Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/01d8f1c7-9f82-3cbe-bcf5-29fba324d049.roa
File:                     01d8f1c7-9f82-3cbe-bcf5-29fba324d049.roa (raw, json)
Hash identifier:          vC9xugxV7N2xoNho2xfaAq9e9SJeJvyTIC4uhSQdua8=
Subject key identifier:   B3:17:79:04:E6:E0:F4:34:60:A8:3D:36:E4:A1:47:5C:48:0A:8F:53
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584B1806DF0DF065155DFB96A480
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/01d8f1c7-9f82-3cbe-bcf5-29fba324d049.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     11290
IP address blocks:        24.226.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:df:0d:f0:65:15:5d:fb:96:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=86a6796f-79d7-4c74-8a39-694c22543305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cd:d7:c6:99:1f:7e:35:ac:33:e9:08:5f:4f:
                    f8:af:af:cf:5c:68:5e:43:02:b9:06:ae:92:6b:31:
                    b5:03:45:44:c7:db:61:75:89:29:69:73:6f:06:93:
                    5f:bc:73:92:e0:cd:a9:68:70:16:70:ee:65:6c:f5:
                    5d:48:b1:47:51:33:7a:3e:b2:a2:ae:00:cc:a7:c3:
                    94:23:79:a8:b4:01:bd:3b:7d:7d:39:cd:83:58:1f:
                    6c:71:97:d2:0d:22:d6:d3:46:02:a7:a9:7b:86:09:
                    ec:b1:80:fb:82:c7:ae:c7:08:3b:7d:f5:b0:b8:8c:
                    55:65:44:bd:73:57:22:2f:d7:83:a0:22:db:a4:4f:
                    15:74:3e:06:09:cc:cf:54:e9:1a:ad:b7:0a:f6:a2:
                    d0:93:a1:ae:ab:48:e4:08:14:17:63:7a:8c:08:37:
                    08:ad:c9:86:b3:59:a4:48:db:0a:5d:73:a6:10:f7:
                    27:51:58:8b:d1:4d:8f:6e:b1:06:0a:91:2a:eb:f6:
                    88:39:fc:37:e3:a8:73:f9:8d:56:cd:6b:ef:f0:a8:
                    25:84:4e:b7:5e:b0:c0:81:ff:c7:b5:f8:fa:73:6e:
                    44:58:62:53:6a:b7:fb:15:61:10:19:6d:f4:f8:26:
                    ce:25:09:e1:9a:f3:d4:c8:c5:37:11:c7:6c:e7:28:
                    98:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:17:79:04:E6:E0:F4:34:60:A8:3D:36:E4:A1:47:5C:48:0A:8F:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/01d8f1c7-9f82-3cbe-bcf5-29fba324d049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.226.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d1:81:e4:a7:cd:e7:53:d0:36:41:01:91:02:a5:90:8d:4e:
         ef:58:0f:ce:b2:3b:73:89:22:81:39:9c:d4:f2:4f:67:3b:34:
         dd:7e:2b:5d:b2:9d:61:ba:40:19:65:cd:0d:84:7e:8c:21:9f:
         33:93:53:86:4d:2e:09:c7:28:f9:5d:fd:20:19:25:bf:1e:ec:
         bd:8b:07:60:1e:de:e8:98:f5:bb:6d:51:f7:ef:df:01:40:17:
         88:a3:09:5d:a2:40:6d:8f:90:4f:d6:ac:d5:b5:51:57:28:93:
         e6:a7:05:89:19:8a:83:58:7e:59:47:85:b6:13:68:cd:b6:90:
         57:88:56:ac:42:e0:5f:f2:a3:e9:48:57:ae:1d:26:45:46:23:
         b7:31:cd:e2:0c:bf:a7:ba:9d:cd:09:f9:ad:a6:54:3b:9b:41:
         e8:1c:b8:0c:27:07:7c:20:a1:a6:57:5f:84:0a:03:87:ef:85:
         6a:87:c4:5f:9e:25:45:a2:ef:76:5f:a8:3f:93:ed:21:cf:9f:
         14:d7:34:ff:3b:77:95:31:15:fb:36:7e:b6:e8:1c:43:6b:07:
         91:42:1f:51:73:f4:0f:52:e2:00:24:ba:1e:da:69:c6:8a:19:
         80:6c:c2:d8:1f:38:c1:93:33:bf:e5:aa:3a:ec:22:ce:cc:8f:
         57:10:0c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 14:17:16 2025 by rpki-client