Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5f2f44c1-1fed-3b18-89b2-5d56f7a59a14.roa
File:                     5f2f44c1-1fed-3b18-89b2-5d56f7a59a14.roa (raw, json)
Hash identifier:          l9FJSmbWHcwEICGME/H3JGiGISfLizQqP7yZbk60iSU=
Subject key identifier:   E7:00:35:07:F5:B0:15:7C:93:59:AB:00:65:8E:42:3A:0C:8B:A3:FF
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584BB5C2637E0405A27520F0BB80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5f2f44c1-1fed-3b18-89b2-5d56f7a59a14.roa
Signing time:             Sat 01 Nov 2025 01:00:30 +0000
ROA not before:           Sat 01 Nov 2025 01:00:30 +0000
ROA not after:            Fri 30 Jan 2026 02:00:30 +0000
asID:                     13335
IP address blocks:        204.195.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b5:c2:63:7e:04:05:a2:75:20:f0:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  1 01:00:30 2025 GMT
            Not After : Jan 30 02:00:30 2026 GMT
        Subject: CN=aa3d745a-cd98-4e50-990c-87222508d0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:26:43:de:c9:0b:c8:e1:8d:18:cc:42:e4:be:
                    bc:72:e8:a0:7c:17:d3:1b:52:52:1c:82:91:71:84:
                    4a:02:19:44:a3:26:13:65:24:2f:0e:ca:c6:7f:0b:
                    7d:97:0a:c4:90:3d:61:8a:4d:90:ef:84:47:0b:02:
                    d6:44:09:e3:2f:28:86:e0:56:d3:cc:af:e4:99:03:
                    b2:59:86:48:72:9e:41:4a:30:df:ca:4f:6a:a4:3d:
                    2a:57:cb:ae:cf:70:0e:ee:40:20:bc:f0:41:c5:ad:
                    19:f7:4e:01:13:2a:fb:81:fc:d3:c6:14:ed:25:8f:
                    54:06:8f:d7:47:43:cf:3c:b4:bd:6a:7e:6c:9a:33:
                    d5:ba:68:39:a0:b9:13:ff:03:5e:43:f7:ce:5c:ac:
                    33:5f:ca:bf:79:9a:51:b6:cb:54:42:a7:34:6b:ca:
                    ba:f5:0c:e4:50:e9:62:df:f1:45:55:82:8c:60:d5:
                    64:73:17:ca:e9:07:d0:d4:80:c6:2b:bd:27:fa:36:
                    3d:59:ec:88:c4:3b:2b:a3:ac:71:31:13:d3:26:99:
                    70:8f:d5:e4:e1:90:d5:d4:2e:9c:5b:8b:c6:c0:da:
                    e2:df:10:4a:3a:ce:d5:78:c6:5f:a8:af:2a:6b:33:
                    21:c8:55:2f:3a:20:ca:d1:19:59:18:74:0a:e3:b3:
                    af:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:00:35:07:F5:B0:15:7C:93:59:AB:00:65:8E:42:3A:0C:8B:A3:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5f2f44c1-1fed-3b18-89b2-5d56f7a59a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:4d:51:86:ab:45:bb:4b:41:b1:35:f3:21:12:96:8f:83:6f:
         b4:05:d5:1f:56:04:97:86:15:e7:e3:fa:3a:b3:16:e3:ee:01:
         a0:b7:b1:30:36:a3:4f:ff:0b:a9:6a:12:6b:8a:3a:fb:18:1f:
         98:44:84:5b:e6:09:aa:c3:d5:36:aa:8b:86:40:8a:61:de:0f:
         6b:f6:f1:ed:5f:11:45:a9:b2:35:a7:9e:41:8f:14:f1:0a:96:
         20:23:50:48:eb:eb:e7:ba:6b:3d:a4:a0:da:fc:e7:c9:1f:61:
         a8:8b:75:99:d7:d1:19:d6:8d:e5:ef:be:19:04:3e:07:10:6e:
         7d:1c:9b:ee:3c:00:80:43:8a:33:d1:2e:cf:0b:42:0b:e7:1b:
         b4:6f:ed:58:1e:fd:98:39:21:d9:f5:21:b4:5e:eb:ea:91:09:
         e5:53:ba:5b:cf:d0:54:e9:65:2f:3a:b5:55:af:03:6b:ea:e7:
         85:7f:9e:82:00:98:25:c4:aa:a6:eb:e3:74:b9:a8:42:cc:6e:
         34:92:13:10:42:2d:2e:52:ea:ba:41:c8:d3:68:ce:7d:4a:bf:
         c5:4c:7e:eb:4f:e7:23:15:1c:d6:35:e9:d7:a3:b3:59:39:56:
         38:f8:55:cd:e9:c6:1f:1a:b1:23:eb:1d:af:14:84:39:5e:6b:
         73:b9:7b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:15:05 2025 by rpki-client