Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/996fdb20-fc5a-3408-8b85-ad4946b759e6.roa
File:                     996fdb20-fc5a-3408-8b85-ad4946b759e6.roa (raw, json)
Hash identifier:          e5wDDRyiHSNxHHVY7t8rUH0qaJLybnjpmeWQ11VZjuk=
Subject key identifier:   63:74:0A:4C:91:8A:17:97:13:A4:15:A7:79:8C:9F:E1:7F:CD:54:CE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E66DA3390CCFCB03189DBAA60
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/996fdb20-fc5a-3408-8b85-ad4946b759e6.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     13335
IP address blocks:        204.195.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:33:90:cc:fc:b0:31:89:db:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=543e06c4-ae3f-401d-8a7c-72ea7aee8928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e3:a3:e7:2b:59:a1:82:06:f0:f5:ac:61:d4:
                    16:93:27:07:a9:76:8a:01:05:7d:a4:c0:c8:69:1f:
                    59:09:8e:bb:bd:c2:c5:29:c2:80:9c:ea:82:19:c4:
                    b7:1a:72:be:3f:39:78:d5:a4:17:ca:65:f7:80:9e:
                    b6:7b:7c:a6:3b:a2:bf:22:79:75:36:34:35:d5:ab:
                    df:f0:3d:1d:94:6d:7a:95:14:2b:2d:59:04:b3:1e:
                    a2:0a:11:a3:df:24:30:27:50:a2:5f:2c:a1:6b:c4:
                    c1:79:26:42:20:cf:fa:ed:70:26:86:03:cb:4f:fc:
                    fb:3a:f4:15:23:b6:29:f0:fe:7b:89:bf:f1:6f:4e:
                    55:2d:71:5e:76:27:3c:43:d9:34:a3:b5:dc:7c:be:
                    cc:94:1a:f1:58:9b:d3:2b:ff:58:3f:6c:ee:a9:7a:
                    c7:e3:52:79:9b:f9:8e:2a:ec:0a:5f:8b:66:43:b9:
                    37:36:f2:29:9a:28:0a:6f:ee:e2:3f:d6:c1:54:87:
                    c0:9d:94:ee:43:1c:2f:5c:94:d8:c5:e2:d4:c9:b0:
                    7c:9c:2b:74:79:53:08:12:d1:57:78:3e:3a:c5:f9:
                    7c:e8:5d:66:df:cf:ca:02:fb:d2:b3:6e:be:be:2d:
                    f6:83:02:8b:3f:3a:29:b4:c5:cb:8c:f9:04:49:cf:
                    3e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:74:0A:4C:91:8A:17:97:13:A4:15:A7:79:8C:9F:E1:7F:CD:54:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/996fdb20-fc5a-3408-8b85-ad4946b759e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:24:7e:c3:90:85:35:9e:46:7c:11:aa:99:ff:39:a8:d5:22:
         2e:14:47:08:2c:d8:c8:5a:92:ce:fa:7b:ea:2d:2e:86:29:e8:
         9e:6b:9c:f2:7c:44:76:14:47:72:fc:e8:8a:f9:55:47:f2:24:
         a5:a0:71:5e:29:a9:d2:7f:ae:22:d9:18:9a:9b:4e:ea:be:3f:
         d5:31:f5:c5:1e:cb:1f:38:30:42:ef:89:78:cf:c6:0a:eb:65:
         1d:84:f8:99:58:c4:20:5e:75:37:da:70:30:41:9f:0a:df:6f:
         bc:f0:fa:a3:3e:10:56:8c:23:79:41:de:de:04:88:7b:ec:d9:
         2d:c9:53:24:21:35:7e:39:2c:7e:d9:a6:8f:b9:b0:d9:d4:3f:
         e0:b7:1b:e4:4d:ec:20:49:5f:0c:4a:f3:c4:df:0b:83:d8:ff:
         3e:48:5f:2f:1b:c2:b2:cd:b5:7f:dd:64:fd:22:34:70:d3:2e:
         40:a9:a5:42:1d:68:e6:8f:b7:8b:94:c3:a2:85:22:6d:d7:a1:
         f2:2c:5a:2a:52:b6:e5:b0:01:86:c3:18:af:9c:46:54:fb:f6:
         6a:30:19:f6:88:53:c0:b3:37:f8:70:cc:50:ad:06:c8:41:a2:
         77:b8:0d:f4:15:9b:2c:8d:8d:1c:a5:ef:c3:75:49:83:ff:65:
         f8:ed:74:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:47:18 2026 by rpki-client