Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/532d166f-101c-31f9-9346-a4fc524e4d69.roa
File:                     532d166f-101c-31f9-9346-a4fc524e4d69.roa (raw, json)
Hash identifier:          Ul6nLfz5DLKq95Zbr3BUIx3eQ8einsWrPCHmSW9ysjc=
Subject key identifier:   EB:51:DF:67:02:73:2D:9C:AE:F9:AD:8D:5E:F5:F9:61:1B:A9:AA:6C
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584EF9E21B7354FE489237B41160
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/532d166f-101c-31f9-9346-a4fc524e4d69.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        204.195.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:1b:73:54:fe:48:92:37:b4:11:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=990bcfdf-939c-41fe-bb65-cb25aebe3e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:25:c2:ab:40:17:75:ae:ae:7b:05:4a:e9:3e:
                    53:32:22:f1:2a:d6:78:80:c4:fe:9f:d1:25:7c:4b:
                    a3:b0:8b:21:2a:ff:20:fe:a6:ac:0c:ed:1a:66:83:
                    14:a4:51:98:fc:59:d1:fc:51:21:58:34:b5:8b:6d:
                    64:40:96:69:27:50:48:87:6e:87:9e:c7:fe:c9:41:
                    fa:fb:85:dd:60:03:d6:db:cf:3e:3d:06:28:00:09:
                    d9:21:d0:e3:92:87:ee:57:6d:40:47:c1:fb:c9:88:
                    7f:a8:d0:da:a0:f7:79:9a:1b:3f:40:bc:8d:47:93:
                    3b:b5:7f:70:91:0c:7d:57:93:5e:99:c1:3e:4d:61:
                    7b:fe:bb:3a:a3:51:b7:d3:d8:c4:6a:76:09:7d:36:
                    13:bc:06:0b:15:fa:7f:c4:f4:49:83:0f:4b:d7:3b:
                    c4:61:56:e3:4a:c4:d6:65:82:df:96:d4:3d:99:3b:
                    ad:9e:b8:e2:e5:4f:23:e5:71:d3:75:6c:6e:85:60:
                    c6:8f:6c:6f:53:37:f1:63:8e:eb:e0:9e:53:e3:a6:
                    ca:a7:e6:03:ef:10:5b:c1:c8:87:e9:69:03:e3:49:
                    3a:52:24:cb:d8:d7:d3:aa:29:04:3b:87:97:75:f0:
                    19:03:ca:6a:fd:89:15:dd:68:78:3a:2c:45:36:9a:
                    23:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:51:DF:67:02:73:2D:9C:AE:F9:AD:8D:5E:F5:F9:61:1B:A9:AA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/532d166f-101c-31f9-9346-a4fc524e4d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:cb:5f:11:86:ca:5a:d4:2f:78:96:22:52:89:49:d0:9d:4c:
         e5:d4:65:ca:13:e4:cb:3a:cb:22:fa:72:f3:f5:83:49:f1:32:
         16:35:1f:0f:0f:77:16:55:17:c8:40:9a:a8:1c:58:14:3e:13:
         b5:60:0e:96:83:64:f0:a1:4f:80:a0:10:b1:2e:af:df:3d:bf:
         13:64:8c:36:b4:d4:cf:3f:a8:3d:09:ba:21:fc:29:34:60:f0:
         af:e8:91:6e:14:91:5f:b5:80:c3:35:0a:81:90:7f:55:de:53:
         0b:94:f2:90:7a:39:29:57:0b:2f:30:a8:12:29:49:be:ac:7d:
         99:2c:09:f9:81:85:7a:45:89:7d:58:34:ee:64:9e:af:bb:2c:
         b9:fe:79:3e:67:76:86:ba:80:69:39:fa:1b:6b:fb:7f:d7:00:
         6d:c5:31:f7:24:2d:fc:87:55:97:18:20:68:d8:75:5d:9b:3a:
         3b:6c:1b:5e:14:e4:21:37:7c:69:61:24:15:0e:53:f2:be:8a:
         0d:91:40:4b:a3:3d:64:01:31:7c:3b:04:9f:c8:bd:42:c7:bd:
         88:b4:c9:d5:ae:b8:aa:2c:46:93:e3:16:ca:2b:f0:cd:80:18:
         bd:0f:09:3a:12:e5:24:43:13:2e:74:64:c0:6b:a2:6b:18:b2:
         fd:93:f7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:56:35 2026 by rpki-client