Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f7c4b62b-b0c1-38ee-9f8f-7d4bc50cd1df.roa
File:                     f7c4b62b-b0c1-38ee-9f8f-7d4bc50cd1df.roa (raw, json)
Hash identifier:          ilI+JDzgIpIy+aRpWAZjols+RHcwyUSKeMjip/Hzg7E=
Subject key identifier:   F2:E9:6C:A6:E2:45:F3:C7:29:67:55:C7:BA:42:BD:11:94:76:41:2E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D773A7861651CED3149CE7380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f7c4b62b-b0c1-38ee-9f8f-7d4bc50cd1df.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     13335
IP address blocks:        204.195.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:78:61:65:1c:ed:31:49:ce:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=9d194139-3243-4ad6-ad18-5614ae790458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9a:3b:85:81:d8:85:93:5d:c3:54:bb:47:8b:
                    55:8b:a3:d0:a2:34:21:d3:4c:a0:51:94:d5:f2:66:
                    be:83:d3:e3:1d:35:f2:c1:55:ec:92:8f:28:08:c2:
                    e7:fe:3f:12:6c:f7:55:84:20:75:a9:64:90:27:25:
                    a9:36:bd:97:b9:1c:2e:d4:77:cc:7a:de:09:49:e0:
                    c2:8b:2d:5e:b5:93:53:0e:32:25:8c:95:76:7a:04:
                    3f:ec:e2:df:54:aa:09:e9:52:ad:a8:65:d8:95:e9:
                    9e:23:97:50:a8:3e:60:51:d6:1c:5b:70:5c:dd:2e:
                    b4:74:6f:e3:98:51:62:bd:44:a1:a6:cf:90:83:e6:
                    05:fa:a8:e7:ee:4e:8a:fe:da:8e:7f:eb:0c:15:a2:
                    68:67:4a:00:13:13:8d:34:18:a1:d3:d3:49:79:e0:
                    b6:82:15:6e:56:a3:2f:ce:d8:9e:dc:9f:2e:64:fc:
                    98:26:73:77:64:d0:6d:9f:7a:b9:2d:52:ac:e7:0a:
                    98:ae:22:e5:15:f2:15:fd:c1:2f:d6:ab:1f:66:5c:
                    a8:d2:df:41:c6:89:80:46:e9:55:c1:e7:d0:90:33:
                    cf:d5:30:94:38:f3:8c:cc:ca:f5:47:57:a8:41:30:
                    a7:9f:14:f3:e9:b8:20:89:8e:3d:8a:14:7b:54:5e:
                    75:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E9:6C:A6:E2:45:F3:C7:29:67:55:C7:BA:42:BD:11:94:76:41:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f7c4b62b-b0c1-38ee-9f8f-7d4bc50cd1df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:0d:35:13:e8:e2:2a:78:84:53:5c:89:91:2f:96:f8:b9:5d:
         ea:10:cc:a6:ff:12:f9:16:b0:8b:38:35:a8:2a:2b:e7:ef:5d:
         39:ae:c3:61:ac:83:85:f1:b1:94:7a:68:78:29:43:72:de:84:
         51:ac:e6:f4:10:23:46:88:13:1b:5c:7a:8f:f3:b2:58:a6:4d:
         8c:dc:6d:c7:ab:93:2c:e1:e1:df:d4:02:83:4a:ee:ab:8b:7f:
         a1:ca:42:02:9d:2e:96:56:9f:65:8b:bc:e3:b6:9a:f3:15:40:
         fb:5d:06:87:36:e7:20:5c:24:56:16:11:76:b9:40:85:dc:ca:
         99:68:f2:88:06:01:76:9a:6f:d5:91:ba:bd:84:24:24:8e:32:
         85:11:53:08:be:52:5d:bd:ba:b8:89:1b:25:cd:b8:a0:b6:55:
         e7:64:ff:08:63:bb:33:78:7e:69:68:90:fd:bb:df:c5:66:c7:
         7c:28:a9:41:af:d7:13:7a:dd:cd:8b:b1:18:f5:bb:e1:01:b4:
         d7:fd:5a:b0:3a:db:03:aa:0e:81:ec:e2:5a:0b:e2:0e:0f:07:
         f6:07:61:1b:8d:50:c0:ed:f6:bd:75:cb:38:a6:03:fc:a9:ed:
         f5:4f:08:66:56:ea:e0:88:e2:8e:16:64:a9:83:40:d6:6b:31:
         60:a6:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:04 2026 by rpki-client