Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f46c681c-50cd-3e6d-bd9a-a77ba08ccdca.roa
File:                     f46c681c-50cd-3e6d-bd9a-a77ba08ccdca.roa (raw, json)
Hash identifier:          /M5c1DYKcZ7uJ8FWl3uvGfKnQGVH4MHg/ZOvfIqzlME=
Subject key identifier:   FA:88:97:28:D2:AB:61:96:08:DE:27:DD:70:5C:42:34:00:37:BE:49
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584AE5C6816D1A28AF17FCFB26A0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f46c681c-50cd-3e6d-bd9a-a77ba08ccdca.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        204.195.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:81:6d:1a:28:af:17:fc:fb:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=992c15c4-7e2f-4b49-9f65-08f633728c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:e6:09:3c:7f:21:ec:25:93:70:fb:7d:2a:
                    2e:2f:d0:ae:e7:e6:5a:18:68:e8:77:d4:81:15:8a:
                    f5:16:cc:bb:0e:b2:cc:df:ed:53:98:98:eb:7e:5b:
                    84:f1:d5:18:c8:03:09:10:2f:9b:73:d9:be:cb:41:
                    d3:34:65:c1:80:81:bc:93:f2:a7:38:18:5a:e1:52:
                    1d:3e:5f:73:65:5b:a8:9e:1f:88:96:6b:cc:37:7f:
                    9b:f4:0d:ae:49:0b:47:96:2b:35:08:95:6b:cd:3b:
                    06:f2:eb:84:63:df:1d:99:cd:0d:5c:6b:5b:00:70:
                    0b:6d:1a:e9:9d:0d:d6:68:1b:f6:4d:61:a4:1f:ef:
                    02:9a:82:3f:37:e5:86:a5:f4:2b:ac:60:ab:d6:3a:
                    0c:c5:ec:b7:f6:4a:0c:64:db:c3:c1:2e:74:40:ce:
                    69:13:ac:2e:2d:97:5a:f5:bb:53:28:43:3c:b4:f8:
                    c7:3d:14:05:bc:7c:7d:cf:34:3a:3a:80:1e:59:a5:
                    38:10:1e:58:11:1a:a2:07:df:9c:d1:8c:99:54:2e:
                    4e:85:71:26:a2:1f:7b:d8:32:08:58:eb:a5:32:5b:
                    f7:21:fa:dd:dd:db:12:ce:32:ca:b3:de:30:ff:66:
                    2a:cf:0d:32:7d:a6:9c:12:15:d4:45:d6:1e:9a:62:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:88:97:28:D2:AB:61:96:08:DE:27:DD:70:5C:42:34:00:37:BE:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f46c681c-50cd-3e6d-bd9a-a77ba08ccdca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:80:ee:66:ab:56:73:7d:2a:89:d8:30:ca:b9:ef:4d:c8:4a:
         d6:dd:39:e2:15:00:08:8f:43:fe:5f:dc:0a:ed:78:ce:98:54:
         f1:8a:12:87:25:7a:4b:e3:76:5a:65:cd:37:20:28:1c:65:ac:
         ee:51:81:01:dc:00:81:b6:b9:74:40:b8:c4:ef:2b:6c:05:44:
         2f:59:75:52:fb:82:0f:f9:5b:1c:22:a8:21:78:28:85:9f:1d:
         c3:4e:ae:40:ea:73:bf:fc:c9:96:a4:f6:76:57:57:90:57:c0:
         26:b1:d0:63:91:ac:7f:30:4c:d2:ae:4e:ec:13:36:90:0f:d9:
         a2:f6:d3:8a:a3:71:e5:87:e3:e5:fe:13:0d:50:59:1c:89:09:
         4a:d5:63:b9:33:1c:ef:ee:85:22:e0:25:34:d5:73:f5:e1:6a:
         fc:fa:e8:bb:fc:9a:3a:80:07:ec:9e:b9:c0:58:a0:19:da:38:
         ee:3e:88:87:91:6e:f4:d5:4a:e2:82:a0:2b:00:56:b8:2c:9e:
         f7:be:2e:c2:a1:3c:2d:8a:94:44:80:7f:72:0b:76:36:2e:02:
         f1:ab:5c:81:0c:d0:09:b0:63:1b:a1:fc:b0:94:fb:73:ae:d1:
         af:5a:ae:c2:4d:20:d4:d8:2a:62:a5:4c:78:4b:eb:fd:96:29:
         cc:9c:0d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:45 2025 by rpki-client