Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b679070f-a340-35f8-8aa8-631c57ec0943.roa
File:                     b679070f-a340-35f8-8aa8-631c57ec0943.roa (raw, json)
Hash identifier:          /Xo4ux4rgptj8VUMsGMg7PH3f+RgR5dij/LTP20UXY4=
Subject key identifier:   E6:79:C4:73:F9:76:F1:A8:C7:F0:76:8D:19:CD:5E:63:C5:75:C0:A4
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD5066B2C70E5C22150995700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b679070f-a340-35f8-8aa8-631c57ec0943.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:6b:2c:70:e5:c2:21:50:99:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=41dc773b-e656-4619-8f67-26e06d92246a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:b3:40:22:8d:80:07:20:3a:e5:9d:4d:34:
                    36:93:01:c4:d1:43:b5:b1:0c:38:29:be:45:2f:2f:
                    11:19:92:e3:ec:bb:0d:5a:76:55:c2:ea:9b:aa:67:
                    14:f3:ad:93:66:ef:70:d4:08:fe:bb:92:4a:70:d3:
                    c1:0e:fe:6d:a3:47:05:a0:4f:c2:47:74:61:4d:29:
                    52:8a:48:8a:d8:31:75:9e:1d:4e:7b:dd:45:89:47:
                    f1:f7:85:24:0d:9f:8a:9e:cf:94:7f:22:74:2f:3b:
                    f6:78:dc:fc:42:cf:74:61:75:58:4e:b0:d6:b0:67:
                    27:62:25:2d:41:18:29:ac:ee:12:53:77:7b:4b:9c:
                    a3:b3:65:55:42:81:25:3b:2e:d7:53:cf:ce:1a:14:
                    9f:bb:87:79:76:3c:c4:4d:ac:01:ba:c5:cc:94:5a:
                    7c:ea:c2:97:16:d2:4b:18:e3:0d:63:a2:f4:8b:3a:
                    91:55:4a:2c:e4:00:c8:ed:38:47:74:57:33:76:67:
                    af:23:37:cb:93:ac:61:68:f6:53:62:f6:a2:33:75:
                    63:0e:5b:17:b0:5e:a0:f8:6d:0c:ba:df:24:6d:b9:
                    f1:40:7c:43:e9:22:87:c0:e4:ce:ca:27:d6:c7:51:
                    cc:22:a8:b4:7e:b4:fa:42:8f:71:48:76:89:ed:07:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:79:C4:73:F9:76:F1:A8:C7:F0:76:8D:19:CD:5E:63:C5:75:C0:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b679070f-a340-35f8-8aa8-631c57ec0943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:75:fa:39:56:36:fa:17:00:63:26:b7:64:8b:74:c1:da:95:
         32:90:a6:d2:35:e4:24:1a:18:a7:4a:c4:93:80:52:cb:4a:a8:
         dd:b4:f3:bf:79:17:94:5e:2b:6f:2e:60:e3:88:7a:dd:c0:a9:
         e5:a2:df:a9:60:c6:4d:a3:32:d0:f5:60:cd:41:33:d6:52:10:
         61:2f:d1:c4:a0:1c:ec:c6:7b:b6:56:61:d7:86:5a:78:be:0c:
         18:0a:e0:fb:70:06:a5:85:c6:a4:c2:26:b2:a6:05:f9:ee:47:
         80:f9:fc:a9:84:7a:3f:a9:03:b3:99:b5:ff:e8:df:e7:e3:18:
         07:2d:fa:08:fa:28:ab:5c:45:b3:36:21:bd:84:c3:50:1e:87:
         e4:36:bc:74:51:66:96:c6:7b:f8:23:08:ee:8e:ec:6c:69:8b:
         81:d6:42:b8:d3:71:03:e2:f6:ef:d2:fa:35:bf:0e:cd:31:a1:
         3d:e1:70:e6:e3:b4:20:99:14:63:9f:c9:77:f9:85:a5:36:cc:
         ef:fd:2b:41:97:0f:46:fb:c4:d7:00:38:43:e3:9d:d0:20:cf:
         26:e2:e7:aa:f0:72:fd:98:b9:e3:08:05:72:3c:00:99:54:fd:
         ea:98:62:38:61:8d:c4:65:7d:12:fd:4b:55:6d:ef:50:f4:f1:
         3e:66:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:52 2025 by rpki-client