Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dd5dcc5-b100-39c6-8111-c9020f713e52.roa
File:                     9dd5dcc5-b100-39c6-8111-c9020f713e52.roa (raw, json)
Hash identifier:          b1lWG1h23x0AE7cJ/VYUdkwXDRzDGaJmoMC8k54SkLY=
Subject key identifier:   6F:2E:6B:43:46:6C:87:73:3C:DC:69:CE:4B:BD:A9:91:33:FD:8B:D1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D773A799184E40ADB41530800
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dd5dcc5-b100-39c6-8111-c9020f713e52.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     13335
IP address blocks:        204.195.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:79:91:84:e4:0a:db:41:53:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=30636f85-8004-4bec-9489-d739e7ad9f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a0:f1:5e:e4:45:ba:9c:12:60:6f:2f:42:68:
                    c4:32:ca:b0:3a:65:40:bd:20:cc:fb:9d:bb:e0:15:
                    5a:f1:7e:2e:56:89:5d:e4:95:87:af:19:89:43:f6:
                    b5:a1:a3:59:f7:cb:b0:6a:5b:75:81:2d:82:48:43:
                    01:30:00:6d:e4:62:70:bd:eb:ed:ce:59:b3:32:80:
                    13:cb:ba:b2:20:1e:2a:ef:6a:b8:2a:c1:81:9f:26:
                    ba:dd:0f:c7:a5:d3:bf:9d:4c:6a:5e:40:b3:7e:c7:
                    f6:7e:9e:70:97:58:c2:c8:60:14:42:8a:9a:0a:48:
                    c9:1c:ea:0d:06:3a:95:2d:69:32:f8:db:f5:f2:ea:
                    de:ee:bd:88:1c:3c:18:52:e5:35:80:18:70:f8:b8:
                    c3:5a:79:7c:f2:fd:08:df:44:f1:51:b0:1a:2d:65:
                    f9:3d:17:68:59:89:ee:50:b6:96:d3:1d:5d:a7:09:
                    9b:b4:10:28:3d:82:0a:cc:29:a3:e0:ab:fa:01:6d:
                    4a:3f:f8:1e:60:a7:fe:d9:7a:c8:f9:97:2c:6c:09:
                    55:0d:f0:66:7f:ff:42:5f:29:6c:ed:4a:22:c6:06:
                    f1:3b:10:92:aa:3d:71:e1:6a:4b:2a:f5:70:d9:1f:
                    46:ad:63:7e:76:21:2e:e0:96:41:ff:88:c2:84:78:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2E:6B:43:46:6C:87:73:3C:DC:69:CE:4B:BD:A9:91:33:FD:8B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9dd5dcc5-b100-39c6-8111-c9020f713e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:fc:cc:df:8a:7b:e1:51:07:10:3b:50:43:65:63:d2:ea:a2:
         bd:a0:98:ed:05:87:0d:37:c5:15:fe:28:f1:1f:1d:0e:cd:71:
         e8:64:87:02:20:84:c4:c6:31:bb:d9:53:7c:e8:b3:b7:7d:30:
         e7:9a:eb:81:21:c7:8a:2d:fa:e6:fb:9f:af:c9:44:3b:71:1d:
         32:9c:5e:e9:2f:63:04:72:f8:66:12:cd:67:db:06:91:a3:78:
         d5:65:e4:36:dd:d2:44:16:38:64:69:56:8e:d6:45:c0:35:02:
         d5:fd:b9:25:2e:1e:c5:1d:77:bf:06:50:cc:d6:e9:e5:cf:dd:
         9c:a9:71:88:92:af:2a:69:24:3e:b5:15:66:b5:8a:37:cc:29:
         1d:6c:0f:40:c8:6b:73:ed:f9:5f:ee:10:13:60:80:77:c6:2a:
         dc:cc:1a:5e:2b:11:38:24:54:15:11:cf:f3:ca:3a:93:d8:f3:
         0b:64:46:12:2e:b2:17:b1:57:ad:21:20:9d:20:a9:3b:1e:fa:
         17:ef:50:b0:61:76:14:fe:55:0a:f8:aa:76:12:41:0e:2f:09:
         85:9e:e4:e4:72:ce:d9:fc:23:bc:f8:2d:bb:28:b2:2a:9e:a0:
         dd:58:e7:26:0a:85:2b:96:9d:b1:b0:cc:1d:5d:af:dd:1d:60:
         f8:ce:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:32 2026 by rpki-client