Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/be4b4bbe-7d95-3d7f-b9c4-3db9f5ccdf2e.roa
File:                     be4b4bbe-7d95-3d7f-b9c4-3db9f5ccdf2e.roa (raw, json)
Hash identifier:          M3hWBN/FcL88UThuGCCRVSqiLcDJaUme5mnK1MXsX6c=
Subject key identifier:   07:D4:9F:93:73:A9:5D:1F:A1:49:E4:B7:91:3F:8A:7D:41:1A:EE:75
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD5066943FD619D25B4E04180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/be4b4bbe-7d95-3d7f-b9c4-3db9f5ccdf2e.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:69:43:fd:61:9d:25:b4:e0:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=cc07b284-38ad-4b83-9193-9ea7935833e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:9b:de:6a:0c:82:ee:3f:72:d4:3d:b3:4b:
                    00:c2:50:49:50:47:57:51:d5:83:3b:25:07:5d:3b:
                    7d:86:c7:ad:a1:f6:81:9b:b2:55:33:31:66:f1:d1:
                    f6:4c:5b:1d:e6:13:f4:78:10:91:5b:ac:75:33:88:
                    cc:b4:d5:fc:a4:44:71:ae:ee:0b:eb:16:cd:a6:2a:
                    50:19:b7:ca:37:dc:60:f7:8c:50:42:d7:cb:8b:5a:
                    4e:05:81:85:a9:86:83:f0:63:47:e1:47:b8:b2:d5:
                    3d:7f:94:3b:20:23:24:12:7b:b5:1b:a3:0f:a6:da:
                    41:f3:43:b8:de:c3:f3:03:57:e1:23:0b:82:73:c1:
                    91:10:f8:b7:4d:8c:a6:b1:c6:cb:8e:41:3a:5e:99:
                    9d:e0:fc:40:fb:8b:d1:84:ec:67:af:1f:0e:da:59:
                    22:a9:9d:86:df:52:f8:49:cb:bb:93:c9:28:c5:26:
                    71:d3:5e:02:ac:95:bc:82:15:43:07:d0:67:73:7f:
                    ac:47:fe:c8:f8:95:c6:35:b8:0d:65:7f:8b:2e:c8:
                    73:ad:31:f4:03:87:9c:9e:da:e6:8c:fe:a4:7a:74:
                    67:36:16:87:5c:2c:0e:91:13:3c:f2:2b:e1:a7:1a:
                    1c:ea:90:f7:f0:27:10:0c:cf:d8:6d:02:fa:00:89:
                    3c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D4:9F:93:73:A9:5D:1F:A1:49:E4:B7:91:3F:8A:7D:41:1A:EE:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/be4b4bbe-7d95-3d7f-b9c4-3db9f5ccdf2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:7b:36:39:55:4c:ab:26:94:0c:08:f5:cc:a5:0a:c8:ac:a1:
         58:fd:41:f9:83:7d:1f:fa:3f:d6:04:23:07:be:49:53:21:0f:
         7a:30:1b:6e:4c:99:74:3f:30:73:17:db:84:f9:37:e4:b1:22:
         8a:4a:96:3e:66:fd:0b:98:f3:73:16:f3:0c:94:74:1d:c3:1f:
         af:8e:5f:88:71:55:ba:c9:0e:e1:ae:f8:fb:e5:6a:c3:9e:a0:
         1c:7c:d9:b0:91:4c:7e:47:70:10:8b:41:04:4f:ee:43:3e:ae:
         9e:68:13:7c:b9:89:f0:41:0e:45:1c:a3:5e:0f:aa:0c:fe:24:
         08:03:be:d5:e9:25:48:57:43:08:ed:5f:58:57:a8:d3:9a:bf:
         b2:3c:d7:66:e2:ef:9a:71:0a:06:a1:6f:89:8f:2f:63:af:4c:
         62:ed:54:de:22:e5:0c:d6:78:7e:97:89:e8:06:82:37:e3:92:
         e3:cc:23:aa:46:7d:82:5c:39:78:56:09:c8:14:b9:26:1b:11:
         a0:3f:76:e1:9a:bf:6c:a2:dc:3e:1e:6e:db:d4:6e:00:23:c8:
         6e:b7:ee:ef:96:ce:fc:4d:1d:3f:ba:f7:38:41:01:3a:1b:ac:
         97:40:cf:be:ad:9b:e2:9d:ae:d2:ad:1a:08:f8:45:6e:e4:f4:
         df:27:58:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:15 2025 by rpki-client