Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa
File:                     ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa (raw, json)
Hash identifier:          Df8VP8/ouR8XbACi301uMs+8N+h4bWeMYlyLQSnHi6o=
Subject key identifier:   DF:5F:17:5B:EE:00:43:40:DF:68:59:CE:4D:5F:19:34:12:D7:63:0E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849F44A66FD6FB1F9E9F4326740
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        204.195.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:66:fd:6f:b1:f9:e9:f4:32:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=a4534914-6a19-4fe7-9e8e-d7d9bd4dafb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:8c:4e:3e:cd:12:89:14:a0:c8:8e:24:91:
                    25:43:a2:de:f7:91:bf:a5:56:01:8d:eb:95:3d:19:
                    41:6c:01:80:4f:7a:b2:14:8f:6c:7d:98:25:d8:c3:
                    5a:8a:c8:30:7a:f7:12:64:05:6e:ac:a9:0c:1d:a7:
                    31:6d:44:4e:6f:d5:d9:71:83:d8:87:3d:b7:97:07:
                    54:ea:06:42:c9:79:d3:3b:48:03:3b:07:f4:81:a5:
                    21:70:1b:ae:ec:db:be:c2:36:ee:d8:c0:2c:ef:2c:
                    65:77:2f:f6:37:33:63:31:19:80:ba:ac:69:e4:24:
                    0c:a9:a9:d9:ba:04:72:aa:59:c5:4a:5b:a4:45:00:
                    f7:0c:44:fd:f4:3a:04:de:65:60:04:38:a7:4f:8c:
                    86:e7:e2:f7:df:fc:52:34:b6:f4:fb:7d:46:97:0d:
                    c7:cc:d7:fb:19:c4:9f:96:76:f0:6e:8f:48:85:68:
                    69:e9:e5:82:3d:81:c3:41:eb:4a:01:12:52:d2:7f:
                    8f:ec:d3:fd:59:93:dd:b4:a4:db:df:bb:cd:6b:1d:
                    b5:8c:65:99:4e:77:47:3f:56:6e:3a:76:ec:2e:f0:
                    32:e2:9f:78:da:97:11:10:22:87:3b:62:fb:85:a7:
                    20:58:98:26:b6:ef:25:b7:c9:f2:9d:ed:fc:21:03:
                    ba:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5F:17:5B:EE:00:43:40:DF:68:59:CE:4D:5F:19:34:12:D7:63:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca6d3c9f-9b47-3af8-8644-ca25680b88d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:5b:b3:33:d3:d8:c9:5f:2e:11:34:bd:51:1c:2e:c3:6e:
         6e:3b:79:8c:e0:2d:3e:6a:85:45:ab:99:80:36:c0:d4:cb:90:
         72:2d:30:c0:f3:c6:84:63:a0:3b:75:0e:1f:d4:00:d8:9a:e1:
         05:08:39:b1:19:7c:f8:21:d5:19:99:ff:91:b9:32:cf:76:2a:
         63:44:f4:9b:b9:72:ca:55:cf:60:22:38:f6:ff:58:1d:a5:c1:
         39:e3:07:9e:1f:1f:25:df:62:c5:84:f1:51:91:25:8b:7c:97:
         42:ec:3a:c2:a2:a2:af:98:a9:3d:3f:f6:1a:34:46:da:d4:40:
         82:b1:d9:f9:00:61:0f:59:91:f0:f3:90:08:b2:09:51:10:ed:
         e7:05:21:0e:ec:35:1a:1a:67:53:3f:87:44:35:7d:2b:f0:a2:
         fe:c6:18:0b:3a:8d:66:d8:ad:d1:49:3d:1c:5a:59:0e:8e:55:
         03:36:ac:21:68:13:34:a4:83:b9:d8:c4:03:62:73:75:e2:4f:
         1c:6d:dc:18:dd:2b:13:ce:ed:2a:a6:f1:8e:a0:ff:7b:a9:d2:
         f8:8d:86:d6:e3:f0:d2:26:ee:be:c0:23:0f:cd:bb:54:bc:c0:
         c2:06:fb:7e:e1:be:da:d1:e9:be:e9:80:d1:7f:c5:d5:f7:79:
         8f:b4:43:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:25:25 2025 by rpki-client