Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb710018-ebd9-3e8e-8c04-e794a9471f2d.roa
File:                     bb710018-ebd9-3e8e-8c04-e794a9471f2d.roa (raw, json)
Hash identifier:          gIHqqLUuGdmPy9PukRCdpPbnSP3v9KYWTGKkhPc8JoY=
Subject key identifier:   4B:F1:63:3D:C1:22:51:E6:31:20:9C:E6:BE:54:8C:34:B5:44:7D:25
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD5066D7E94CE96124E751F80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb710018-ebd9-3e8e-8c04-e794a9471f2d.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:6d:7e:94:ce:96:12:4e:75:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=7c12f062-7736-4309-8955-3048794a0c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d5:7f:72:61:71:7e:dc:20:16:f7:7d:36:72:
                    fe:36:ae:d8:a7:0d:ef:64:0d:9a:24:2f:60:45:57:
                    3d:7c:45:06:1e:49:11:88:47:ab:19:37:8f:ff:0c:
                    ba:c2:bd:c1:40:12:ea:e9:0b:3a:62:32:aa:50:80:
                    70:35:77:26:0b:30:84:71:5b:c2:a9:4a:5c:9a:1d:
                    40:37:d6:4a:6b:44:5d:20:6f:02:c8:62:52:12:96:
                    f6:7c:55:65:57:b3:89:a4:de:64:af:8a:68:ce:10:
                    92:39:6a:be:f7:14:fa:86:be:33:3b:94:bf:37:a7:
                    72:ab:c4:82:0c:cb:ea:3c:f7:37:75:06:96:fc:b3:
                    04:3a:22:2a:16:e5:6d:ca:f1:f2:05:e1:c0:39:f1:
                    10:41:af:17:43:53:38:b7:15:20:31:6c:4d:f6:07:
                    e2:d0:b0:62:5b:4d:ea:8a:c6:dc:04:bd:e3:31:30:
                    22:95:c6:58:ef:07:08:db:c9:ed:43:53:fe:d2:c7:
                    96:71:86:20:1a:b4:07:0f:fa:31:5f:37:25:03:99:
                    80:4d:c8:10:a0:80:65:ba:87:f5:50:55:a5:d0:db:
                    d9:7f:fe:2e:06:c9:66:17:66:65:0d:1a:75:00:8a:
                    1c:32:eb:99:80:59:37:15:39:c6:b5:d1:53:d0:dc:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F1:63:3D:C1:22:51:E6:31:20:9C:E6:BE:54:8C:34:B5:44:7D:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb710018-ebd9-3e8e-8c04-e794a9471f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:1b:c3:07:7a:9b:fa:db:2a:6d:52:9f:14:ba:29:d0:9d:2f:
         ac:d4:57:0f:c7:4b:bd:f1:e5:f3:3e:7d:82:77:e7:9c:23:27:
         29:1c:f4:a3:5a:8b:0e:03:f0:18:3c:b9:21:da:d3:c7:62:e1:
         b7:88:01:2a:59:7d:fd:1a:2c:89:f2:12:1e:6f:ce:ee:c1:ef:
         e3:8f:18:f2:a5:4c:76:ea:60:bb:0b:97:ef:fe:ad:5b:23:d7:
         47:ee:be:80:12:38:a9:4b:e6:b4:c5:4f:f4:4c:cf:be:ab:fa:
         7b:10:ef:f4:cd:36:06:fe:b6:d7:be:b8:88:aa:eb:1b:88:ff:
         b0:a3:e0:d3:70:96:78:b3:d4:13:db:32:8d:bc:ca:95:4e:4b:
         33:4a:4e:17:c5:37:af:a0:44:5d:bb:9d:f8:22:f5:2d:18:a4:
         db:f8:e9:70:fc:af:94:c0:6f:a2:2f:7b:5a:dc:c2:f2:75:b5:
         65:1e:1c:09:e3:0d:7d:6d:7c:f2:58:16:e9:eb:fa:1a:53:af:
         5d:90:b5:6d:6e:63:d5:25:51:d9:49:07:3d:46:ad:88:16:40:
         b0:bb:4d:4b:d6:71:37:54:6f:f0:65:6e:8c:0f:5b:0b:c3:8c:
         f8:63:8e:7b:f0:8f:6f:3d:87:f4:fb:8f:92:3b:18:08:8e:21:
         ee:99:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:45:53 2025 by rpki-client