Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0266bffb-6bbd-3489-aa00-9f2f2b234249.roa
File:                     0266bffb-6bbd-3489-aa00-9f2f2b234249.roa (raw, json)
Hash identifier:          15K6F9urL4tvT/dpbs30SYkX/VGWmg8TbXFQP7UodLA=
Subject key identifier:   36:1C:47:7D:54:BB:5B:BC:1D:10:CB:31:0A:09:0B:84:45:1E:94:34
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E577F5269F7B676581873F980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0266bffb-6bbd-3489-aa00-9f2f2b234249.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        204.195.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:52:69:f7:b6:76:58:18:73:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=042792e2-f45a-4b52-8fe4-c241f067c815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:7d:53:d6:08:26:0d:4f:60:f7:b6:b5:1f:
                    c9:cc:21:a8:bd:67:40:97:fa:67:31:a3:fa:64:2b:
                    e1:85:47:ff:71:8b:d7:af:1d:7e:89:a3:06:04:56:
                    a3:63:bd:01:cf:3f:e1:03:7a:4d:08:b6:e0:b1:03:
                    96:74:83:1d:83:b4:6a:ef:0b:80:d3:17:76:98:90:
                    39:13:dd:69:8d:a8:2e:57:88:89:22:83:d1:23:75:
                    a9:f1:17:fd:7a:38:56:10:5c:ab:01:22:41:e0:7d:
                    40:95:59:9e:96:33:5e:af:34:94:fd:8f:98:dc:3c:
                    cf:ae:af:28:34:c4:b3:c0:21:7e:4e:e8:f7:1d:8d:
                    ee:eb:35:ef:94:27:08:f7:70:c9:7e:d2:66:5a:6e:
                    c3:94:4f:70:ff:c1:a3:d9:cd:4a:f3:4e:f1:87:97:
                    25:ee:1b:1d:84:21:a9:20:f3:33:86:09:a8:87:1a:
                    8d:9c:92:46:de:5e:48:c9:ee:dc:be:d0:c9:f7:0b:
                    a4:18:5b:0b:6c:60:68:a1:47:68:12:72:f5:cb:b2:
                    11:8e:d4:89:33:88:d6:d6:f3:c3:23:45:e7:0f:fe:
                    5a:51:7a:49:9a:d7:7b:8e:51:17:4e:0c:82:b5:5b:
                    99:ec:dd:23:ee:7c:9c:ac:e8:62:f9:e8:4f:f6:77:
                    cc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1C:47:7D:54:BB:5B:BC:1D:10:CB:31:0A:09:0B:84:45:1E:94:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0266bffb-6bbd-3489-aa00-9f2f2b234249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:8a:e7:b4:9c:71:b1:d3:47:3b:f8:f6:61:96:3d:09:41:
         93:61:74:d6:ba:ea:6d:1d:80:32:ba:d5:ec:84:bf:d4:a7:be:
         77:f8:01:e3:08:18:35:a6:49:26:34:e0:2d:c0:6a:a3:e1:1b:
         0b:d8:5c:f7:28:d4:b0:99:99:16:27:9b:db:dc:2c:7b:ed:82:
         5a:0a:aa:a0:71:43:d9:25:a3:29:12:a1:04:ab:23:b9:bc:7b:
         6f:e2:1c:c3:36:2f:bb:3c:87:d6:a0:45:3a:f7:1e:67:5e:c0:
         9a:f6:47:9b:4b:da:1c:66:ae:75:4c:bf:84:a0:b5:53:12:ca:
         d4:83:57:6e:01:cd:87:fc:d2:ac:b0:83:4c:e8:d5:a4:eb:fb:
         a0:b8:df:ba:31:1a:f5:12:c8:23:04:1d:7d:2c:15:82:67:53:
         b3:09:98:98:70:00:b8:fe:77:0e:eb:71:15:56:74:a0:cd:29:
         73:0d:bc:a5:5b:4a:a0:19:1e:b6:97:67:62:cb:ea:80:7d:18:
         8b:d8:65:2f:7f:76:69:07:6c:da:f2:a5:aa:6a:80:16:e7:bf:
         3d:85:ca:14:a1:bd:a4:22:d4:78:79:c4:89:30:79:14:dc:ec:
         10:fb:e6:d5:3e:d2:45:4c:50:78:11:86:ab:ac:53:82:aa:40:
         f6:b0:0d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:50:44 2026 by rpki-client