Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ed2c9832-b48d-32ca-b5ad-e7b85eb638fa.roa
File:                     ed2c9832-b48d-32ca-b5ad-e7b85eb638fa.roa (raw, json)
Hash identifier:          OjXGRAAH+qJAzWX9H4/2KJ4zT7g0F46obLkHOwCbupE=
Subject key identifier:   4F:B7:93:5A:00:B0:5B:8B:D6:A3:8F:9A:F5:B7:F3:BB:89:CE:52:28
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584BB5C264058C24DEF3F513F580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ed2c9832-b48d-32ca-b5ad-e7b85eb638fa.roa
Signing time:             Sat 01 Nov 2025 01:00:30 +0000
ROA not before:           Sat 01 Nov 2025 01:00:30 +0000
ROA not after:            Fri 30 Jan 2026 02:00:30 +0000
asID:                     13335
IP address blocks:        204.195.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b5:c2:64:05:8c:24:de:f3:f5:13:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  1 01:00:30 2025 GMT
            Not After : Jan 30 02:00:30 2026 GMT
        Subject: CN=ed723be0-202b-4f09-a846-7590a6b050a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:03:ae:e9:ab:85:e5:c2:2d:45:35:1f:fa:
                    18:c4:22:de:37:6b:5f:ac:d6:5d:5a:14:06:eb:4e:
                    57:c5:f3:fd:22:e6:41:02:0d:b3:b0:93:b0:51:60:
                    8d:3a:88:c1:01:38:4a:60:83:b4:3e:f0:39:7a:1d:
                    03:be:c7:78:cd:e3:2b:24:39:20:0a:86:d8:cf:ac:
                    04:32:22:75:5b:4f:f8:24:b6:4c:85:32:1c:c9:3f:
                    77:30:7d:37:42:01:b6:8f:8d:cf:7f:97:c7:83:f1:
                    31:f0:88:48:e2:8a:74:40:0d:21:3c:03:e1:c0:28:
                    eb:c5:f8:4e:d8:44:90:5d:0f:b8:e1:e1:44:b0:78:
                    d4:cf:31:da:7d:ba:a5:75:10:7e:f8:0c:3b:5d:19:
                    e5:3a:7b:2d:76:d5:97:0c:b0:e5:e3:92:ce:6a:21:
                    80:b0:73:e9:cd:07:6f:b1:79:47:d6:4a:6d:4d:25:
                    cf:a7:a5:52:0f:db:09:15:4c:20:ee:8d:40:09:ba:
                    c9:e2:14:7e:84:03:50:99:05:92:03:09:99:f3:92:
                    eb:0f:3f:67:5c:25:33:f4:c2:fd:91:73:33:b9:be:
                    55:c0:06:d6:67:8b:e7:c6:3a:62:50:c7:4d:df:7b:
                    24:a7:4a:55:d2:1f:e9:42:c5:cc:b1:e1:eb:32:f5:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B7:93:5A:00:B0:5B:8B:D6:A3:8F:9A:F5:B7:F3:BB:89:CE:52:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ed2c9832-b48d-32ca-b5ad-e7b85eb638fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:62:27:63:ed:b0:a8:ab:27:b1:7a:b2:ec:25:3d:5d:5c:00:
         d9:bc:fb:28:cc:ab:02:9d:3b:fe:2f:1c:22:64:0a:43:10:ee:
         36:91:3d:b2:9c:6f:31:d3:fc:aa:7c:45:db:19:65:0d:87:4b:
         3a:12:65:93:58:23:a9:91:e5:a1:2d:64:42:4f:2f:9d:0b:c8:
         32:6b:60:3e:91:cd:cf:1b:df:5e:28:14:17:4d:3d:06:c3:d1:
         5b:a3:93:b3:38:17:60:16:3c:d8:46:b8:7f:10:e4:3c:eb:a3:
         91:ae:67:65:77:90:31:83:83:52:ed:31:bd:4f:4f:db:aa:64:
         b8:d7:45:85:16:38:10:a5:36:87:73:26:6b:a2:69:47:e7:ef:
         bf:94:55:16:75:05:00:50:4e:68:c4:89:cc:e7:3e:ad:60:09:
         00:32:4a:1d:09:c6:94:45:bc:c6:78:b1:04:8a:ef:5a:ab:55:
         0e:14:c7:1f:d2:b6:e5:f1:ad:9a:cd:a6:90:ae:60:94:81:5f:
         31:af:84:99:16:84:b7:2b:c9:dc:0d:af:56:b6:e1:a3:d9:5e:
         b0:a9:34:b5:51:b0:1f:19:a5:63:d1:5e:06:1c:0c:aa:86:0f:
         ca:85:6c:7c:36:b0:47:e8:04:e7:c6:ff:c1:cf:cd:94:13:38:
         69:12:4f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:58:57 2025 by rpki-client