Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a01ed031-da55-390e-8a06-14c9d33d2825.roa
File:                     a01ed031-da55-390e-8a06-14c9d33d2825.roa (raw, json)
Hash identifier:          bGA/v2+wvPMqVTa0JTvcgUjX/HTgp01tEnzPOwGqhfs=
Subject key identifier:   2B:D9:4F:83:FD:C8:14:8A:00:0F:D1:D7:5C:72:F3:9D:ED:2C:50:D9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E577F4F834D55E093552F5A80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a01ed031-da55-390e-8a06-14c9d33d2825.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        204.195.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:4f:83:4d:55:e0:93:55:2f:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=869c29f4-60d5-4ebf-882c-3fbfe8b9f256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:3c:c7:c7:02:60:fc:94:17:41:7c:cc:74:
                    58:ab:44:44:a8:f9:cd:0f:8d:06:84:32:87:ce:c6:
                    35:46:fc:14:9f:4d:16:9c:71:0c:6e:26:6d:58:8c:
                    d3:8a:b8:e2:f7:18:25:e4:af:33:a3:de:23:4a:51:
                    df:0e:ee:9f:22:9b:84:dc:61:b2:ce:ea:98:45:e3:
                    8d:e2:da:e4:14:8b:45:25:f8:b9:38:24:c5:83:16:
                    22:c5:77:2a:33:d6:e1:fc:90:f2:06:ca:8c:46:f3:
                    cd:f9:0d:69:38:46:2b:5a:70:e6:1f:d3:e5:19:f7:
                    21:05:d3:50:f5:90:58:2e:df:bf:d0:45:b7:92:f5:
                    97:03:7e:5f:2a:8c:0c:26:f3:1a:c6:01:31:6c:2c:
                    75:b0:20:1f:ba:93:72:23:90:91:b0:4c:19:46:dc:
                    87:1e:7d:f4:c7:31:c6:d0:6b:62:53:f2:ab:18:bf:
                    4d:38:2d:71:8c:17:0c:9b:37:d8:cf:1c:ec:21:e7:
                    76:3a:e3:d7:ef:8e:ac:ea:35:64:2c:93:db:21:34:
                    a0:c2:0d:57:d4:51:84:c2:8b:3d:f4:79:42:0b:88:
                    c2:a0:11:d9:00:58:30:d6:3a:09:34:2e:c9:8b:58:
                    2f:c2:6e:88:ec:0e:d0:5e:df:2c:d3:e2:28:a2:33:
                    37:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D9:4F:83:FD:C8:14:8A:00:0F:D1:D7:5C:72:F3:9D:ED:2C:50:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a01ed031-da55-390e-8a06-14c9d33d2825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5c:47:02:6c:9f:a9:8f:0b:65:b3:d7:6f:33:cf:0e:c6:87:
         4a:c8:60:5d:47:2d:88:a2:39:06:4a:44:62:52:2d:e7:04:2c:
         53:c2:18:15:b5:af:eb:59:cf:69:7e:7c:f6:44:69:72:4f:6b:
         9c:be:25:5d:a3:15:f1:90:2a:5b:fc:1a:0a:98:3c:3b:17:7e:
         0a:bc:c9:73:9c:9c:90:2f:63:bf:88:af:c7:01:81:66:18:62:
         77:3a:bd:11:75:91:11:91:fb:fe:bf:00:68:2a:7d:f5:08:83:
         d8:77:93:1c:e4:25:1b:d4:af:07:cf:cb:e7:4a:ba:bf:76:fe:
         53:3c:e7:6a:9b:a0:71:30:f1:2f:99:65:c6:35:ee:f0:c9:51:
         86:e0:76:12:e1:88:b8:39:64:1a:8e:b3:e0:ed:e4:d2:33:62:
         58:d0:73:94:c6:f9:6a:f6:e3:ac:75:0b:97:56:70:be:c8:80:
         88:6a:4a:3f:8b:9c:87:a4:cc:ae:26:cf:68:99:8a:56:c2:ed:
         f2:10:b7:07:dc:02:3a:70:a6:c9:9f:54:37:9a:6e:8e:f5:36:
         ce:83:79:95:62:de:de:96:f5:24:56:c3:c1:b1:ca:ce:c6:4e:
         64:f1:f3:89:0d:d8:8c:59:84:07:a3:eb:fb:f0:2a:d6:2c:05:
         41:38:0d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:50:43 2026 by rpki-client