Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/62417797-3262-3688-802a-8deaa104663c.roa
File:                     62417797-3262-3688-802a-8deaa104663c.roa (raw, json)
Hash identifier:          NOr891FzRhlq2vf8bxp/OOEDBfAta+muv5i/yLy9/OM=
Subject key identifier:   6A:AE:27:AB:54:39:55:33:71:19:0F:C4:E6:5F:5C:AC:F2:C1:27:16
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D86957350D6ABB07659292940
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/62417797-3262-3688-802a-8deaa104663c.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        204.195.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:73:50:d6:ab:b0:76:59:29:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=2789376d-9304-4eb4-89dc-077c059db311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dd:59:8c:a1:30:f0:b0:57:dd:25:d2:6f:4d:
                    19:5e:7f:bd:85:18:72:a3:df:06:7b:f3:e2:38:58:
                    e1:0f:46:ca:76:20:01:a1:7b:8c:f2:12:34:de:a1:
                    f2:87:1e:0c:85:24:a3:04:67:6c:0f:a9:61:7d:2d:
                    b8:b6:d1:7e:66:d6:ee:59:b7:53:0c:38:fb:7d:5c:
                    60:f1:6e:d7:20:7a:b5:b8:ec:48:ab:ab:a5:ee:73:
                    3f:3b:36:f7:40:f2:ed:d5:a5:1d:79:e9:e0:11:c7:
                    f6:15:b2:1e:7c:c8:8d:ec:cd:8f:cc:31:9f:03:82:
                    0b:85:e6:71:e2:97:1f:6e:34:90:71:d9:2b:71:5f:
                    0e:d6:9f:04:11:bc:ab:28:18:06:01:09:b1:bb:78:
                    ef:ac:cd:10:30:8a:36:08:ac:55:9b:92:4e:bd:81:
                    9c:6e:21:11:d3:2b:3d:7a:82:93:9a:0e:dc:a5:61:
                    fe:a0:66:2d:c1:05:9b:c7:97:cc:50:05:5a:3a:f2:
                    2c:1e:08:dc:1c:66:4e:c1:6a:29:4b:ee:48:bd:82:
                    33:94:2e:74:7d:81:4b:96:d5:d7:c7:32:fc:c9:bf:
                    30:03:26:d7:e5:9d:8d:5b:2c:56:dd:e6:e6:6a:16:
                    f7:eb:02:35:3d:fa:c1:14:eb:8c:af:06:9c:9c:92:
                    f8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AE:27:AB:54:39:55:33:71:19:0F:C4:E6:5F:5C:AC:F2:C1:27:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/62417797-3262-3688-802a-8deaa104663c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ab:2e:ff:72:2a:a8:e9:6d:12:a2:b7:e4:44:fd:4a:62:5f:
         53:ce:a2:ed:aa:f9:63:ef:63:bf:0d:d3:cd:64:2c:e2:84:c2:
         06:12:ea:84:3c:34:9f:54:61:c7:72:36:f7:31:8e:45:69:09:
         1f:66:ef:40:6a:f9:b4:da:5f:fa:b1:04:69:3d:86:12:b6:0a:
         49:f3:35:e9:82:bf:38:79:b8:e4:8b:ce:b1:28:2d:d0:91:5b:
         7d:9e:12:c0:9e:1d:f1:96:ed:71:dd:1d:cd:b7:be:d9:70:91:
         f0:65:f9:fa:1f:72:31:99:84:af:1d:06:02:ed:2e:7f:6e:76:
         57:05:35:c0:db:25:a0:12:72:3e:11:8d:09:15:ea:3e:3a:6d:
         18:24:89:7f:24:7a:90:11:ff:f5:1e:ee:72:b5:56:4e:fe:7f:
         d6:fc:c1:95:e5:23:7e:94:b6:11:2a:40:88:b9:3f:ce:0f:22:
         b6:ab:07:fb:d0:40:9c:c1:d5:24:d3:85:f9:42:f7:95:e2:57:
         5d:f0:c6:d7:eb:51:10:3b:80:8d:4d:5a:a3:0c:bc:56:6d:00:
         fa:3f:f2:9e:03:ee:74:3d:f4:82:0b:37:a1:77:18:3c:36:c5:
         85:67:72:a9:8a:6f:04:4f:46:fb:b6:99:e5:f3:0e:2b:06:0e:
         ac:28:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:07 2026 by rpki-client