Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/105013ec-eccd-3766-a96a-7b734cc7dabb.roa
File:                     105013ec-eccd-3766-a96a-7b734cc7dabb.roa (raw, json)
Hash identifier:          tXv7mmvHr5kRDdFPLDIDqEdG7N6VQ4PrzOk4TGAIVCk=
Subject key identifier:   2C:24:49:66:BE:58:5A:91:0F:CA:A6:EE:75:CD:82:59:53:DB:7F:20
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849F44A65D82920AE3199482FE0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/105013ec-eccd-3766-a96a-7b734cc7dabb.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        204.195.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:65:d8:29:20:ae:31:99:48:2f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=ba5b0417-9d81-439f-bcf7-2c63050ac24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:ab:05:1e:29:1b:f0:2f:b9:50:98:8f:8b:
                    0a:9d:61:e9:36:e3:09:2a:ec:dc:53:e4:67:0f:dd:
                    23:cd:fc:a0:07:bb:4a:c5:7d:89:13:80:57:8b:af:
                    52:92:e5:0a:69:05:60:2e:b5:da:25:15:9a:ad:6d:
                    ca:60:45:8d:df:b9:1f:6f:bf:b4:77:c8:88:7f:fe:
                    64:4c:b8:38:0d:03:1d:a9:0a:b1:01:dd:d4:db:c2:
                    02:52:e3:9b:55:51:d6:8b:be:08:17:54:18:d9:19:
                    b5:f8:82:e2:ad:62:38:9b:fe:bd:36:f0:76:cf:52:
                    9f:79:29:d2:59:71:d3:74:41:b2:3b:c8:4e:f5:95:
                    37:05:96:d5:9b:d4:7c:1a:bb:bc:ef:4f:c9:e9:93:
                    3c:9b:a5:36:76:f7:be:dd:cd:f5:23:ca:9f:1c:62:
                    5e:6b:b3:e2:8e:68:aa:ae:47:06:4d:79:62:32:9b:
                    24:aa:fa:67:71:9a:72:7c:05:4d:9b:04:10:cc:42:
                    aa:fa:fb:97:2a:83:48:b6:08:e0:c9:7f:74:f1:1d:
                    8d:2c:d9:57:c1:fe:38:ec:2e:09:5e:b6:1a:ab:4f:
                    90:13:b0:a9:70:6b:cf:f7:26:da:3a:43:cb:13:35:
                    2e:29:55:8a:96:bc:c5:9b:6d:11:94:b2:15:30:cb:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:24:49:66:BE:58:5A:91:0F:CA:A6:EE:75:CD:82:59:53:DB:7F:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/105013ec-eccd-3766-a96a-7b734cc7dabb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:81:d7:a0:be:3c:28:07:4b:2e:91:11:29:a6:b3:7c:6b:ce:
         30:73:fd:26:06:c7:b9:f5:d2:ee:4f:ec:6e:d9:fd:90:2c:18:
         e4:cb:b5:84:05:46:0d:cc:c9:d1:b6:00:8e:9a:f1:46:93:c5:
         e4:82:77:dc:e7:cf:09:9f:7d:e7:e6:e5:9d:b7:fc:04:b0:e8:
         71:db:f7:47:77:29:59:90:c6:bd:4a:ae:a1:98:15:5a:03:59:
         e0:77:8c:82:67:b2:58:ed:3b:e0:eb:77:c6:17:16:48:7d:5c:
         49:ca:77:c7:5e:67:8d:08:60:15:85:0c:59:ae:cf:9e:0b:c9:
         ae:78:f5:ae:90:91:16:65:5e:17:89:fb:bc:a9:e0:26:cf:d7:
         c8:51:e8:58:2b:e9:6f:81:e2:f1:29:d2:d7:2a:9a:51:b0:a3:
         11:75:64:21:5c:20:02:23:a7:26:63:70:c6:be:cf:f7:76:75:
         ef:a1:59:0a:f9:58:fd:dc:b7:42:62:af:ee:e4:37:90:07:97:
         c4:af:50:5c:a9:9e:be:d9:3f:77:4b:ab:00:1d:e6:21:e4:b8:
         b8:de:e6:57:9b:f7:54:11:bc:10:05:7c:53:41:dd:ec:e4:e4:
         ee:66:f9:a5:0d:5a:f8:f7:d5:c1:ae:c6:59:70:71:b2:24:94:
         5b:c3:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:18:15 2025 by rpki-client