Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1d84a17d-66c9-3b6d-9936-f5fb9d110241.roa
File:                     1d84a17d-66c9-3b6d-9936-f5fb9d110241.roa (raw, json)
Hash identifier:          zXSJJyRDDzXqZvvx39GEnxvIZPLoQriO9G7XATg2taM=
Subject key identifier:   EF:2F:99:98:25:2E:8E:A3:F2:79:3A:BC:77:D8:2D:80:B3:ED:EA:B2
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584953C44D43843171D4587A73A0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1d84a17d-66c9-3b6d-9936-f5fb9d110241.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     11290
IP address blocks:        157.208.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4d:43:84:31:71:d4:58:7a:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=fa84358b-2337-49d1-9880-78ab10a79efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:dd:dd:31:68:0b:5e:bb:b3:ac:80:7c:b3:
                    a7:7b:43:58:1b:cc:96:c5:61:16:85:e7:89:50:4c:
                    cf:36:97:06:43:b2:d7:bd:1e:ec:9b:50:5b:a3:cd:
                    b5:a0:6f:2e:f1:89:08:d8:e8:d3:4d:e4:e9:c9:0c:
                    e9:49:a0:2b:b0:3e:97:3d:d3:5a:c3:03:82:db:ee:
                    3e:5c:e4:85:73:2a:e8:c4:ec:b0:25:7f:2d:3d:69:
                    86:22:3f:75:09:93:09:db:00:bf:f0:3a:99:47:1f:
                    64:6f:b4:f2:ec:a0:13:71:0e:c6:c8:57:21:58:81:
                    d5:e1:12:d2:42:c7:79:c1:87:6e:83:af:3e:78:e0:
                    44:36:e7:e2:e8:e2:8e:d9:46:86:7d:26:f1:6e:9f:
                    7b:d2:19:35:6b:54:90:18:42:72:2a:1f:cd:b8:32:
                    5b:5d:88:2b:21:8e:d3:0c:29:fa:b1:7a:48:3f:b2:
                    f7:bd:da:cd:b7:b2:38:c6:f0:25:a9:5d:44:25:65:
                    85:de:22:b5:71:3d:b9:42:87:63:3c:e0:a7:a0:a0:
                    2a:42:64:17:b9:42:45:b3:f2:46:8c:c4:0b:1e:82:
                    18:a9:44:3d:d8:8e:38:66:52:41:8f:f4:85:ae:2c:
                    ea:3d:a4:8d:3d:d4:5a:45:ea:3f:f8:aa:ee:d3:73:
                    07:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2F:99:98:25:2E:8E:A3:F2:79:3A:BC:77:D8:2D:80:B3:ED:EA:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1d84a17d-66c9-3b6d-9936-f5fb9d110241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.208.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2a:ab:34:26:86:ba:51:cb:3c:0d:9a:5b:4f:cd:2d:6d:06:
         97:3c:e3:cc:61:44:bb:71:cc:85:7c:ef:95:71:54:fa:31:c0:
         70:c0:e9:72:6f:65:a4:f3:b8:d3:b2:3f:b5:37:89:5f:82:4c:
         4c:a0:39:5f:a6:7f:20:bb:38:cb:b5:62:d8:73:07:f2:85:f9:
         01:d2:4f:7d:4d:35:bd:9d:49:e2:db:b3:bd:bb:cb:ab:5c:a6:
         3a:a1:92:1a:71:0c:b8:05:b9:34:4f:29:77:35:5b:73:85:aa:
         40:65:de:8a:95:b3:e1:c4:a0:c5:ec:7a:34:b8:e6:65:56:bf:
         da:9d:fd:9c:d1:e2:5f:84:f4:fd:c0:c7:ad:77:07:5a:37:5e:
         0d:3f:9f:b7:70:a3:20:43:be:d3:01:66:53:20:2f:c5:af:eb:
         f5:94:05:1f:22:1e:55:78:49:c5:73:23:c9:f2:43:61:04:1b:
         18:bd:88:26:a0:06:0a:3d:78:6b:03:c6:79:d8:48:d0:b4:2c:
         b9:f4:03:ab:10:82:39:a9:96:21:6a:92:98:55:f3:99:a8:ab:
         01:ef:85:d3:b8:9a:dd:c5:6b:45:f5:2e:d1:46:04:0f:74:ff:
         13:ac:fb:2e:9c:38:04:50:8f:90:f3:f4:da:be:47:71:17:3a:
         76:c0:df:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:06 2025 by rpki-client