Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fcffe815-2a18-38d0-9061-3af5eec28d94.roa
File:                     fcffe815-2a18-38d0-9061-3af5eec28d94.roa (raw, json)
Hash identifier:          br4xOsoZBh6JRSWR3VXaXAIJA58RjERWV3Ba3DolaXE=
Subject key identifier:   BF:F4:58:D1:98:60:01:F5:D5:D4:59:F1:9A:C1:33:9B:F5:24:98:62
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849F44A6649FD7A38D62A810A51
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fcffe815-2a18-38d0-9061-3af5eec28d94.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        204.195.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:66:49:fd:7a:38:d6:2a:81:0a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=1426abfc-7976-4a59-bea7-bdc59f1d1263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:78:9a:b7:3e:1b:cc:d0:e0:9a:28:6b:10:
                    90:84:7f:be:88:7d:ec:48:39:7e:e9:30:69:30:c7:
                    31:29:3c:dc:71:14:93:35:9d:06:9b:23:87:3a:dd:
                    bc:60:dd:2e:1a:22:ab:0f:59:03:03:a1:7a:dc:1a:
                    b8:5d:e9:24:c5:45:c4:80:ca:6e:f4:66:a6:12:57:
                    52:28:a9:4a:2a:7f:11:7c:7b:47:ed:8b:f8:49:d2:
                    64:8f:52:d8:17:33:48:3f:57:a8:d6:15:e4:b6:59:
                    dd:4b:a4:b0:e0:6f:c8:e4:b8:a3:e0:bc:0f:16:03:
                    ef:31:02:f0:45:8f:41:b6:92:30:90:9e:37:a1:07:
                    d7:b0:f8:44:2d:27:9c:04:e3:c6:e0:14:4e:8a:a5:
                    05:84:b1:33:2e:43:78:48:cf:b2:74:32:78:52:53:
                    10:4b:18:af:a7:79:ff:27:c4:3c:7b:6c:7f:cc:30:
                    3a:4d:a8:73:9c:14:08:2d:fd:c9:46:e7:b9:4e:f8:
                    b1:f4:71:9c:88:37:5d:41:05:21:bb:2c:cc:44:43:
                    b5:9c:95:c0:2b:71:bc:9e:e9:1e:ef:21:7d:cf:69:
                    f8:f2:77:66:b4:1a:91:17:5b:c2:ea:1d:b8:28:23:
                    2e:1f:e9:5c:13:77:d0:c5:4c:11:d0:ce:d6:7b:71:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F4:58:D1:98:60:01:F5:D5:D4:59:F1:9A:C1:33:9B:F5:24:98:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fcffe815-2a18-38d0-9061-3af5eec28d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:7f:b0:91:52:c6:2d:53:87:c4:2c:de:f6:59:4e:d8:85:61:
         b9:1b:5c:a8:21:cd:ec:73:73:7e:de:9d:20:d1:29:85:09:17:
         a4:87:e0:2b:ea:d5:b4:08:45:78:3f:5e:b7:74:f7:78:a0:27:
         74:29:97:64:2b:6c:77:ae:b8:da:75:18:8c:15:b7:5a:a4:b8:
         d4:51:60:31:0c:ab:0c:e7:89:c5:5a:a7:58:25:12:03:12:b0:
         49:27:b6:58:28:2a:df:83:c2:df:45:11:22:56:b2:08:8b:0c:
         2b:04:f9:d3:c7:36:e4:cf:3e:1e:a5:30:f0:69:9d:40:74:d4:
         b4:f1:f8:df:09:87:a3:17:7e:8d:8c:3f:82:bc:96:79:b2:27:
         92:db:3a:6f:76:0e:98:3e:8f:b4:33:2d:7d:7c:ea:6d:42:1b:
         0d:f8:5e:12:62:7c:f4:b6:13:3b:5e:db:5b:eb:b8:88:5d:c4:
         c6:f9:6d:78:90:7b:cb:a6:7c:7d:ec:b0:82:53:a5:bf:07:4e:
         3c:cb:9a:1b:82:b9:b1:f8:ee:cc:8d:77:a3:79:7e:ad:ff:1c:
         f3:5d:4f:ff:f9:ec:34:14:89:8e:a4:1e:cc:ac:b8:4f:54:56:
         95:19:81:56:ce:58:df:15:60:2a:a1:11:5e:4f:52:0d:a4:3a:
         59:1a:2c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:26:33 2025 by rpki-client