Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3da3962-a423-3a05-a507-30064af54fd3.roa
File:                     e3da3962-a423-3a05-a507-30064af54fd3.roa (raw, json)
Hash identifier:          qgis5pNPkpEz18qRInLjp6+U2phMwAq8QhjlNxWFSbc=
Subject key identifier:   68:7D:7E:3D:8C:43:C0:3F:04:86:B6:14:2F:D8:0F:A2:BF:11:6B:9E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AD50669C3EEF37DD705BD3B00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3da3962-a423-3a05-a507-30064af54fd3.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     13335
IP address blocks:        204.195.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:69:c3:ee:f3:7d:d7:05:bd:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=9cfd77c3-961f-4885-a8b0-af7427b5fe17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7f:69:30:5b:ff:ba:36:0b:3c:ff:ca:3f:10:
                    5d:d5:64:b8:4e:fe:0a:1c:59:64:e9:db:6f:dc:92:
                    4f:ac:e9:dd:fd:4b:78:c1:9f:0d:f7:79:89:14:dc:
                    98:b8:05:05:3a:ef:49:57:e1:88:7c:6e:ed:69:e5:
                    f9:2f:64:9d:21:ce:c4:10:76:7d:86:28:c9:38:00:
                    33:b1:39:e3:d8:ee:f0:b4:6a:76:91:34:c5:b8:8a:
                    0a:2d:12:72:c7:83:61:65:43:28:86:d7:b0:77:88:
                    df:80:b2:01:f4:c8:0b:92:d1:2f:a8:44:e5:86:16:
                    f6:aa:c6:22:27:55:51:9c:d5:17:20:75:ca:ce:b5:
                    81:3b:c0:f6:d0:a2:6a:91:90:fa:3b:5b:af:f1:35:
                    a1:61:92:b3:20:7e:a5:db:b1:58:f6:f5:40:b9:74:
                    88:d4:36:8d:f6:75:17:de:75:e4:31:9d:9b:f8:d4:
                    bf:a4:9b:d7:d4:e2:70:aa:28:47:ea:07:f0:24:c6:
                    2d:43:74:16:dd:07:76:f6:dc:de:80:18:9c:3b:c7:
                    18:a6:e3:64:8d:c9:f8:88:e4:c9:72:89:59:3f:b1:
                    6f:66:d4:ba:99:e3:0e:66:3a:d4:ef:6f:9d:40:0c:
                    d3:ed:d3:5f:02:9c:f8:5b:7a:65:6a:b2:5b:34:b5:
                    bd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7D:7E:3D:8C:43:C0:3F:04:86:B6:14:2F:D8:0F:A2:BF:11:6B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3da3962-a423-3a05-a507-30064af54fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:56:34:0a:cb:95:d3:84:83:e8:2b:9f:f6:f9:4c:79:ca:4a:
         06:d3:a8:b6:f0:fc:05:f9:10:45:91:6f:f1:54:4e:4f:53:9c:
         a9:72:f6:ba:20:81:86:db:d3:e7:a0:ff:0c:ee:10:56:a3:ef:
         70:ef:d3:e0:a0:b9:56:7b:38:a2:95:12:34:c4:0e:eb:56:31:
         b0:c8:19:7e:78:91:ad:6b:d1:23:8f:02:2f:6c:69:d3:50:f4:
         c7:ea:10:2c:3f:9a:b9:f4:ac:7f:df:04:de:a9:a1:57:e6:94:
         92:de:2c:1c:21:21:e3:5a:af:c3:55:c6:f2:db:55:57:e4:13:
         7d:26:5c:37:29:e5:7b:87:f7:40:09:da:2c:36:d2:89:d0:4a:
         83:95:89:92:e1:e7:04:c1:cf:d3:12:df:27:b7:bd:f1:f2:27:
         4f:f7:9a:ad:3b:ba:31:f2:4a:28:a7:fd:2f:47:7c:d7:e5:be:
         77:e8:24:3e:01:46:27:b2:ae:eb:34:bc:2d:8e:ae:b0:c7:c0:
         ae:a8:bf:0c:d4:23:35:72:85:15:70:e6:3a:63:97:28:eb:e5:
         a1:18:da:91:d6:d7:ec:00:f3:80:56:39:4b:c6:ad:fb:11:8d:
         b8:01:6a:0e:50:a0:52:23:94:5c:41:36:ed:38:99:24:b1:ca:
         a1:08:e8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:46 2025 by rpki-client