Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3da3962-a423-3a05-a507-30064af54fd3.roa
File:                     e3da3962-a423-3a05-a507-30064af54fd3.roa (raw, json)
Hash identifier:          xMqO8Bosc7i4gF9J6GvngoYBFyEnpXgJHO+oRZnUl+8=
Subject key identifier:   3F:7F:5A:89:C5:30:09:51:2E:11:1F:5E:13:CE:4D:71:43:69:4F:F6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584EF9E218B0733AE8E1D2B2BCC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3da3962-a423-3a05-a507-30064af54fd3.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        204.195.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:18:b0:73:3a:e8:e1:d2:b2:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=1e5cfaca-4354-4dbe-bdc5-8a72136e2985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:a6:1e:f6:79:d1:40:c5:e6:e6:65:6a:45:
                    3e:98:0f:c2:74:7f:92:f4:38:e1:52:68:fe:1e:c0:
                    e0:9e:3a:d7:8a:f4:42:5c:45:94:63:39:1e:44:38:
                    09:bb:38:76:49:e5:bd:73:f9:43:e4:a8:f5:29:6d:
                    ff:84:31:09:a9:1e:1a:2c:7d:69:91:94:4b:c5:96:
                    ab:39:96:b2:a4:57:b1:1a:6c:26:71:96:dc:00:56:
                    9d:e1:9f:1c:fa:dc:85:b4:17:5a:24:08:21:2b:4e:
                    5c:92:40:19:d9:25:52:a6:c7:7d:f6:23:8a:ce:46:
                    80:ff:a3:18:de:ba:a5:e7:e2:da:26:b4:59:1a:59:
                    2e:ba:64:ef:a1:24:7c:68:af:fa:4b:1a:b1:2c:ac:
                    50:f7:15:f9:5b:46:2d:75:3f:e6:d5:cc:d9:c8:07:
                    e2:2c:06:91:3d:03:32:bd:03:b9:53:d4:4f:48:80:
                    9f:a4:d2:1e:48:6e:22:5f:48:68:62:2f:61:54:5d:
                    b2:16:33:b2:02:b3:aa:0e:4d:08:56:fe:b1:5a:ec:
                    55:a9:bf:8b:98:35:0f:04:ab:8d:f2:f9:42:9f:7e:
                    f2:2e:a2:43:8a:bd:42:bd:6c:6f:87:2b:a2:19:86:
                    56:48:6a:d3:8a:b4:d3:5e:9b:19:50:fd:e8:1b:7b:
                    2e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7F:5A:89:C5:30:09:51:2E:11:1F:5E:13:CE:4D:71:43:69:4F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3da3962-a423-3a05-a507-30064af54fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:cd:d8:2f:b0:0e:04:78:b2:d1:07:e3:05:bc:2e:35:0e:07:
         27:23:75:aa:2f:e5:9c:4a:e3:1f:6e:6b:f7:a5:be:6c:0f:17:
         f5:b7:cc:e6:24:37:e6:de:e9:2b:2e:fe:0a:1e:a1:03:56:82:
         51:c5:7b:31:f2:56:6e:ae:1e:8a:de:80:49:a7:d8:d5:7a:f8:
         12:31:70:db:8f:04:fc:a6:8c:48:da:cf:47:55:f5:9f:a2:15:
         a3:6a:d6:17:f3:ba:12:87:60:36:2f:d3:4c:77:86:2f:dc:90:
         7e:c4:c8:25:1d:46:dd:fd:1f:c5:d5:89:28:4e:26:35:95:8c:
         f3:bb:d2:63:3b:51:75:36:16:53:2d:bd:36:a4:ef:5a:33:ae:
         cd:c2:52:32:c9:68:84:6c:86:db:9d:05:e8:9f:61:ba:d5:5c:
         6d:47:70:e4:f3:fa:55:b9:6b:03:54:92:71:a3:25:bc:59:a6:
         44:46:67:c3:b5:92:f2:c4:3e:99:5e:d4:0b:c6:7e:61:55:5a:
         90:47:04:14:f1:b8:e1:8b:61:54:b3:70:ad:e2:f0:62:9d:1d:
         b1:22:b9:93:e8:fb:c2:a1:5a:ef:c8:98:ea:44:c3:08:3b:12:
         3e:86:e5:3a:b1:21:78:0b:f2:69:bb:01:4e:fd:dc:57:18:23:
         8d:0f:08:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:15:55 2026 by rpki-client