Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5f2f44c1-1fed-3b18-89b2-5d56f7a59a14.roa
File:                     5f2f44c1-1fed-3b18-89b2-5d56f7a59a14.roa (raw, json)
Hash identifier:          LftuK2iAFX/axc2Kp3alvjY1sld+YAzoFtl8iYaQBSg=
Subject key identifier:   86:7A:89:12:FC:9E:B0:CB:CC:D6:B6:DA:56:60:73:C8:A6:42:EE:88
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584EF9E21C1345AA7E52CA857840
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5f2f44c1-1fed-3b18-89b2-5d56f7a59a14.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        204.195.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:1c:13:45:aa:7e:52:ca:85:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=82baa29a-1d02-4a33-97dc-8e0283c03e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:f7:de:89:a5:39:48:be:d6:23:fe:5a:39:
                    99:f1:3d:80:ec:88:3a:24:f2:ee:53:0d:68:62:e5:
                    39:29:48:85:22:96:06:21:50:df:67:f9:7a:c4:c0:
                    e3:ac:08:bb:36:17:d2:e2:35:4b:a0:11:10:20:40:
                    8e:97:81:33:06:63:21:18:bc:c0:f0:77:06:2b:0e:
                    9a:e2:a3:b1:56:16:26:b6:0c:05:ff:39:e8:e9:ca:
                    f3:da:ce:94:e6:ab:81:8f:70:7c:4a:ce:8f:49:45:
                    8a:2e:15:16:fe:d5:87:6e:ee:e7:fb:25:71:a3:8b:
                    40:01:31:0a:5e:3c:32:8e:26:98:2e:26:21:10:66:
                    9d:20:db:59:68:6c:0b:bc:d8:e1:0c:66:36:46:0d:
                    d1:5c:cc:70:95:79:b3:c4:da:9b:fc:90:03:5d:f6:
                    71:2e:bc:cd:ca:68:85:08:e4:67:84:54:38:da:97:
                    98:1a:fb:fc:88:d7:d5:03:75:68:00:51:85:d9:ed:
                    fa:10:28:bb:68:12:d5:e6:81:0d:5e:49:67:54:2e:
                    51:d2:35:26:b2:59:c9:3d:37:30:5e:1c:dc:56:cb:
                    f4:51:a0:81:69:0e:8a:56:fa:b4:69:44:4d:ad:5a:
                    75:89:dc:d4:65:ea:42:c4:63:79:d0:01:f0:c1:ba:
                    ed:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7A:89:12:FC:9E:B0:CB:CC:D6:B6:DA:56:60:73:C8:A6:42:EE:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5f2f44c1-1fed-3b18-89b2-5d56f7a59a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d3:89:f3:22:12:b8:da:a4:87:81:f6:91:9e:b4:59:5d:71:
         e5:40:76:49:93:0a:c2:66:22:cf:8f:4d:56:f7:ef:de:28:e5:
         07:20:7b:2a:c6:30:d8:89:01:e1:f7:18:7e:7f:2d:de:ec:71:
         5e:f6:71:25:61:a8:20:ba:0e:0f:ff:60:7e:8b:28:ed:69:fb:
         e2:e3:80:9a:20:47:21:a6:a8:f0:8e:09:e7:a8:bf:d2:fe:2e:
         fa:28:dd:d1:cf:10:9c:45:38:6f:25:e2:47:f2:a1:9a:5c:0d:
         ee:3a:99:9d:e9:24:06:ec:6b:65:c7:f1:db:4b:0b:37:2d:64:
         00:a9:2d:10:a7:85:6b:ac:67:88:80:e3:86:0c:b7:f6:45:99:
         ed:4e:69:eb:3d:b5:98:eb:2c:df:12:70:89:08:71:fd:7a:3b:
         43:d6:ab:2b:ea:fa:f4:04:fa:fe:45:2f:b7:ff:f2:21:8f:92:
         8d:a2:10:ab:43:5b:e6:1e:ed:27:e6:0c:2b:ec:fb:c4:39:eb:
         a2:e7:b0:6f:43:8e:2a:e4:2e:35:e3:cd:53:5d:31:10:26:4e:
         26:7d:4b:da:ed:9a:fe:a3:72:e5:4f:f8:ae:64:35:76:f1:c1:
         b1:3e:4f:4f:b1:5c:8c:3e:6d:cc:0c:10:51:f0:bf:7f:c3:a7:
         71:d7:26:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:32:02 2026 by rpki-client