Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb710018-ebd9-3e8e-8c04-e794a9471f2d.roa
File:                     bb710018-ebd9-3e8e-8c04-e794a9471f2d.roa (raw, json)
Hash identifier:          pZuHft28Zyf4nK9Fsx6MSmlH1Pb1IWx3fV+bfB/49oo=
Subject key identifier:   5F:50:4D:9C:E1:06:94:CD:CD:C3:01:31:17:32:C8:8F:A0:2E:4B:A9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858491511646BFBDD1B78E9039E80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb710018-ebd9-3e8e-8c04-e794a9471f2d.roa
Signing time:             Wed 05 Mar 2025 02:00:40 +0000
ROA not before:           Wed 05 Mar 2025 02:00:40 +0000
ROA not after:            Tue 03 Jun 2025 01:00:40 +0000
asID:                     13335
IP address blocks:        204.195.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:11:64:6b:fb:dd:1b:78:e9:03:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar  5 02:00:40 2025 GMT
            Not After : Jun  3 01:00:40 2025 GMT
        Subject: CN=0d56725a-d276-417e-957b-0dfe767078b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4f:2d:d9:9c:24:db:e3:ee:c2:aa:5f:43:25:
                    60:01:54:1e:1e:62:e6:03:82:6a:67:6f:49:ff:c6:
                    49:2a:17:8c:26:d7:34:54:8d:42:61:97:81:77:0a:
                    ee:9f:5c:e3:62:96:9d:c0:4c:47:e9:0a:25:5d:b5:
                    13:5c:72:7f:c6:bf:e4:8f:af:71:52:c2:22:11:16:
                    54:e1:d1:c1:b5:ee:95:3c:3e:13:89:b6:0e:77:12:
                    48:b0:3f:b0:6d:02:20:46:6e:e0:10:0d:9a:e1:a8:
                    67:69:3d:27:0f:9b:5e:2d:f8:8f:1e:6e:25:d0:a1:
                    20:96:68:13:cb:b8:44:c6:cd:81:f9:e6:4b:bd:f0:
                    ce:09:8b:ea:f2:92:20:d0:b6:d4:70:55:24:1a:7d:
                    5c:de:e0:78:07:a2:40:79:a4:82:c0:43:39:68:75:
                    97:2a:2c:e8:3f:bf:f0:c3:bb:f5:be:d4:b1:53:3f:
                    3c:b0:6f:e1:05:a4:5f:d2:0d:22:de:f7:f3:cf:8f:
                    c9:b8:48:95:0a:c6:3c:63:30:a5:e5:17:94:d3:c5:
                    58:3d:79:25:0f:8c:0e:a0:76:3c:3b:1d:5d:36:92:
                    cc:1c:6b:a7:94:8b:d3:2b:01:8d:b0:d8:a6:c1:5c:
                    91:ba:67:d6:07:5a:60:70:4b:7f:62:81:ae:ac:59:
                    ab:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:50:4D:9C:E1:06:94:CD:CD:C3:01:31:17:32:C8:8F:A0:2E:4B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb710018-ebd9-3e8e-8c04-e794a9471f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:80:b3:c4:19:dd:79:5b:37:39:33:dc:2a:52:95:a8:38:78:
         b4:ba:a4:2e:57:94:bd:dc:e1:d2:bc:ce:ec:cf:c3:02:c3:7a:
         36:0e:cd:bd:54:e2:f1:f0:6b:59:89:4a:b2:8f:03:cd:6d:4e:
         3f:b5:35:c8:1d:6f:74:c8:00:31:6b:f1:d0:cc:b0:c2:f4:65:
         71:aa:8e:39:3f:35:f7:83:42:50:46:e8:50:f5:3b:19:c0:b5:
         75:4f:19:08:05:eb:59:3d:a8:47:17:a1:a9:8f:07:68:89:09:
         dc:be:8e:93:bb:d7:f5:ba:4c:8b:27:2a:1a:36:f5:fd:36:0e:
         58:fb:48:aa:f0:45:b0:d8:ca:2d:16:19:ee:a1:20:75:f5:72:
         34:fe:62:3a:20:78:fd:9f:04:7c:a4:a2:da:7a:e5:2f:a2:ff:
         44:fa:99:90:25:b4:3d:9e:a2:5f:1f:61:32:36:c4:5f:28:b9:
         39:eb:d2:0f:7a:84:f4:ee:a7:56:41:90:11:0e:5d:9c:e2:b2:
         5a:3c:df:3b:a2:3d:91:60:97:76:04:71:ae:96:57:bb:74:d1:
         ce:81:d0:96:9c:89:33:c9:00:11:e7:65:e7:cc:df:47:9d:46:
         95:2d:02:f4:43:8c:c0:94:e1:fc:4e:5f:ff:ac:c2:17:42:ee:
         7f:75:94:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:05:40 2025 by rpki-client