Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7152a092-7f19-341b-b5f3-972ca01e6254.roa
File:                     7152a092-7f19-341b-b5f3-972ca01e6254.roa (raw, json)
Hash identifier:          Fl5f8901hWjQhTCyyunsZAolSCiAjnxHj58wUhk03ww=
Subject key identifier:   65:1B:96:04:30:A5:1F:60:39:CF:E0:E9:A7:84:F5:11:07:7C:53:B5
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E66DA3384E2F2E60B2CCAD540
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7152a092-7f19-341b-b5f3-972ca01e6254.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     13335
IP address blocks:        204.195.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:33:84:e2:f2:e6:0b:2c:ca:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=ce957b85-385c-4b52-83e9-253131f0a019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:52:e3:45:5a:ea:49:12:08:ef:5f:ef:40:
                    64:31:03:68:7d:09:b5:f1:ba:ed:1f:fd:3a:9d:63:
                    14:a8:18:e6:48:65:dd:ca:0a:4c:50:a3:84:87:38:
                    8f:e7:40:67:d2:9e:e5:39:f2:ef:4b:f3:34:ae:3d:
                    55:6d:39:f1:e7:e0:6c:d6:4f:93:f9:1f:21:f9:23:
                    25:c4:cf:d5:95:74:29:6c:3b:48:fb:05:0a:45:b7:
                    d7:1c:9e:6b:da:f6:35:e3:03:4a:fb:56:6f:e6:c7:
                    35:88:73:57:3c:a9:33:00:4f:d3:54:2b:a6:e0:ca:
                    f1:24:6f:c5:de:4d:d8:cb:5d:1c:ff:a3:ac:d3:d3:
                    c9:98:1a:41:8d:9a:d7:c3:ec:c9:5c:30:84:a8:43:
                    3b:5c:dd:76:51:f4:51:30:f5:0d:c4:1f:d0:4c:69:
                    d8:e8:4e:52:d9:92:1e:f7:7b:b0:45:59:3f:e3:d8:
                    04:23:30:42:bb:86:41:3d:ca:e6:de:94:0a:d0:13:
                    1d:51:d0:50:1b:a2:f6:de:ca:d4:03:52:5b:3e:dc:
                    7d:b4:54:be:76:1a:16:e9:1a:b5:fe:49:90:32:f6:
                    79:6b:71:40:2f:64:89:b1:a4:6d:40:f2:6d:7e:09:
                    b6:fb:e1:09:3f:b3:90:80:ff:d9:0b:bf:0e:50:2a:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1B:96:04:30:A5:1F:60:39:CF:E0:E9:A7:84:F5:11:07:7C:53:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7152a092-7f19-341b-b5f3-972ca01e6254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d2:79:55:14:74:05:5d:eb:02:03:4b:df:71:b5:23:56:a8:
         59:e0:3c:1f:e2:70:2f:59:e1:ce:f6:00:a2:d6:bc:71:82:88:
         11:fd:95:f9:0f:c8:70:78:69:6a:1e:0d:ba:1d:08:96:fe:d8:
         8b:62:4a:f3:c4:99:fe:3b:e5:2a:1a:05:92:9a:89:67:5e:17:
         8e:13:65:b5:63:47:a2:7e:ed:f1:ab:fa:fe:44:0b:42:7e:a7:
         2a:3f:06:ca:f7:c3:86:f3:4e:f9:10:0c:ff:58:bb:bc:55:8e:
         4a:27:be:43:bf:bd:07:df:97:f9:4f:00:7c:6b:65:40:be:98:
         c4:4e:70:77:4e:28:9d:62:d8:ee:61:ba:e9:8f:e5:04:8c:4e:
         8f:5a:1b:8f:80:c8:c2:6f:c1:57:b2:9e:bc:df:f0:92:1c:66:
         4a:bd:79:d4:b7:b5:ac:44:78:01:cb:25:1b:cb:97:c5:1c:2e:
         52:de:41:40:63:ef:6b:12:06:a2:07:6c:4c:40:f7:9a:b1:c3:
         cb:6c:c5:06:9c:52:23:9f:0c:b4:5c:44:d7:3b:aa:b4:1f:5e:
         59:32:79:8e:a0:72:08:46:fa:70:8e:5d:5d:9a:28:e0:42:c2:
         41:95:f5:2c:db:9b:c6:de:25:f3:1d:4b:8d:bd:aa:ed:3e:22:
         c4:fa:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:50:27 2026 by rpki-client