Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa
File:                     5d294aa1-589d-36a0-863c-3f219e30b6f5.roa (raw, json)
Hash identifier:          FQ2PBkGw4WSuxtpRetQa+DflmLxYZ2W/mEgjp/6Il3I=
Subject key identifier:   A0:E2:40:8B:24:F4:F8:1D:09:D8:03:ED:7B:B4:E5:37:6B:CA:46:CA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D773A7854EAEA42D0413190C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     13335
IP address blocks:        204.195.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:78:54:ea:ea:42:d0:41:31:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=0e752edb-be22-476d-96c7-5768d540fbee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:93:bf:f5:b1:7b:47:bb:1b:8e:6f:cf:34:
                    36:cf:d6:7f:f8:95:b0:59:c0:4d:a7:2c:ac:6b:7c:
                    c2:9a:e6:f2:8e:28:3e:c7:22:03:94:ee:ce:be:29:
                    b4:fc:9b:c2:df:b1:eb:1b:06:ab:f7:24:71:06:d0:
                    ad:25:41:87:cc:5b:f6:4e:9c:f3:1d:81:c4:3b:ea:
                    79:1f:de:8c:70:0d:63:22:29:2e:d8:e8:a2:15:be:
                    97:4e:fe:84:4f:46:dc:ee:aa:2f:60:87:e3:40:39:
                    9e:ba:90:ce:aa:38:87:ba:54:2d:b8:13:2d:6d:d3:
                    b8:1c:7a:e1:37:d1:7d:b4:59:6a:23:f7:62:e0:63:
                    97:d0:81:e4:4d:42:45:0a:ee:b1:ea:28:36:50:8d:
                    92:bd:57:ab:31:68:0b:c3:d7:50:b2:ed:b5:42:74:
                    d4:f5:33:6f:0e:3e:4c:ed:9b:0b:b4:a3:ad:43:9a:
                    d3:d1:5a:03:c1:9a:d2:55:57:78:a0:66:83:82:94:
                    5e:0a:6e:ec:78:c9:c8:d5:ff:4d:82:f9:df:7e:ba:
                    32:20:55:e3:da:c7:a0:6a:bf:46:c0:c1:c3:25:65:
                    96:3b:bb:d2:b2:a7:3c:36:51:60:5d:3b:12:08:0a:
                    19:eb:91:75:c9:77:1d:24:00:4d:fa:02:22:cc:20:
                    7b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E2:40:8B:24:F4:F8:1D:09:D8:03:ED:7B:B4:E5:37:6B:CA:46:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:70:b9:4c:29:35:cc:c8:3f:93:a6:7a:af:e6:a8:1a:dd:0c:
         ae:af:d8:90:07:09:a2:bc:0a:36:67:c6:a5:6b:7a:52:7e:ff:
         0e:b9:99:ca:07:83:a3:52:b3:4e:c0:a5:31:55:3e:07:c5:e3:
         b6:97:58:9d:34:79:e9:e5:db:d6:22:a4:7f:fd:c3:9a:5a:44:
         07:7f:48:8f:52:db:64:dc:56:22:b8:61:65:ef:3f:15:24:16:
         17:b0:f8:ec:ad:5e:ed:c8:46:3a:71:77:6e:20:47:e0:20:28:
         5d:db:6c:21:1b:d0:83:90:f1:8e:57:64:60:02:a8:87:ed:d8:
         7b:d8:67:c5:99:d7:d0:dc:9f:dc:02:1f:d8:84:88:72:e6:e9:
         c9:cd:03:d6:08:fe:a2:c4:d0:a5:f8:f7:0f:6b:1e:4c:0d:af:
         52:e0:97:0b:0e:8e:b6:c7:d6:20:79:27:24:9c:b8:d2:ac:6b:
         ab:ec:18:e3:4b:00:b1:ab:50:93:20:76:90:4c:41:06:14:dc:
         16:a9:c1:c1:c2:b3:b3:e7:09:b8:7b:b3:84:95:7e:a1:7f:1c:
         24:88:6a:32:3a:b8:dd:72:21:89:cd:a6:52:6a:2b:b3:f5:b6:
         0f:b8:13:8a:8f:75:ec:aa:9d:c6:fd:7c:92:7c:4a:08:14:7c:
         da:ec:21:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:31 2026 by rpki-client