Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d76809c9-dc78-3d60-810a-aff46abe67b7.roa
File:                     d76809c9-dc78-3d60-810a-aff46abe67b7.roa (raw, json)
Hash identifier:          FN1Bsfo2tE/wNH193DqTQqEzNAWZcwel9lGmIou1Qm0=
Subject key identifier:   81:E7:64:C6:F8:AD:EC:09:9E:5B:A3:EF:C0:48:16:44:D8:DE:0B:86
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD5066AD5B4F74880102F2A80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d76809c9-dc78-3d60-810a-aff46abe67b7.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:6a:d5:b4:f7:48:80:10:2f:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=95bdbb91-92d4-482b-a3b4-67b1f68819d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:89:3b:22:3e:9f:2c:27:be:db:b3:46:05:
                    1f:31:ca:f5:7d:c5:c5:40:30:74:7f:4a:83:6c:63:
                    3a:a2:d4:b8:b8:45:2d:0c:9d:46:6b:b1:33:28:ee:
                    66:af:64:58:1c:7d:01:1b:cb:f6:26:92:4f:ca:31:
                    71:76:81:32:2a:bf:d5:13:a7:90:7b:2c:8a:68:94:
                    c2:ea:f9:5d:5b:fa:cc:c0:0e:f2:a0:fb:a5:18:f2:
                    31:96:47:74:dd:de:a9:a1:95:23:88:f7:78:7b:3d:
                    88:f9:84:6c:cc:50:2a:2a:0b:86:a9:0c:73:96:87:
                    3d:30:78:20:e2:cd:2e:13:bf:e1:c6:37:24:ac:4f:
                    a7:67:a4:ee:0f:73:05:52:d3:dd:87:d3:b7:f6:12:
                    45:bc:43:c6:c9:72:e9:c9:0a:d0:47:21:c7:0f:36:
                    d4:a2:a5:3b:b0:5a:20:43:45:fa:88:54:44:c1:e3:
                    47:69:28:34:17:47:2a:49:6d:54:d2:03:f9:0d:de:
                    ee:ac:a1:0f:eb:01:3c:09:5d:42:ba:fd:a8:e9:08:
                    08:86:7b:0f:45:ad:83:a9:f3:21:53:31:4f:fa:8d:
                    5f:3a:aa:5b:a5:a0:10:16:28:52:49:6a:98:10:a7:
                    cd:d1:5b:ad:d1:1b:e8:96:d2:7b:82:90:ed:a1:a1:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E7:64:C6:F8:AD:EC:09:9E:5B:A3:EF:C0:48:16:44:D8:DE:0B:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d76809c9-dc78-3d60-810a-aff46abe67b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:bd:93:46:8e:d0:9d:29:83:40:b7:b4:60:49:bc:f9:9f:da:
         ca:a1:44:2e:92:6c:7a:fc:13:fb:58:05:00:3f:a4:29:29:38:
         a0:12:d7:e4:6b:2e:49:f0:d7:b2:eb:e4:d9:f4:c0:db:6d:49:
         63:82:64:2d:14:96:6f:25:05:7e:6d:b4:ea:15:2e:4d:f4:6e:
         14:31:6c:4a:d1:74:5d:11:0d:f3:78:64:e6:a5:7a:9e:7c:62:
         7e:fd:a6:9b:8e:ce:61:9f:da:cf:9a:3b:9e:65:db:57:7c:ee:
         a2:4c:36:2a:f5:81:8c:4d:d5:8c:a2:61:f8:0a:8d:e4:c7:c5:
         0d:b3:3c:91:b1:bd:e4:92:4a:f8:2e:3e:9c:9a:32:bb:b4:af:
         a7:da:99:6f:ab:9d:88:a3:0a:03:78:59:bd:b2:71:af:a8:d8:
         66:92:ef:ca:ff:bd:29:a9:8c:1d:4e:70:1c:39:8e:c1:29:d6:
         0d:0d:21:b3:a6:75:c2:a9:94:ed:7f:1c:89:14:63:98:5f:36:
         5d:00:e1:35:c6:2e:44:e1:ba:62:ae:f1:15:5e:7f:5e:b1:0d:
         4c:1a:fb:00:69:9c:7b:b7:01:83:25:a6:de:36:44:19:bb:dd:
         b3:7f:d1:73:1f:6c:5d:88:4f:ac:fc:90:3f:e6:3f:02:74:8e:
         25:b6:d0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:46:27 2025 by rpki-client