Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c4c10a24-c8f0-3426-bdeb-c18ed04dccbf.roa
File:                     c4c10a24-c8f0-3426-bdeb-c18ed04dccbf.roa (raw, json)
Hash identifier:          eUPn3qLtwvU1CLAaBJD8hSGpuoPu8c3W9+/JO/VjbGk=
Subject key identifier:   64:79:BB:A5:8B:F7:59:77:1C:7E:A0:5D:6B:36:8A:9A:52:6F:4D:A5
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584BB5C260D5AFBD767827847080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c4c10a24-c8f0-3426-bdeb-c18ed04dccbf.roa
Signing time:             Sat 01 Nov 2025 01:00:30 +0000
ROA not before:           Sat 01 Nov 2025 01:00:30 +0000
ROA not after:            Fri 30 Jan 2026 02:00:30 +0000
asID:                     13335
IP address blocks:        204.195.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b5:c2:60:d5:af:bd:76:78:27:84:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  1 01:00:30 2025 GMT
            Not After : Jan 30 02:00:30 2026 GMT
        Subject: CN=1ee8ff8e-b6b3-4c06-9e7d-8aed279658f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0c:ff:79:e4:b2:d3:4a:6b:23:2f:14:59:1a:
                    fe:77:33:20:63:fb:08:46:ab:53:7d:e5:49:2f:73:
                    99:49:68:ff:0c:1a:4c:f0:aa:1b:76:83:20:a2:15:
                    a2:17:2b:72:1e:2d:94:07:21:a4:7c:29:2c:a6:af:
                    dc:39:91:e8:f9:ba:56:6f:fc:3c:39:de:30:2a:19:
                    98:6c:83:7a:98:40:06:22:78:e2:42:71:52:b7:11:
                    b1:b2:67:6c:59:93:72:64:0e:38:2a:74:39:9d:de:
                    b7:aa:09:6a:34:c6:b1:04:9d:be:b7:c0:b4:ba:aa:
                    97:3b:2e:63:b0:39:fd:44:e7:79:1a:cd:d9:c3:57:
                    52:f6:03:24:32:37:05:e1:86:e2:fa:7b:91:c0:b4:
                    60:27:29:ca:b0:9a:48:ea:ab:cc:63:2f:b2:cb:29:
                    ba:75:51:26:e2:76:8f:b2:c3:86:fd:77:e4:1c:f2:
                    90:b1:54:9e:fc:b9:bf:bd:be:15:6a:a5:cc:b3:e6:
                    e1:8b:d9:27:c6:51:ce:79:6b:f2:1a:04:e9:1f:7f:
                    27:ca:2c:c4:b7:0c:9d:46:1a:7b:e5:00:30:71:99:
                    0e:1b:ee:6c:91:a5:c2:07:b0:00:fb:8d:74:52:1b:
                    02:9e:d5:48:6a:42:0b:3d:f2:c0:92:45:3c:5e:38:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:79:BB:A5:8B:F7:59:77:1C:7E:A0:5D:6B:36:8A:9A:52:6F:4D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c4c10a24-c8f0-3426-bdeb-c18ed04dccbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b5:6d:e1:07:ae:eb:ff:d9:24:dc:08:e1:94:2c:58:55:21:
         a9:21:3f:80:37:f5:bb:5a:d7:a1:f1:48:88:26:10:a3:2d:b0:
         c7:72:e6:ce:cd:e2:43:0f:2b:7b:2b:aa:8d:67:67:55:08:59:
         37:6d:7e:42:d0:00:df:21:e9:8b:b8:41:0e:3c:18:d5:64:31:
         3b:d6:a7:18:6c:c4:a7:74:d0:b9:4e:89:4b:22:5d:39:cd:80:
         ed:b0:ff:0c:41:0f:5b:9c:8c:8c:08:47:21:18:23:0b:e6:22:
         06:f7:be:24:17:f5:ba:34:1a:26:8a:47:5e:c0:34:7f:d5:cd:
         e3:21:4a:04:90:f6:88:bd:ca:71:9f:2d:6a:74:e8:f8:e0:84:
         ea:a4:85:28:b2:18:74:d1:1f:6a:ba:ff:b7:e2:04:fa:6b:6e:
         56:ef:ed:a0:16:a8:06:ac:bc:60:0a:0e:fa:de:da:ab:90:91:
         1f:ac:38:f0:be:da:0c:48:75:18:38:fd:cd:f3:d9:ba:11:1e:
         5b:5d:01:90:ef:5e:62:8a:79:50:c5:e2:f5:58:bd:f2:38:8d:
         76:fb:db:cb:15:af:5d:8d:d5:43:e0:1b:b6:a3:69:88:35:8c:
         e2:61:a0:c7:a4:01:2d:16:ff:38:0a:10:aa:4e:ec:e2:41:52:
         f3:d4:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:40:39 2025 by rpki-client