Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6079fd24-5122-3b87-8865-333b76a70b17.roa
File:                     6079fd24-5122-3b87-8865-333b76a70b17.roa (raw, json)
Hash identifier:          H1eJqImmiGh0NElxoyKsER5CEeqqh1jff/oTtU+M9nU=
Subject key identifier:   E8:75:7F:C2:0D:20:75:8D:1C:EB:03:CB:B7:B2:FD:68:AC:C1:93:6E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584915116613EB1914208AA0B480
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6079fd24-5122-3b87-8865-333b76a70b17.roa
Signing time:             Wed 05 Mar 2025 02:00:40 +0000
ROA not before:           Wed 05 Mar 2025 02:00:40 +0000
ROA not after:            Tue 03 Jun 2025 01:00:40 +0000
asID:                     13335
IP address blocks:        204.195.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:11:66:13:eb:19:14:20:8a:a0:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar  5 02:00:40 2025 GMT
            Not After : Jun  3 01:00:40 2025 GMT
        Subject: CN=e1f06dc8-73f1-4d1a-a88c-5cfee54bb05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:af:9b:3d:75:c8:ea:2a:d3:cf:b2:2b:8b:c9:
                    e8:2d:7f:67:4d:42:93:9f:4c:d0:98:ba:d8:d1:df:
                    78:b2:af:ab:21:3f:52:77:7c:a6:0d:05:08:86:8d:
                    52:7c:6d:42:77:0c:ac:4b:d5:37:78:87:bd:b9:08:
                    4a:e6:0c:09:64:b6:5a:af:08:a3:ce:89:71:57:8f:
                    bc:93:83:00:95:dc:f0:b2:de:2e:7f:58:b9:59:0f:
                    0d:58:b0:a5:53:73:0c:39:d6:43:53:27:0d:82:95:
                    95:8a:3a:ef:16:b0:cf:ba:07:34:14:fb:32:40:f4:
                    0c:06:bd:73:8d:f8:17:ef:92:fd:eb:ef:86:b2:74:
                    34:9a:5b:34:8e:12:d2:b9:c5:de:cf:c9:84:93:5f:
                    f7:da:3c:ec:71:06:be:4d:c0:bb:84:7c:07:6b:fd:
                    fe:0f:8f:69:30:ef:ab:09:9d:f7:c9:6b:35:cd:a3:
                    57:aa:f5:af:58:8c:45:11:5d:c4:b6:17:4c:ca:a0:
                    09:0f:4f:17:85:5c:60:ff:db:e4:fa:ed:b5:b3:44:
                    a7:81:c7:13:c8:41:70:73:52:97:73:11:6b:18:e4:
                    23:c1:44:a3:90:da:6d:d8:fe:bb:40:7d:a4:b8:d1:
                    c2:d4:a8:3b:48:44:6b:01:fc:c4:30:fa:89:b7:59:
                    db:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:75:7F:C2:0D:20:75:8D:1C:EB:03:CB:B7:B2:FD:68:AC:C1:93:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6079fd24-5122-3b87-8865-333b76a70b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:58:4e:98:ac:c4:3f:eb:48:8d:14:c4:46:05:42:82:2e:41:
         17:cd:35:6c:2d:f2:3b:36:dc:00:f0:2e:1e:18:0a:4f:08:64:
         8e:75:88:2e:49:cd:31:63:fe:fd:34:3e:ed:43:95:dd:44:eb:
         da:b5:88:98:d3:eb:d1:5c:c7:a0:e5:b5:fd:e1:21:8f:6c:fe:
         fb:f1:fc:3c:47:ff:6f:1d:43:0a:bc:6e:1a:7c:5e:6c:f1:56:
         48:9a:f2:a0:b2:74:ab:71:51:c7:40:e1:26:81:91:d1:08:59:
         07:c6:31:7f:7e:a2:f7:e4:bb:72:9c:a6:70:14:f7:6c:99:45:
         1f:e6:d0:f5:5d:1d:63:d7:47:39:d3:50:2e:80:54:a4:bb:40:
         4a:05:2d:ef:58:cb:db:08:bd:a0:8d:ed:12:c2:72:18:bf:b6:
         8e:ba:69:e3:0b:de:a6:0f:d1:5c:ce:1a:0c:0f:ca:5d:b7:ff:
         94:61:c5:f4:cb:f2:52:00:ec:25:56:d3:13:34:30:0e:59:8f:
         d8:42:23:65:f9:56:95:f9:ed:2a:89:16:41:01:46:2b:fd:3e:
         fb:ec:b8:16:54:bb:63:c9:0d:12:3a:f5:4f:51:d4:00:64:f7:
         6c:ef:c1:21:67:1b:bc:68:09:de:c4:8b:67:3d:57:28:6c:e2:
         48:f1:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:26 2025 by rpki-client