:4b:06:c5:82:f9:62:fa:f5:05:b3:
                    38:8d:68:12:6c:33:d1:fb:3a:ff:e7:8f:36:2e:07:
                    7d:2e:52:13:53:f3:7d:93:f4:83:21:15:d8:6d:4f:
                    21:86:7e:b2:a4:55:47:e1:05:b2:54:99:75:ad:64:
                    b9:44:35:88:d3:a2:85:41:cb:ad:3b:90:01:3e:dc:
                    4a:55:9d:4e:e0:a4:f0:24:5d:19:a8:78:09:10:86:
                    16:e9:40:b9:40:6b:ad:9c:83:b1:49:cf:e6:44:e1:
                    07:de:a7:f5:14:e5:0a:21:63:be:f6:b7:d2:59:a7:
                    f9:e2:f7:a7:77:12:45:97:90:a5:e8:0c:eb:2d:c6:
                    ba:2d:d5:63:cb:5b:af:ab:20:66:00:d7:19:16:a1:
                    04:46:53:33:5f:fc:9a:4a:4e:3b:63:e2:62:76:5d:
                    aa:26:c6:90:bd:c6:4c:01:6a:3c:48:00:fc:28:32:
                    3a:97:d9:88:d2:c2:e0:34:1b:0e:4e:30:d5:27:9d:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AF:00:87:ED:DC:29:86:50:85:13:80:EF:EE:A6:FD:71:55:4A:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a815da88-cfa8-3af3-ada0-55a72b6309b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:64:20:10:28:da:8f:36:a1:e3:7c:ea:ae:69:9a:55:1b:c1:
         d0:b0:66:82:a8:8c:c9:7b:20:de:89:3c:fa:40:b1:95:47:f3:
         85:d9:b2:25:03:c1:62:e0:73:93:44:09:26:c3:a8:15:2f:82:
         02:af:f8:c1:0f:a0:13:73:c3:29:ce:79:31:0f:d4:15:93:e8:
         b5:19:b0:2d:17:9e:45:0e:bb:eb:c8:74:a2:81:2d:d6:ec:85:
         15:08:8c:3f:b1:97:32:cc:80:b3:ca:4c:08:d5:58:39:c7:41:
         5a:b5:29:67:f7:9e:53:f2:9e:53:ad:59:87:32:ea:df:80:08:
         e7:3e:14:67:8b:2e:a4:56:84:78:07:44:e6:ef:79:84:03:13:
         a7:66:0c:02:d5:c9:50:5f:77:11:55:a2:32:ef:d4:9f:c6:da:
         f6:67:7b:74:f0:dc:b3:0f:43:27:20:00:0c:75:3c:73:c4:87:
         a7:58:9a:16:9d:db:dc:59:17:b9:d2:58:0b:86:62:dc:0f:5f:
         81:4a:33:87:2f:f2:11:08:43:38:33:09:48:e3:9b:1c:be:a4:
         0d:27:4d:0a:c2:69:8a:7f:7d:67:5f:d8:e3:e6:16:89:ab:14:
         19:dd:65:ff:07:06:cb:85:b8:8c:d7:c5:e2:87:68:ee:8a:d3:
         4e:0e:64:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:35 2025 by rpki-client